Google Adds Three New Security Features to Android Phones

Google has announced three new security features for Android devices that tackle different ways phones can be attacked. The features are: verified financial calls (which stop scammers from pretending to be your bank), Live Threat Detection (which uses artificial intelligence running on your phone to spot suspicious app behavior), and Android Advanced Protection Mode (a simplified security setup for people at high risk of being targeted). All three features process information on your phone rather than sending it to Google's servers, which keeps your data private.

Verified Financial Calls Stops Bank Impersonation Scams

When you receive a call from your bank, Android will now verify that it's actually from them. To work, you need to have your bank's app installed and logged in on your phone. When a call comes in, Android checks the caller against your bank's official contact list without sending call details to Google.

The system uses cryptography—a form of mathematical verification—to confirm that the call really came from the bank's systems. If verification fails, you'll see a warning on your screen that the caller cannot be confirmed as legitimate.

This feature targets a scam called vishing, where fraudsters call pretending to be from your bank and try to steal your login details or personal information. By checking the caller's identity automatically at the technical level, Google aims to reduce how often these scams work, rather than relying only on people being trained to spot them.

The practical challenge here is that this feature only works with banks that participate in the program. Google has not yet shared which banks are launching with this feature or when others might join. Without widespread bank participation, the protection will only cover some calls, leaving gaps where you still won't know if a caller is genuine.

Live Threat Detection Watches App Behavior on Your Phone

This feature uses machine learning models—software trained to recognize patterns—that run directly on your phone to monitor what apps are doing. It watches for suspicious activity like an app accessing your contacts, making unexpected network connections, or requesting special permissions it shouldn't need.

The system learns what each app normally does when you use it regularly. If an app suddenly behaves differently—say, trying to access your contacts after you've never allowed that before—Live Threat Detection alerts you and explains what the app is trying to do.

The technology runs on your phone using TensorFlow Lite, a version of Google's machine learning software designed to work on mobile devices. Google updates these detection models through Google Play Services, the system that keeps Android secure and up-to-date. Because the monitoring happens on your phone, your app behavior never leaves your device.

This approach is similar to how large organizations monitor computers in their offices for signs of compromise, except adapted to work on the limited computing power of a phone. Unlike older antivirus software that looks for known malware signatures (essentially a list of "bad" apps), behavioral analysis can catch new attacks by focusing on what the app is doing rather than whether it matches a known threat.

This represents a meaningful shift in how mobile phones protect themselves. For years, Android security mainly relied on Google checking apps in the Play Store before you could download them, plus letting you control what permissions each app gets. Live Threat Detection adds continuous monitoring while apps are running, which is how enterprise security has worked on computers for some time now.

Advanced Protection Mode Bundles Security Settings

Android Advanced Protection Mode packages several existing security features into a single setting for people who face serious security threats. When you turn it on, it automatically activates stronger app verification, blocks you from installing apps from sources other than Google Play, requires extra verification steps to change your Google account password, and keeps detailed logs of security events.

This feature is designed for journalists, activists, and political figures who need comprehensive security but may not have time to configure multiple security settings individually. When enabled, Advanced Protection Mode works together with Google's Advanced Protection Program, which secures your Google account across all devices and services you use.

You can turn off Advanced Protection Mode, but doing so requires you to verify your identity first. This prevents someone who gains access to your phone from simply disabling your protections.

How These Features Handle Your Privacy

All three features keep your data private by doing their work on your phone rather than sending it elsewhere. Verified financial calls checks callers on your device without sharing the call details with Google. Live Threat Detection analyzes app behavior on your phone and does not send that information to Google's servers. Advanced Protection Mode enforces security rules locally without collecting extra data beyond what Android already collects.

This on-device approach addresses an important concern: when security features send sensitive information to the cloud, your data could potentially be intercepted or accessed by government agencies. By processing everything locally, Google reduces these risks while still providing strong protection.

We have seen this balance between security and privacy tested before. Apple announced a feature to scan photos on iPhones for illegal content in iOS 15, but withdrew it after privacy advocates and security researchers objected. Google's approach avoids that controversy by keeping all analysis on your device and not attempting to scan your files for law enforcement purposes. The line between protective security and surveillance remains important for getting people to actually use these features.

What This Means for Businesses and Everyday Users

For companies managing Android phones, these features add layers of protection that work alongside existing mobile device management systems. Live Threat Detection can catch applications that appeared safe during app store review but behave dangerously once installed. Advanced Protection Mode makes it easier to secure phones used by executives or other high-value targets without requiring IT staff to configure multiple settings.

For regular users, how much these features help depends on how they're designed to work. Security features that require people to actively do something usually don't get used much. Google will need to make verified financial calls easy enough that people trust it and Advanced Protection Mode straightforward enough that people with less technical knowledge can use it.

Google is rolling out these features through Google Play Services, the system that updates Android security without requiring you to install a new version of Android itself. This means most Android phones will get these features relatively quickly, including older devices.

These new protections arrive as phones increasingly serve as the primary device where people work, bank, and store personal information. The wider that phones become part of our lives, the more sophisticated the attacks on them become. Google's latest features are a genuine step forward in defending against those threats.