Direct answer: Google announced a new opt-in Enhanced protection mode for Google Messages on October 14, 2026. It is rolling out over the coming weeks, so you may not see the switch yet. It adds stronger scam-context analysis, better checks for unfamiliar links, and clearer warnings. Android is also rolling out screen-sharing privacy and call-forwarding safeguards on separate schedules.[1]
What to do now: 5-minute checklist
- Update Google Messages, Phone by Google, Chrome, and Google Play system services from the Play Store and Android settings.
- In Google Messages, open your profile menu and review the app’s spam/security settings. Keep Spam protection on; Google says this existing protection is enabled automatically.[3]
- Look for Enhanced protection after updating. Google calls it opt-in and says it will roll out over the coming weeks. If the option is missing, wait for the server-side rollout rather than installing unofficial APKs.[1]
- If your phone supports Scam Detection in Phone by Google, update the Phone app and enable it. Google warns that the feature cannot catch every scam, so treat alerts as assistance rather than a guarantee.[2]
- Never enter call-forwarding codes, share your screen, install an app, or disclose a one-time password because an unsolicited caller tells you to.
Android’s new scam protections at a glance
| Protection | What it does | Availability stated by Google |
|---|---|---|
| Google Messages Enhanced protection | Adds stronger analysis for complex scam conversations and unfamiliar links | Opt-in; rolling out over the coming weeks |
| Private AI Compute scam analysis | Uses Google’s more capable cloud Gemini models to assess complex context from unknown senders inside a protected processing environment | Part of Enhanced protection on eligible devices |
| Gemini Nano link checks | Uses on-device AI plus real-time web signals to assess unfamiliar links before you tap | Pixel 10+, Galaxy S26 series, Galaxy Z Flip/Fold8 and other select devices |
| Unfamiliar-link checkpoints | Shows clearer warnings and adds friction before opening links from numbers outside your contacts | Android 6+ with Enhanced protection |
| Chat-notification scam alerts | Warns about suspicious chat-app notifications before you open them | Expanding later in 2026 to selected phones from multiple manufacturers |
| Automatic screen-share privacy | Blanks login and payment fields in Chrome and Android WebView during live screen sharing | Rolling out during October 2026 to Android 15+ devices |
| Call-forwarding protection | Stops apps from silently enabling forwarding and warns about manually entered forwarding codes | Starting in early December 2026 on Pixel and other select devices |
Google’s announcement supplies these rollout windows and device qualifications; availability can vary by device, manufacturer, country, language, and app version.[1]
What Enhanced protection changes in Google Messages
1. More context-aware scam detection
Traditional filters are good at spotting known spam patterns, but confidence scams often begin as ordinary conversations. With Enhanced protection enabled, Google Messages can use cloud Gemini models to evaluate the context of a conversation with an unknown sender. Google says this processing happens through Private AI Compute, where the data is encrypted and inaccessible even to Google.[1]
This is an addition to existing protections—not proof that every unfamiliar message is dangerous or that every unflagged message is safe.
2. Checks for newly created suspicious links
Known malicious domains can be blocked from reputation lists, but a brand-new phishing site may not yet be catalogued. On supported phones, Enhanced protection uses Gemini Nano on the device together with current web signals to assess an unfamiliar link before you open it.[1]
Existing Google Messages spam protection already uses on-device models and can send a URL to Google to check whether it is malicious. Google says unencrypted message contents may also be processed temporarily for spam detection, while RCS chats between Google Messages users remain end-to-end encrypted when RCS is enabled.[3]
3. A deliberate pause before risky taps
Enhanced protection also adds clearer checkpoints for links sent by numbers not saved in your contacts. This is a simple but useful design choice: slowing down the tap gives you time to inspect the sender, domain, and request.[1]
How to turn on Enhanced protection
Google’s launch announcement identifies Enhanced protection as an opt-in Google Messages setting, but it does not publish one universal menu path for every Android skin and app build.[1]
Use this safe process:
- Update Google Messages from the Play Store.
- Open Google Messages and tap your profile picture or initials.
- Open Messages settings and inspect the spam, security, or protection section for Enhanced protection.
- Read the on-screen privacy explanation before opting in.
