India forces Google to pull 57 Firebase sites spoofing banks, stealing OTPs
India's cybercrime agency found a scam pattern hiding in plain sight: fraudsters used Google's Firebase to clone bank sites, then pushed apps that siphoned credit card data and OTPs off victims' phones. In August alone, I4C ordered 57 Firebase sites and databases taken down, seven of them impersonating SBI, ICICI and Axis. Firebase itself is legitimate infrastructure, which is why the fix is takedowns, not platform bans. Now regulators are strangling the infrastructure of fraud, not just the pages.