Google Deploys Gemini AI to Detect Scams in Android Messages and Calls
New Android features use cloud-based AI to analyze texts, block fake bank calls, and hide sensitive data during screen sharing.
Key points
- Google Messages introduces an opt-in Enhanced protection mode using Gemini models to detect scam intent in chats with unknown senders.
- Android 15 will hide login and payment fields in Chrome during screen sharing and block apps from silently enabling call forwarding.
- Verified financial calls allow Android to check with bank apps to confirm caller identity, blocking impersonation attempts from institutions like Banco do Brasil.
Google announced new artificial intelligence-driven scam defenses for Android on October 14, introducing an opt-in Enhanced protection mode for Google Messages. This feature utilizes Gemini models in the cloud to analyze text conversations with unknown senders, aiming to identify fraudulent intent earlier than previous methods. The company stated that this mode will begin rolling out to devices in the coming weeks.
The system processes these messages within Private AI Compute, a secure environment where data remains encrypted and inaccessible to Google employees. Separately, a device-based check using Gemini Nano will scan unfamiliar links before users tap them. According to The Next Web, this on-device protection is scheduled for Pixel 10 and later models, the Galaxy S26 series, and select Galaxy Z Fold and Flip devices.
Context and Background
Google reported that its existing Scam Detection tools already flag more than 5 million suspected scam calls and texts each month. The company is expanding these alerts to chat notifications on devices from Motorola, OPPO, OnePlus, vivo, and Xiaomi later this year, according to 9to5Google. This expansion follows earlier privacy and security changes, such as the automatic linking of phone numbers across Google accounts on Android, as Threat Times reported on October 16, 2026.
Android 15 introduces privacy safeguards for screen sharing by hiding login and payment fields in Chrome when users share their screens. This change is rolling out this month. Starting in early December, the operating system will prevent apps from enabling call forwarding in the background, a tactic scammers use to steal one-time passcodes. The phone will also warn users before any typed forwarding code takes effect.
Who Is Affected
Google has added verified financial calls to protect users from bank impersonation scams, partnering with institutions including Banco do Brasil, Itaú Unibanco, and Revolut. When a call arrives, Android checks with the bank’s app to verify if the institution actually placed the call, hanging up if it did not. Since launching in June, this feature has blocked over 3 million fake calls posing as Banco do Brasil and Itaú alone.
The push for stronger defenses comes as fraud rates climb globally. According to Brazil’s bank federation, FEBRABAN, bank impersonation scams in Brazil rose 195.7% over a 12-month period. The global scam economy reached $442 billion in 2025, prompting Google to also sue a scam ring accused of using Gemini to build fake websites.
What should you do?
Users should monitor their device settings for the new Enhanced protection mode in Google Messages and enable it to benefit from cloud-based analysis. Those sharing screens via Chrome should ensure they are running Android 15 or later to automatically hide sensitive login fields. It is also advisable to verify incoming calls from financial institutions through official apps rather than trusting caller ID alone.
What to do and how to stay safe: Google
- Enable the Enhanced protection mode in Google Messages once it becomes available on your device to utilize cloud-based scam detection.
- Update your Android device to version 15 or later to ensure login and payment fields are hidden during screen sharing sessions.
- Verify the authenticity of calls from banks by checking the institution's official mobile app rather than relying solely on caller identification.
- Be cautious of apps requesting permissions to manage call forwarding, as Android will soon block background changes to this setting.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which devices will support the new on-device link checking feature?
The Gemini Nano link check will come to Pixel 10 and later, the Galaxy S26 series, the Galaxy Z Flip and Z Fold8, and some other phones.
How does the verified financial calls feature work?
Android checks with the bank’s app to confirm if the bank really placed the call, and hangs up if it did not.
When will the call forwarding protection be active?
Android will stop apps from turning on call forwarding in the background starting from early December.