- If the switch is absent, confirm that Google Messages is your active messaging app and check again after a later app or Play system update.
Do not install a modified Messages app to force the feature. Rollouts often happen account-by-account or device-by-device after an app update.
Screen sharing: what is protected
Android already hides some sensitive information in native apps during screen sharing. The new protection extends this behavior to login fields and payment screens displayed through Chrome and Android WebView. Google says those fields will be blanked during a live screen-share session on Android 15+ as the feature rolls out in October 2026.[1]
That reduces accidental exposure, but it does not make screen sharing with an unknown caller safe. A scammer may still see notifications, account names, balances, app lists, or other non-masked content. End the call and screen-sharing session if someone claiming to be from a bank, courier, government office, or tech-support desk asks you to navigate financial or identity settings.
Call-forwarding protection: why it matters
A scammer may try to redirect incoming calls so they can intercept verification calls or help take over an account. Android’s new safeguard blocks apps from quietly turning on call forwarding in the background. It also warns you if someone persuades you to enter an MMI forwarding code in the dialer. Google says this protection starts in early December 2026 on Pixel and other select devices.[1]
If a caller gives you a code beginning with symbols such as * or #, do not enter it while still on the call. Hang up, contact your mobile carrier through its official number, and review forwarding settings yourself.
Phone by Google Scam Detection: check it separately
The Phone app’s Scam Detection is separate from the new Google Messages Enhanced protection setting. On eligible devices, it can warn about suspicious behavior during a call. Google’s help page says it works on the device, requires the latest Phone app, and is not 100% accurate. It also uses an audible beep to notify call participants when detection is active.[2]
Because support varies by phone and region, use the current Phone by Google help page and the settings shown on your own device rather than assuming every Android phone has the feature.
Privacy: on-device versus cloud processing
The new tools do not all process data in the same place:
- Gemini Nano link analysis is described as on-device, supplemented with real-time web signals.[1]
- Complex conversation analysis in Enhanced protection can use cloud Gemini models through Private AI Compute.[1]
- Existing Spam protection uses device-side models, may check URLs with Google, and may temporarily process unencrypted message content to detect abuse.[3]
- Phone Scam Detection is described by Google as working on the device.[2]
If privacy is your priority, read the notice attached to each switch before enabling it. Security features reduce risk; they do not replace careful handling of unknown messages and calls.
Quick anti-scam rules that still matter
- Treat urgency as a warning sign. Real organizations can let you hang up and call back through an official number.
- Never share an OTP, PIN, recovery code, or screen-lock code.
- Do not install remote-access or screen-sharing software at an unsolicited caller’s request.
- Inspect the complete domain before opening a link; brand names inside a longer domain do not prove ownership.
- Verify payment or account warnings by opening the organization’s official app yourself—not by using the message link.
- Keep Android, Google Play system updates, Messages, Phone, and Chrome current.
- If money or credentials were exposed, contact the bank and mobile carrier immediately, change passwords from a trusted device, and preserve screenshots for a fraud report.
FAQ
Is Android Enhanced protection available now?
The rollout started on October 14, 2026 and is expected to continue over the following weeks. A missing switch does not necessarily mean your phone is unsupported.[1]
Is Enhanced protection turned on automatically?
No. Google describes the new Enhanced protection mode as opt-in. The older Google Messages Spam protection feature is enabled automatically and can be turned off in settings.[1][3]
Which phones get the smarter link check?
Google lists Pixel 10 and newer, Samsung Galaxy S26-series devices, Galaxy Z Flip/Fold8 and other select devices for the Gemini Nano unfamiliar-link evaluation. Broader link checkpoints are listed for Android 6+ devices, but the Enhanced protection rollout still applies.[1]
Does Android block every scam call or text?
No. Google explicitly warns that Phone app Scam Detection is not 100% accurate and that scammers keep changing tactics.[2]
When does call-forwarding protection arrive?
Google says it will begin rolling out in early December 2026 on Pixel and other select devices.[1]
Does screen-share privacy work on every Android phone?
Google says the Chrome and Android WebView protection is rolling out in October 2026 to devices running Android 15 or newer.[1]