Google Warns of Rising Fake VPN & AI Scams Targeting Users

Tech giant Google has raised fresh concerns about a surge in online scams exploiting AI, malicious apps, and social engineering to deceive users worldwide. The warning, issued on November 6, highlights new threats targeting both individuals and businesses.

According to Google, one of the fastest-growing dangers is malicious VPN apps. Hackers are disguising harmful software as trusted VPN services, often imitating popular brands. Aggressive tactics include sexually suggestive ads, fear-based alerts linked to geopolitical events, and fake promises of free access. Once installed, these apps can deliver malware such as information stealers, remote access trojans, and banking trojans. They may also access sensitive data including browsing history and login credentials.

To counter this, Google recommends enabling Google Play Protect, which now includes an enhanced fraud-protection pilot. The system blocks high-risk apps from being installed, including those sideloaded through browsers, messaging apps, or file managers. Android and Google Play increasingly rely on machine learning to detect and remove harmful apps proactively.

Scams are also targeting job seekers, with criminals creating fake recruitment sites, government job notices, and fraudulent recruiter profiles. Victims are asked to pay fees or share sensitive documents, sometimes installing malicious “interview software” that compromises devices and networks. Gmail phishing detection, Messages Scam Detection, and 2-Step Verification provide additional layers of defense.

Businesses are facing another growing threat: extortion through fake negative reviews. Scammers flood business profiles with false one-star ratings and then demand payment to prevent further damage. Google Maps is introducing reporting tools to help merchants flag such extortion attempts directly.

The rise of AI product impersonation adds another layer of risk. Cybercriminals are exploiting user interest in AI tools by promoting harmful apps, fleeceware subscriptions, or credential-stealing browser extensions. Fake offers of free or exclusive access are circulated through hijacked social media accounts, deceptive ads, and malicious code repositories.

Google’s Safe Browsing protections now alert users in real time to risky downloads, while Play Store and Chrome Web Store teams continue removing apps that mimic legitimate AI products. Fraud recovery scams also target previous victims, posing as investigators or law firms and demanding upfront fees.

With the holiday shopping season approaching, Google anticipates a spike in scams, including fake online stores, misleading discounts, and phishing messages disguised as delivery updates. Enhanced protections on devices like the Pixel 9 aim to detect threats using on-device AI models, helping users stay one step ahead of scammers.