Google adds suite of security features to Android 16

Google is rolling out new security features for Android devices as part of its latest operating system update, Android 16, reinforcing its ongoing efforts to guard users against ever-changing threats. 

The measures target a spectrum of risks, from financial scams and impersonation attacks to theft protection and malware.

One of the central advancements highlighted Tuesday is the enhancement of scam detection tools within Google Messages. Relying on artificial intelligence, Google’s system now identifies and blocks a broader array of fraudulent messages, including those related to cryptocurrencies, financial impersonation, unpaid road tolls, gift cards, and technical support scams. The AI models operate directly on the device, protecting user privacy by processing messages locally and shielding conversations from external servers.

This focus on device-based detection represents a shift toward more private, decentralized security models across the mobile industry. According to Google, billions of suspicious messages are now being filtered monthly. The expansion of scam detection comes as text-based fraud grows more sophisticated, often impersonating legitimate institutions or authorities.

Additionally, Google is piloting new in-call protections for banking apps, starting in the United Kingdom. Devices will now alert users if a banking app is launched during a call with an unknown number while screen sharing is active, allowing users to end the call and disable screen sharing with a single tap. 

Android will also now restrict potentially dangerous actions while users are on calls with individuals not in their contact lists. A user will receive a prompt to end screen sharing during such calls, curbing a method scammers have leveraged to gain remote access to devices.

Android 16 will mark the debut of Google’s Advanced Protection program being integrated on devices. Previously focused on providing an extra layer of protection to Google account holders, the enhanced security service will now be available to any user’s device with a single toggle.

“Whether you’re an at-risk individual — such as a journalist, elected official, or public figure — or you just prioritize security, Advanced Protection gives you the ability to activate Google’s strongest security for mobile devices, providing greater peace of mind that you’re protected against the most sophisticated threats,” wrote Dave Kleidermacher, VP of engineering for Android’s security and privacy team.

Once enabled, Advanced Protection enforces verified boot and runtime integrity checks, strong sandboxing, application isolation, memory tagging, USB lockdown, and automatic device rebooting after inactivity. The suite also prevents the deactivation of any core security features while active, reducing the impact of malware or user error. Notably, new modules like intrusion logging and automatic blocking of connections to insecure networks are included, both of which further reduce opportunities for unauthorized access or surveillance.

Google will also extend theft protection measures as lost and stolen phones continue to drive concerns about personal data breaches. The Find My Device feature, which was launched last year, is evolving into Find Hub, consolidating the tracking of devices and belongings — such as tagged items or shared locations of family and friends — into a single platform. Later this year, Find Hub will gain satellite connectivity on supported devices and carriers, enabling location services even in areas without cellular coverage.

The security additions to Android come ahead of Google I/O, the company’s yearly flagship developer conference. The company says it will have more to share regarding Android 16 next week.