Google Strengthens Android Caller ID Spoofing Protections For 2026

Users of Google’s Android ecosystem might be forgiven for thinking that it’s all bad news on the security front right now. After all, just this week, I have reported on seven million users being conned by “any phone number call history” apps in the Play Store, as well as exclusivity-revealing research that a Google security gaffe is leaving billions of Gmail users at risk of phishing threats. And social engineering, oh the irony, is exactly what Liderman’s latest security update is about. More precisely, it focuses on how scammers are impersonating financial institutions to fool Android users into transferring money or disclosing account information, with caller ID spoofing behind many of the attacks.

“To combat this,” Liderman said in a May 12 announcement, “we’re working with select banks and financial institutions to help protect their customers with verified financial calls, a new phone call spoofing protection feature designed to keep your money and personal information safe.” This follows the introduction of the new Key Verifier for Google Messages protection in 2025, described at the time as “an extra layer of assurance that the person on the other end is genuine.”

The latest phone call spoofing protection will start rolling out to users of Android 11+ devices who bank with Revolut, Itaú, and Nubank in the coming weeks. Liderman said it would expand to more banks later in the year. It works in the background whenever you receive a call that appears to be from the bank concerned, asking the banking app itself to confirm whether they are calling you. “If the app confirms that no phone call is being made,” Liderman explained, “the system ends the call.”