\n<\/p>\n
Google has unveiled its Safety Charter in India, which will expand its AI-led developments for fraud detection and combating scams across the country, the company\u2019s largest market outside the United States.<\/p>\n
Digital fraud in India is rising. Fraud related to the Indian government\u2019s instant payment system UPI grew 85% year-over-year<\/a> to nearly 11 billion Indian rupees ($127 million) last year, per the government\u2019s data. India also saw several instances of digital arrest scams, where fraudsters pose as officials to extort money via video calls and predatory loan apps.<\/p>\n With its Safety Charter, Google aims to address some of these areas. The company has also launched its security engineering center<\/a> in India, its fourth center after Dublin, Munich, and Malaga.<\/p>\n Announced at the Google for India summit last year, the security engineering center (GSec) will allow Google to partner with the local community, including government, academia and students, and small and medium enterprises to create solutions to solve cybersecurity, privacy, safety, and AI problems, said Google VP of security engineering Heather Adkins in an interview with TechCrunch.<\/p>\n Google has partnered with the Ministry of Home Affairs\u2019 Indian Cyber Crime Coordination Centre (I4C) to raise awareness of cybercrimes, the company said in a blog post. This builds upon the company\u2019s existing work, including the launch of its online fraud identification program, DigiKavach<\/a>, which debuted in 2023 to restrict the harmful effects of malicious financial apps and predatory loan apps.<\/p>\n With its GSec in India, Google will focus on three key areas, Adkins told TechCrunch: the phenomenon of online scams and fraud and how people are safe online; the cybersecurity of enterprises, government, and critical infrastructure; and building responsible AI.<\/p>\n \u201cThese three areas will become part of our safety charter for India, and over the coming years\u2026 we want to use the fact that we have engineering capability here to solve for what\u2019s happening in India, close to where the users are,\u201d said Adkins.<\/p>\n Globally, Google is utilizing AI to combat online scams and remove millions of ads and ad accounts. The company aims to deploy AI more extensively in India to combat digital fraud.<\/p>\n Google Messages, which comes preinstalled on many Android devices, uses AI-powered Scam Detection that has helped protect users from over 500 million suspicious messages a month. Similarly, Google piloted its Play Protect<\/a> in India last year, which it claims has blocked nearly 60 million attempts to install high-risk apps, resulting in the stopping of more than 220,000 unique apps on over 13 million devices. Google Pay, which is one of the top UPI-based payment apps<\/a> in the country, also displayed 41 million warnings against transactions suspected to be potential scams.<\/p>\n \u2014<\/p>\n Adkins, a founding member of Google\u2019s security team who has been part of the internet company for over 23 years, discussed several other topics during an interview with TechCrunch:<\/p>\n Adkins said one thing top of mind is the use and misuse of AI by malicious actors.<\/p>\n \u201cWe\u2019re obviously tracking AI very closely, and up until now, we\u2019ve mostly seen the large language models like Gemini used as productivity enhancements. For example, to make phishing scams a bit more effective \u2014 especially if the actor and the target have different languages \u2014 they can use the benefit of translation to make the scams more believable using deepfakes, images, video, etc.,\u201d said Adkins.\u00a0<\/p>\n Adkins said Google is conducting extensive testing of its AI models to ensure they understand what they should not do.<\/p>\n \u201cThis is important for generated content that might be harmful, but also actions that it might take,\u201d said Akins.<\/p>\n Google is working on frameworks, including the Secure AI Framework<\/a>, to restrict the abuse of its Gemini models. However, to protect generative AI from being misused and abused by hackers in the future, the company sees the need for a framework to build safety for how multiple agents communicate.<\/p>\n \u201cThe industry is moving very, very quickly [by] putting protocols out. It\u2019s almost like the early days of the internet, where everybody\u2019s releasing code in real time, and we\u2019re thinking about safety after the fact,\u201d said Adkins.<\/p>\n Google does not want to introduce merely its own frameworks to limit the scope of generative AI being abused by hackers. Instead, Adkins said the company is working with the research community and developers.\u00a0<\/p>\n \u201cOne of the things you don\u2019t want to do is constrain yourself too much in the early research days,\u201d said Adkins.<\/p>\n Alongside generative AI\u2019s potential for abuse by hackers, Adkins sees commercial surveillance vendors as a significant threat. These can include spyware makers, including NSO Group<\/a>, which is infamous for its Pegasus spyware<\/a>, or other small enterprises selling surveillance tools.<\/p>\n \u201cThese are companies spun up all over the world, and they develop and make and sell a platform for hacking,\u201d said Adkins. \u201cYou might pay $20, you might pay $200,000, just depending on the sophistication of the platform, and it allows you to scale attacking people without any expertise on your own.\u201d<\/p>\n Some of these vendors also sell their tools to spy on people in markets, including India<\/a>. However, apart from being targeted by surveillance tools, the country has its own unique challenges in part for its size. The country sees not only AI-led deepfakes and voice cloning frauds, but also instances of digital arrests<\/a>, which Adkins underlines are just regular scams adapted for the digital world.<\/p>\n \u201cYou can see how quickly the threat actors themselves are advancing\u2026 I love studying cyber in this region because of that. It\u2019s often a hint of what we\u2019re going to see worldwide at some point,\u201d said Adkins.<\/p>\n Google has long encouraged its users to use more secure authentication methods beyond passwords to protect their online presence. The company switched on multi-factor authentication (MFA) for all user accounts in the past, and also promotes hardware-based security keys, which Adkins mentioned by pointing to its employees actively using their laptops. Passwordless is also becoming a popular tech term<\/a>, with various meanings.<\/p>\n Nonetheless, expecting people to abandon passwords in a market like India is hard due to its vast demographics and diverse economic landscape.<\/p>\n \u201cWe knew for a very long time that passwords were not secure. This concept of a multi-factor authentication was a step forward,\u201d said Adkins, adding that Indians likely favor SMS-based authentication over other MFA options.<\/p>\n<\/div>\nOn surveillance vendors<\/strong><\/h2>\n
On multi-factor authentication<\/strong><\/h2>\n