Mobile

Android 17 security: new protections against scams and theft

Google's 2026 security update adds verified bank calls, stronger anti-theft locks and a contact picker that shares only what an app needs. A plain summary.

By Yemini Team, 2026-11-13

In May, Google published its 2026 list of Android security and privacy changes. Many arrive with Android 17, and some are rolling out over the year. Here are the ones most people will notice. Scams Verified financial calls. Android checks calls that claim to come from a participating bank or finance app, and ends calls from spoofed numbers. Google named Revolut, Itaú and Nubank first, with more banks planned later in 2026. Warnings for risky behaviour. Live Threat Detection adds alerts for apps that forward your SMS or abuse accessibility overlays, both common scam tricks. Safer downloads. Chrome on Android is set to check APK files for malware at download time when Safe Browsing is on. Hidden one-time codes. Verification codes are hidden from most apps for three hours. Theft On Android 17, "Mark as lost" can lock the phone with biometrics as well as a PIN. Theft protections are on by default for new Android 17 devices. Failed PIN guesses lead to longer waits, and the IMEI can be viewed from the lock screen on Android 12 and newer. Privacy A contact picker lets an app ask for specific contacts and only the fields it needs, with temporary access, instead of your whole address book. A location button can share precise location only while the app is open. Accessibility service access is removed from apps that are not labelled as accessibility tools. The caveat Several items are described as coming "in the coming weeks" or "later this year", so what you get depends on your phone, its maker and its Android version. Keeping your phone updated is still the simplest protection.