Overview
- Google detailed a new Android security package at I/O that starts on Android 17 and rolls out in stages to older phones, with selected markets like Argentina, Chile, Colombia, Mexico and the UK getting broader backports.
- Incoming calls that claim to be from a bank now face a verification check against the bank’s app on the phone, which can auto‑end spoofed calls on Android 11 or newer, though support today is limited to Revolut, Itaú and Nubank.
- Marking a phone as lost now forces biometric unlock, hides Quick Settings and blocks new Wi‑Fi and Bluetooth links, which stops thieves from killing location tracking or re‑accessing a device even if they know the PIN.
- Android 17 cuts PIN and password guess attempts and adds longer delays after failures, and phones on Android 12 or newer can show the device IMEI on the lock screen to help carriers or police confirm ownership, with a setting to turn it off.
- Live Threat Detection expands with on‑device AI that flags risky app behavior like SMS forwarding, hidden overlays or icon changes on Android 17, and Chrome on Android will check APK downloads for known malware before they start.