Google Updates Android to Block In-Call Scams

New security features stop malicious apps from accessing device controls during active phone calls.

Updated on Oct. 26, 2026 in Cybersecurity

Isometric editorial illustration of a geometric, lattice-like structure surrounded by a protective barrier, representing mobile software security architecture.
Google has issued an Android security update that restricts malicious apps from accessing sensitive accessibility permissions during active phone calls. AI Illustration. Upload story photo >

Live Poll

Do you feel confident that your phone's current security features adequately protect your personal data?

Google has released a security update for Android devices that prevents apps from requesting dangerous accessibility permissions during active calls. The safeguard aims to block scammers from reading screen content or seizing device control while users are on the phone.

Why it matters

Cybercriminals frequently exploit accessibility permissions to bypass security measures and manipulate personal data during live interactions. This update provides a critical defensive layer against such intrusive tactics by restricting app behavior in real time.

Google Play services version 26.41 now includes in-call safeguards for devices running Android 15 and earlier. The service supports hardware running Android 7.0 or newer.

The players

Google

A multinational technology corporation that develops the Android operating system and maintains the Google Play services framework.

The details

The update prevents apps from soliciting accessibility access while a call is in progress, addressing a vulnerability pattern observed with the RedHook banking malware. Users can verify their protection status by navigating through the Privacy & security menu in their system settings.

Timeline

  1. May 2025: Google introduced in-call restrictions for Android 16.

  2. July 2026: Researchers identified the RedHook banking malware.

  3. September 2026: Google released security updates addressing 180 vulnerabilities.

  4. October 19, 2026: Google published the release notes for Play services 26.41.

The Tech Race

This release follows the framework established by Google's May 2025 Android 16 accessibility permission restrictions. By backporting these protections, the company is intensifying its effort to secure legacy devices against increasingly sophisticated banking malware.

Users can immediately improve their device security by verifying their system services status through the Privacy & security settings menu. This update effectively narrows the window of opportunity for malicious apps to compromise sensitive personal information during phone calls.

The takeaway

Users should regularly check their system settings to ensure their device is running the latest security patches. Maintaining updated Play services is essential to prevent malware from exploiting known accessibility vulnerabilities.

Further reading

For more on evolving digital threats, visit the Cybersecurity section.

Source note: This article includes information reported by TechRepublic.

Live Poll

Do you feel confident that your phone's current security features adequately protect your personal data?