(L to R) Ram Papatla, Managing Director, Trust and Safety, Google APAC, YB Teo Nie Ching, Deputy Minister of Communications, YB Datuk Fahmi Fadzil, Minister of Communications, Ben King, Country Managing Director, Google Malaysia, Ir. Dr Megat Zuhairy Bin Megat Tajuddin, Chief Executive of NACSA National Cyber Security Agency, National Security Council (NACSA, NSC), Mediha Mahmood, Chief Executive Officer, Communications and Multimedia Content Forum
To further keep Malaysians safe from financial fraud, Google has rolled out its enhanced fraud protection feature within Google Play Protect to all Android users in Malaysia. This initiative is supported by the National Cyber Security Agency, National Security Council (NACSA, NSC), and is designed to better safeguard mobile users against malware-enabled scams, by blocking the installation of potentially-risky sideloaded apps.
The announcement was made at the Google 2026 Online Safety Dialogue, alongside Malaysia Minister of Communications, YB Datuk Fahmi Fadzil. This is in line with the Ministry’s ‘Kempen Internet Selamat’, aimed at bolstering nationwide digital safety against threats such as online scams.
How enhanced fraud protection works
Google Play Protect’s enhanced fraud protection analyses and automatically blocks the installation of apps that may abuse sensitive permissions to commit financial fraud
Google’s feature blocks installation of internet-sideloaded apps from web browsers, messaging apps or file managers that attempt to access sensitive permissions commonly exploited for financial fraud.
Real-time inspection: With this enhancement, when someone attempts to install a potentially risky app from an internet-sideloading source – such as a web browser, messaging app or file manager – Google Play Protect inspects the declared permissions in real-time.
Automatic block: This enhancement will inspect the permissions of the app declared in real-time and specifically look for runtime permissions frequently abused for financial fraud – such as reading SMSes, or intercepting one-time passwords (OTPs). If the app requests access to these sensitive permissions, the installation is blocked.
Clear warnings: Consumers will receive a prompt explaining that the app was blocked because it requests access to sensitive data, which can increase the risk of identity theft or financial fraud.
(L to R) Ram Papatla, Managing Director, Trust & Safety, Google APAC, Dr. Piti Srisangnam, ASEAN Foundation Executive Director, YB Datuk Fahmi Fadzil, Ambassador Datin Sarah Nava Rani Al Bakri Devadason, Chair of the Board of Trustees of the ASEAN Foundation and Permanent Representative of Malaysia to ASEAN, Ambassador Evangeline T. Ong Jimenez-Ducrocq, Ambassador and Permanent Representative of the Philippines to ASEAN
YB Datuk Fahmi Fadzil, Malaysia Minister of Communications, said, “Strengthening online safety and platform accountability is a national priority. We are encouraged by Google’s proactive introduction of enhanced safeguards across its platforms, which serve as a critical defense against evolving cyber risks. By combining technology with partnerships and local community outreach, the company’s initiatives support our national 'Kempen Internet Selamat' and ensure that every Malaysian is empowered with the knowledge and tools to stay safe and informed in this digital age."
Ben King, Country Managing Director, Google Malaysia, said, “As Malaysia advances with AI, creating a safe digital experience for every Malaysian becomes more critical than ever. While we have introduced new products and programs to tackle scams, we understand that these threats are always evolving. Google remains committed to staying ahead of these risks by innovating our AI-powered defenses, and investing in nationwide literacy programs that empower Malaysians with the knowledge to defend against these evolving threats. Together, we are building a future where everyone can navigate the internet with confidence.”
Ir. Dr. Megat Zuhairy bin Megat Tajuddin, Chief Executive of the National Cyber Security Agency, National Security Council (NACSA, NSC), added, “Safeguarding our national cyberspace requires a multi-layered and whole-of-society approach, in line with the Malaysia Cyber Security Strategy (MCSS) 2025–2030. NACSA welcomes industry-led efforts that enhance user protection, as such measures contribute to strengthening Malaysia’s overall cyber resilience and help ensure that digital technologies remain a safe and trusted enabler of progress.”
A Multi-Layered Security Ecosystem
Google also announced two new updates that increase the accountability of content online, and create a safer digital experience for users:
Android Developer Verification: Mandatory developer identity verification will be introduced to prevent repeat offenders from distributing harmful apps. By 2027, all apps on certified Android devices in Malaysia must come from verified developers.
Financial Services Verification: As of 14 April 2026, advertisers promoting financial services must be verified by regulators such as Bank Negara Malaysia and the Securities Commission Malaysia before running ads on Google platforms, helping block fraudulent financial promotions.
Empowering Malaysians Through Digital Literacy
Google’s commitment to safety extends beyond technology to partnering with the community in ensuring that everyone is empowered with the right knowledge to navigate the online world.
To drive this, starting from the third quarter of 2026, Google will roll out its "Be Scam Ready" game in Bahasa Malaysia for Malaysia. This game immerses users in real-life scenarios to help them develop the critical thinking skills needed to spot a scam in the real world.
In addition, Google is working with the community to scale literacy around scams. As part of the regional Scam Ready ASEAN initiative, supported with US$5 million funding from Google.org, the ASEAN Foundation is scaling its impact right here in Malaysia. In collaboration with social change impact agency, Ratio:Cause and local partners, the program will reach over 200,000 Malaysians over the next two years with online scam prevention resources to navigate the digital world safely.
By employing a train-the-trainer model, the initiative empowers community leaders to build a network of experts and deliver localised training and awareness programmes for Malaysians, especially our youths and seniors. These efforts are reinforced by using interactive tools like the "Be Scam Ready" game, which builds digital resilience for everyone.
Beyond individual empowerment, the program also drives systemic impact by convening public and private sector leaders to share threat intelligence and strengthen policy coordination against digital fraud.
