Protect Android accounts: New features blank payment screens and warn before call forwarding activates
New Android features hide payment screens during sharing and warn users before call forwarding activates, protecting accounts from interception.
Key points
- Android 15 blanks out login and payment fields during screen-sharing sessions in Chrome and WebView.
- The system warns users before call-forwarding codes take effect to prevent OTP interception.
- Enhanced scam detection in Google Messages uses Private AI Compute to analyze message intent.
Android users facing account takeover attempts via call forwarding or screen sharing will see new defenses in Android 15. These measures target scammers who trick victims into revealing one-time passwords or financial details. The updates aim to intercept threats before users realize they are compromised.
Root cause
Google executives state that scams are growing harder to spot, making it nearly impossible for users to catch every red flag themselves. According to Alberto Pastor Nieto and Shaifali Bhandari, built-in defenses are necessary to actively intercept these threats before they reach the user.
Attack path
Scammers may persuade users to enable call forwarding in the background to intercept one-time passwords and take over accounts. They may also use screen-sharing sessions to view login fields and payment screens. Android is extending protections to block these specific vectors by blanking out sensitive screens and warning before forwarding codes take effect.
Affected versions
Screen-sharing protections are expanding to devices running Android 15 or later. Call-forwarding protection is scheduled for early December on Pixel and select other devices. Scam detection enhancements in chat notifications will reach non-Pixel devices later this year through partnerships with manufacturers.
Mitigation:
- Enable Enhanced Protection in Google Messages to activate AI-based scam detection.
- Update devices to Android 15 to receive screen-sharing safeguards for Chrome and WebView.
- Wait for early December updates on Pixel devices for call-forwarding warnings.
- Monitor notification shade alerts for flagged suspicious messages from unknown senders.
For customers and users
When encountering unsolicited support requests, verify the identity of the caller through official channels before sharing any information. Be cautious if asked to enable screen sharing or enter codes on your dial pad, as these actions often precede account compromise. Check your device settings regularly for unauthorized changes. Recognize that legitimate institutions will never ask you to forward calls or share your screen to verify your identity.
What to do and how to stay safe: Android
- Review your call forwarding settings to ensure no active forwarding rules exist on your line.
- Avoid enabling screen sharing with unknown callers or through links in unsolicited messages.
- Check your message app settings to ensure scam detection features are turned on.
- Monitor account activity for unauthorized logins or password reset attempts after suspicious interactions.
Step-by-step guide: Passkeys Explained: How Passwordless Login Actually Works
General security guidance from the DarkWeb Headlines newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Does Android 15 block all screen-sharing apps?
No, it blanks out login and payment fields in Chrome and Android WebView during live screen-sharing sessions, rather than blocking the apps entirely.
How does the call-forwarding protection work?
Android displays a warning before a man-machine interface forwarding code takes effect, preventing background call forwarding that could intercept one-time passwords.
Is the AI scam detection available on all Android phones?
Enhanced protection is currently an opt-in setting in Google Messages, with expanded scam detection in notifications coming to non-Pixel devices later this year.
