Google Rolls Out AI Scam Defenses Across Android Messages and Calls

Google on October 14, 2026 announced a new set of AI-powered Android scam defenses in an Android Security blog post, led by an opt-in Enhanced protection mode in Google Messages, as the company said its Scam Detection tools now flag more than 5 million suspected scam calls and texts every month.

The post, authored by Alberto Pastor Nieto, Senior Product Manager for Google Messages, and Shaifali Bhandari, Product Manager for Android, combines the new messaging defenses with expanded scam alerts in chat notifications, screen-sharing privacy for Chrome, call-forwarding safeguards, and a verified financial calls program aimed at bank impersonation.

Enhanced Protection Mode in Google Messages

Enhanced protection is a new opt-in security setting in Google Messages, and Google said it will roll out in the coming weeks. With the setting enabled, Scam Detection can draw on Google’s cloud Gemini models through Private AI Compute to assess complex message context and identify a possible scammer’s intent sooner in conversations with unknown senders. Google said the cloud analysis supplements its existing on-device detection and is built to surface novel and sophisticated attacks, and that messages processed in Private AI Compute are encrypted and handled inside a dedicated secure environment that remains inaccessible to anyone else, Google included.

A footnote adds that users can optionally report a text message as spam, which sends the message and its contents to Google for analysis. The Private AI Compute analysis is available on Pixel 6 and newer, the Galaxy S24 series and newer, Galaxy Z Flip and Z Fold6 and newer, and other Android AICore devices.

A second layer applies on-device Gemini Nano to weave real-time web signals into link safety, checking whether an unfamiliar link is trustworthy before the user taps; Google said attackers routinely register brand-new websites that existing protections have not yet cataloged. The Gemini Nano link checks are available on Pixel 10 and later, the Galaxy S26 series, Galaxy Z Flip and Z Fold8, and other select devices.

A third layer adds redesigned warnings that slow users down with added context before they open links arriving from numbers outside their contacts, a checkpoint previously limited to devices in select countries or running Android Advanced Protection. The link warnings are available on devices running Android 6 or later.

Chat Alerts, Screen Sharing and Call Forwarding

Beyond Google Messages, Google is partnering with Android device makers to expand Scam Detection in chat notifications, a feature that launched on Pixel and flags suspicious messages in the notification shade before the user opens a chat app. The post’s footnotes name HONOR, Infinix, iQOO, itel, JOVI, Motorola, OPPO, OnePlus, realme, TECNO, vivo, and Xiaomi as participating manufacturers, with availability varying by manufacturer, and Google said the on-device protection will reach hundreds of millions of additional users later in 2026.

Android is also extending its automatic hiding of sensitive information during screen sharing — already applied in native apps — to Chrome and Android WebView, obscuring login fields and payment screens while a screen-share session is live. The feature is rolling out during October 2026 to devices running Android 15 or later.

On the calling side, Android now prevents apps from silently switching on call forwarding in the background, and it warns users before a manually entered MMI forwarding code on the dial pad can take effect. Google said scammers use such redirection to intercept incoming calls and steal one-time passcodes. Call-forwarding protection will be available starting in early December 2026 on Pixel and other select devices.

Commissioned Testing and Survey Findings

The post points to an independent, Google-commissioned evaluation published in October 2026 by Leviathan Security Group that compared the Pixel 11 Pro, iPhone 18 Pro, Galaxy S26, and Motorola Razr 2026 on built-in, no-cost features enabled by default. According to the evaluation, Android devices deliver the strongest default scam protections of the group and outperformed iOS across core built-in tools such as proactive call screening, fake call detection, and Circle to Search threat warnings; a footnote states that some features may not be available in all countries.

Google also cited a survey it conducted with YouGov in June and July 2026 covering 4,500 adult smartphone users in the United States, Australia, and Canada. Google said 40% of respondents described themselves as very or extremely concerned about mobile fraud, and that while most respondents reported never falling victim to a mobile scam and rated their device at least moderately effective at protection, iPhone users were significantly more likely than Pixel users to report falling victim to a scam and to call their device not effective at all.

The survey footnote lists 2,400 respondents in the U.S., 1,200 in Australia, and 900 in Canada, with results weighted to reflect the adult smartphone population in each country. The pool was limited to users who had been exposed to a mobile scam attempt, used Google Messages or Apple Messages for at least 25% of their messaging, and did not use third-party call or message screening apps; comparative scam-experience questions were answered by a qualified subset of 2,658 respondents.

Real-Time Verification for Bank Calls

To counter bank impersonation, Android partnered with Banco do Brasil, Itaú Unibanco, and other banks on verified financial calls, which work with official banking apps to verify in real time whether an incoming call was genuinely initiated by the bank. When a caller claiming to represent a bank fails the check, Android ends the call and immediately alerts the user.

Google said that since the feature’s June 2026 launch, Android has blocked more than 3 million spoofed calls from Banco do Brasil and Itaú Unibanco alone by terminating calls that imitate inbound-only bank lines, which are never used to dial customers. Citing the Brazilian Federation of Banks (FEBRABAN), the post said bank impersonation scams in Brazil surged 195.7% over a 12-month period, and the federation said spoofed caller ID erodes customer trust in official bank communication, making real-time caller authentication essential to stopping social engineering.

Google said the verified financial calls feature is already protecting customers of other institutions, including Revolut, and that it will continue bringing it to more partners, with developer documentation available for banks and financial apps that want to participate.