At the Android Show on Tuesday, preceding the annual Google I/O conference, Google announced significant new security and privacy capabilities coming to Android, targeting scams and device theft. These enhancements will cover phone calls, messaging, screen sharing, device access, and essential permissions, providing Android users with stronger protection against fraud and theft.
Recognizing that many scams begin through phone calls encouraging unsafe actions—such as installing unknown apps or tapping links—Google is introducing protections that block certain actions during calls with numbers not saved in the user’s contacts. For Android 16, the system will prevent specific potentially risky activities, such as sideloading apps from browsers or messaging services that Google hasn’t verified, and granting apps accessibility permissions which could allow attackers to gain device control. To further mitigate risks, devices running Android 6 or newer will no longer permit users to disable Google Play Protect mid-call, ensuring that potential malware is consistently identified and isolated.
Google is also strengthening protections around screen sharing. Users will receive reminders to stop sharing their screens after ending calls, reducing the risk of inadvertently exposing sensitive information. In addition, the company announced a pilot project with selected banks in the UK, where users running Android 11 or newer will see a dedicated warning if they begin using banking apps while screen-sharing on calls with unknown contacts. This screen will prompt users with information about potential scams and provide a quick way to end their current screen-sharing session.
In March, Google launched anti-scam features within Google Messages utilizing on-device AI to spot suspicious conversations. Now, these features are being expanded to detect a broader range of scams, including crypto-related schemes, fraudulent charges involving gift cards, toll fees, financial impersonation attempts, and bogus technical support offers.
A new authentication feature called verification keys is also being added to the Google Contacts app. This feature allows users to confirm their contacts’ identities via QR codes or unique numerical identifiers. With a verified key, communication through Google Messages will be fully end-to-end encrypted and protected. Furthermore, if a device falls victim to a SIM-swap theft and the imposter attempts communication from a new, unauthorized device, the verification status within the Contacts app will clearly indicate the contact as unverified. This update will roll out later this summer to users on Android 10 or later.
Earlier this year, Google introduced an Identity Check protection feature to Pixel and Samsung devices equipped with OneUI 7. Identity Check requires biometric authentication whenever making sensitive security adjustments, such as changing device PINs, disabling theft protection, or accessing stored Passkeys, particularly from locations that haven’t been designated as trusted. With Android 16, Google plans to expand this protection to other Android device manufacturers.
Later this year, Google is also enhancing its Factory Reset protection, ensuring stolen devices can’t be reset and easily resold without the original device owner’s authentication. After a reset, aggressive protective measures will remain in place, including requiring previous lock-patterns or PIN codes, or the associated Google account credentials, thereby rendering stolen or lost phones significantly less valuable to thieves.
Additional new precautions include adding an extra security question layer designed specifically to stop unauthorized remote device locking, and hiding one-time passwords from lock screens on devices disconnected from Wi-Fi and not recently unlocked.
Google Play Protect’s real-time threat detection system will also gain enhancements. It will soon identify and block malicious apps that hide their true nature by altering their displayed icons. These improvements will become available in the coming months for devices using Android 6 or newer, along with stronger on-device rules to detect more varieties of malware.
Lastly, recognizing the needs of public figures and high-risk users, Google’s Advanced Protection Mode will receive new on-device safeguards to bolster security. The company additionally announced a new “Find My Hub,” enabling users to better track personal items, friends, and family members, enhancing both personal safety and device security.
