Android Blocks Call Forwarding and Screen-Sharing Scams on Pixel Devices

Google is deploying new scam protections across Android to intercept threats before they reach users. According to Help Net Security, these updates cover Google Messages and third-party apps. The changes include an enhanced protection mode, expanded scam alerts, and specific safeguards against call-forwarding and screen-sharing attacks.

The risk

Scammers are increasingly using complex tactics that are difficult for users to identify manually. Google executives stated that it is nearly impossible for individuals to catch every red flag. To address this, Android’s built-in defenses now actively intercept threats. The new system uses cloud-based Gemini models to assess message context and identify scammer intent during conversations with unknown senders.

Who is exposed

These protections primarily target users of Google Messages and devices running Android 15 or later. Enhanced protection in Google Messages will roll out in the coming weeks as an opt-in setting. Screen-sharing protections are expanding to Chrome and Android WebView this month. Call-forwarding protection will be available starting in early December on Pixel and other select devices.

Cost and compliance

The source material does not specify financial costs or compliance implications for these security updates. The features are described as built-in defenses provided by Google. No regulatory requirements or penalty structures are mentioned in the report by Help Net Security regarding these specific consumer-facing security enhancements.

Our take on the response

Google is shifting from reactive blocking to proactive intent analysis. By using Private AI Compute, the company processes data in a secure, dedicated space. This approach allows for real-time assessment of unfamiliar links and messages without exposing user data to Google or third parties.

What defenders should look for

Security teams should monitor for unusual call-forwarding requests or MMI code entries on managed devices. Check logs for screen-sharing sessions that coincide with login or payment activities. Look for warnings triggered by enhanced scam detection in messaging apps. Verify that devices are running the latest Android versions to ensure these protections are active.

Background: Account takeover

Account takeover protection stops attackers from using stolen credentials by verifying identity through multiple factors and monitoring login patterns. You secure accounts by enforcing multi-factor authentication, checking for impossible travel, and validating device fingerprints to ensure the person logging in matches the expected user profile.

Read the full guide: Account Takeover Protection: Mechanisms, Trade-offs, and Defense

What to do and how to stay safe: Android

• Enable enhanced protection mode in Google Messages to activate AI-powered scam detection.
• Update Android devices to version 15 or later to receive screen-sharing safeguards.
• Monitor for call-forwarding warnings and avoid entering MMI codes from unknown callers.
• Review notification shade alerts for suspicious messages before opening third-party apps.

Step-by-step guide: Multi-Factor Authentication Fatigue: Why Users Click Yes Too Fast

General security guidance from the BlueTeam Herald newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How does Private AI Compute protect user data during scam detection?

It encrypts data and processes it in a secure, dedicated space, keeping it inaccessible to anyone else, including Google.

When will call-forwarding protection be available on Pixel devices?

It will be available starting in early December on Pixel and other select devices.

What happens when screen-sharing is active on Android 15 devices?

The feature blanks out login fields and payment screens during live screen-sharing sessions to protect sensitive information.