Ahead of Google I/O, the tech giant unveiled a comprehensive suite of security and privacy upgrades for Android. Unveiled during the Android Show, these new protections target rising threats from scammers, phone hijackers, and unauthorized access. From calls and messages to device theft and malicious apps, Android 16 aims to make your phone smarter at defending itself in real time.
Live Scam Protection During Calls and App Installs
Phone scams are getting more sophisticated, but so is Android. Google announced that Android 16 will actively protect users during phone calls, especially when the caller isn’t saved in their contacts. If the user is urged to click shady links or download questionable apps while on the call, Android will block or warn against those actions.
Among the blocked actions are side-loading apps from unverified sources like browsers or messaging apps, and giving accessibility permissions that scammers can abuse to take over a phone. Even more crucial: users running Android 6 or newer will no longer be able to disable Google Play Protect during such calls, a safeguard that scans for harmful apps.
Google is also ramping up protections for screen sharing. If a user shares their screen and ends a call, Android will now prompt them to stop sharing. In the U.K., some banking apps are piloting an even more proactive system. If you open a banking app while screen sharing with an unknown number, Android will display a warning and give you an option to immediately stop the session.
Smarter Message Security and Verified Contacts
Scam detection is also coming to Google Messages in a bigger way. Initially launched in March, the system uses on-device AI to flag suspicious texts. Now, it will recognize more types of fraud, including crypto cons, fake toll or billing notices, gift card shakedowns, and impersonation tactics linked to tech support or financial services.
To help users verify who they’re messaging, Google is rolling out secure identity verification via QR codes or screen-matching numbers. These “verified keys” indicate if the conversation is encrypted and if the contact is authentic. So, if a scammer tries to message you after hijacking a number via SIM swap, your phone will display an “unverified” alert. This feature will land on Android 10+ devices later this summer.
Stronger Theft and Factory Reset Protections
Google is also tightening up security against physical phone theft. A new wave of protections is coming with Android 16, building on the “Identity Check” system launched earlier this year on Pixel and Samsung phones. This system requires biometric authentication before someone can change important settings, like your PIN or access your Passkeys—especially if you’re outside your trusted locations.
A new factory reset protection update will make stolen phones almost useless to thieves. Devices will soon restrict reset functionality unless the original lock pattern, PIN, or Google credentials are entered correctly.
Additionally, to block remote lockouts, Android 16 will include a challenge question that confirms authorized access. The system will also hide sensitive one-time passwords (OTPs) when the device hasn’t been recently unlocked or isn’t connected to Wi-Fi.
Better App Detection and Advanced Protections for Public Figures
Google Play Protect is getting sharper. In the months ahead, Android 16 will begin detecting more deceptive apps, especially those that hide or change their icons. This update will first roll out to Pixel 6 and newer devices.
For high-risk individuals such as journalists, activists, or public figures, Google is enhancing its Advanced Protection Program. New on-device security checks will help these users avoid targeted attacks.
Lastly, Google introduced “Find My Hub,” a central feature for tracking not only your devices but also friends, family, and items—creating a more secure ecosystem built on trust and visibility.
