Android Deploys AI Scam Alerts, Call-Forwarding Blocks and Screen-Sharing Shields

Google has introduced new anti-fraud measures for Android, including AI-powered scam detection and safeguards against call-forwarding abuse. These updates aim to intercept threats before users engage with them, addressing the growing complexity of modern social engineering attacks.

The enhanced protection mode in Google Messages leverages Private AI Compute, which utilizes cloud-based Gemini models to analyze conversation context. According to Google, this system encrypts data and processes it in a secure environment, ensuring that message content remains inaccessible to Google or third parties.

Alberto Pastor Nieto, Senior Product Manager at Google Messages, and Shaifali Bhandari, Product Manager at Android, stated that built-in defenses are necessary because scams have become too difficult for users to identify manually. The company is actively working to intercept these threats before they reach the end user.

Context and Background

With Enhanced protection enabled, on-device Gemini Nano evaluates unfamiliar links using real-time web signals before users click them. This builds upon existing checks for known malicious sites, providing an additional layer of scrutiny for connections outside a user's known contacts.

Redesigned warnings will now appear when users attempt to open links from numbers not saved in their contacts. These alerts provide more context and time for decision-making, a feature previously limited to select countries or devices with Android Advanced Protection enabled.

Google is collaborating with Android device manufacturers to expand Scam Detection within chat notifications later this year. This initiative will flag suspicious messages in the notification shade before users open supported messaging apps, extending the feature beyond Pixel devices.

Who Is Affected

Android is extending screen-sharing protections to include Chrome and Android WebView, not just native apps. During live screen-sharing sessions, these updates will automatically blank out login fields and payment screens to prevent credential theft, rolling out this month to devices running Android 15 or later.

To stop scammers from intercepting one-time passwords, Android will block apps from enabling call forwarding in the background. If a user enters a man-machine interface forwarding code on the dial pad, a warning will appear before the code takes effect.

Call-forwarding protection will be available starting in early December on Pixel and other select devices. Enhanced protection in Google Messages will roll out in the coming weeks as an opt-in setting for supported devices.

What should you do?

Users should check for the Enhanced protection setting in Google Messages once it becomes available in the coming weeks. Enabling this opt-in feature activates the AI-driven scam detection and improved link warnings for messages from unknown senders.

Device owners running Android 15 or later should ensure their systems are updated to receive the expanded screen-sharing protections. This update automatically blanks sensitive fields in Chrome and WebView, reducing the risk of credential exposure during live sharing sessions.

Users on Pixel and other select devices should monitor for the call-forwarding protection update in early December. This feature prevents background call forwarding, protecting one-time passwords from being intercepted by scammers via man-machine interface codes.

Background: Social engineering

Look for urgency, secrecy, and deviation from standard channels. Verify identity through a separate, known communication path before acting. Isolate suspicious interactions immediately to prevent lateral movement within your network environment.

Read the full guide: Social Engineering Warning Signs and How to Respond

What to do and how to stay safe: Google

• Check Google Messages settings for the new Enhanced protection toggle once it rolls out.
• Update Android devices to version 15 or later to receive expanded screen-sharing safeguards.
• Monitor for the early December update that blocks background call forwarding on supported devices.
• Remain cautious of requests to enter man-machine interface codes or share screens during calls.

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Does Google read my messages when using Private AI Compute?

No, Google states that Private AI Compute encrypts data and processes it in a secure, dedicated space, keeping it inaccessible to Google.

When will call-forwarding protection be available?

Call-forwarding protection will be available starting in early December on Pixel and other select devices.

Which apps are covered by the new screen-sharing protections?

The protections now cover Chrome and Android WebView, in addition to native apps, on devices running Android 15 or later.