Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The strongest Android setup uses several layers: caller-ID and spam filtering for calls, Scam Detection and link warnings for messages, Play Protect for apps, Safe Browsing for websites, and stronger account authentication. Turn these controls on, then verify any urgent request through an official app or a number you already trust. No filter catches every spoofed call, message, or malicious page.
Use this layered setup first
Android’s anti-scam controls protect different attack channels. A warning asks you to decide; filtering hides or diverts routine spam; blocking prevents some activity; account protection limits damage if a password is exposed. The table shows what each control actually does and what can limit it.
| Attack channel | Setting or feature | Automation | Availability and requirements | Privacy and reversibility |
|---|---|---|---|---|
| Phone calls | Caller ID and spam protection; Filter spam calls; Call Screen or spam autoblocking on some devices | Warns, filters, or blocks depending on the option | Phone by Google, device software, country and language; fake-call detection requires Android 12 or newer, Phone by Google, Contacts, and Google Messages with RCS enabled | Call-number processing is involved; filtered calls remain in history and can be reviewed or unblocked |
| SMS and chat | Scam Detection, message-spam protection, unsafe-link warnings | Displays warnings and may identify a chat as likely scam | Supported Android device, app, account, region and language; feature is on by default where supported | Detection is designed to preserve message privacy; sharing a selected message to improve detection is optional |
| Installed apps | Google Play Protect and Improve harmful app detection | Scans, warns, disables or removes harmful apps; can block some unverified installs | Play Store and Android services; extra detection is useful when installing outside Google Play | Can be disabled, and apps can be restored or reinstalled, but removing a harmful app may interrupt its service |
| Web pages and fake support screens | Safe Browsing Live Threat Protection; Play Protect phishing detection; Advanced Protection | Warns or blocks known and emerging threats | Support varies by Android release, browser, account, profile and region | Warnings are reversible by leaving the page; profile controls can be managed separately |
| Bank impersonation calls | Verified incoming bank calls, when the bank participates | Shows verification through the bank’s official app | Android 11 or newer, the official bank app installed, and a previous sign-in; financial-institution support is required | Does not eliminate caller-ID spoofing when unavailable |
| Google Account | Advanced Protection with a FIDO2/WebAuthn security key | Requires the physical key for stronger sign-in and recovery controls | Compatible USB-C or NFC key, Android, browser and account support | Very strong phishing resistance, but losing the key requires the account’s recovery method |
Stop more fraudulent calls
Turn on caller ID and spam protection
- Open the Phone app.
- Tap the three-dot menu, choose Settings, then open Caller ID & spam.
- Leave See caller ID & spam enabled.
- Turn on Filter spam calls if the switch appears.
Google says caller ID and spam protection is on by default. Filtered calls do not disappear without a trace: they remain in call history and can still be checked through voicemail. On phones with automatic Call Screen, the interface may show a spam-autoblocking control instead of a separate Filter spam calls switch. Menu names differ by Android release and Phone app version.
Report and block a repeat offender
In the Phone app, open Recents, tap the suspicious entry, and choose Block or Report spam. Reporting helps identify a number as unwanted; blocking stops that number from calling your device again. If a legitimate caller was blocked, open the same call details and use Unblock.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
To reject calls that conceal their number, open Phone > Settings > Blocked numbers and enable the option for private or unidentified callers. This does not reject every unsaved caller: a number that is visible but not in Contacts can still ring. Use this setting only if you can accept missing calls from new customers, clinics, delivery drivers or other legitimate callers.
Understand fake-call detection limits
Some Android protection features analyze a call for scam patterns. Google lists Android 12 or newer, Phone by Google, Contacts, and Google Messages with RCS enabled as requirements for fake call detection. Availability can still depend on country, language, account configuration and the installed app versions. Spoofing can make a scam appear to come from a real bank, government office or local number, so a caller-ID label is not proof of identity.
Block and flag scam texts
Enable Scam Detection
- Open Android Settings.
- Use the Settings search box for Scam Detection.
- Open the result and keep Message scams enabled.
On supported devices, a suspicious conversation can display a red warning and a Likely scam action. The feature is enabled by default where it is offered, but it may not catch every scam. A warning is a reason to stop, not a verdict that every unflagged message is safe.
Keep message spam and link warnings on
Google Messages provides spam and scam protection and can warn about links sent by unknown users. Eligibility depends on the device, region, language, app and account configuration. Do not turn these warnings off merely because a message looks professional; scammers frequently copy a bank’s colors, logos and writing style.
Scam Detection is designed to analyze messages while keeping their contents private. Google says message content is not shared unless you choose to share a selected message to improve detection. Review the prompt before sharing anything, especially a message containing account numbers, one-time codes or personal conversations.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Handle a suspicious message safely
- Do not reply, call the number in the message, open its attachment, or tap its payment link.
- Use Report spam and Block in Google Messages when available.
- Open the organization’s official app or type its known web address yourself to check the claim.
- Never provide a one-time passcode, password, card number or remote-access permission in response to an unsolicited text.
Keep malicious apps from creating fake support screens
Check Play Protect
- Open the Google Play Store.
- Tap your profile picture, choose Play Protect, then tap the settings gear.
- Leave Scan apps with Play Protect enabled.
- If you install apps outside Google Play, consider enabling Improve harmful app detection.
Play Protect checks apps from Google Play and apps installed from other sources. It can warn about harmful behavior, disable or remove a harmful app, and block some unverified installations that request sensitive permissions commonly abused for financial fraud. Google recommends always keeping Play Protect on.
A clean scan is not a guarantee that an app is trustworthy in every circumstance. Review an app’s requested permissions, developer information and purpose. Be especially cautious when a pop-up tells you to install an APK, grant accessibility access, enable device administration or allow screen sharing in order to “fix” a virus.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallUse phishing detection for on-screen attacks
Google Play Protect Service includes phishing detection that can analyze device screens locally. Its control is in Android Settings and can be managed separately for personal and work profiles. Work-profile administrators may control the setting, so a switch that is unavailable or locked is not necessarily an error.
Advanced Protection adds stronger controls on supported Android devices, including blocking unknown apps, Safe Browsing Live Threat Protection and requirements related to Scam Detection. It is useful for people who are frequently targeted, manage valuable accounts or can tolerate tighter installation and sign-in rules.
Make browser warnings a hard stop
Keep Safe Browsing active in your Android browser. Google says Safe Browsing Live Threat Protection can block phishing attacks from fast-emerging malicious websites. Browser labels and paths vary, but the control is generally found in the browser’s Settings under Privacy and security or Safe Browsing.
Rank #3
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- USB TYPE C Connectivity & DONGLE Design: Designed for PCs, Macs, laptops, iPhones, and Android devices that utilize a USB-C port. Plug and stay, or carry it on a keychain. (Item Size: 0.73 x 0.60 x 0.30 inches)
- Enhanced MFA (FIDO2 & TOTP/HOTP): Strengthen your security with flexible options. Use the Manager App to access TOTP/HOTP features for accounts that do not yet support FIDO2.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID. NFC functionality is not supported.
When a red or full-page warning appears, leave the page. Do not enter credentials, card details or recovery codes, even if a phone caller told you to visit the page or supplied a “support” link. A legitimate support agent should not need you to bypass a browser warning to protect an account.
Free tools Windows power users keep installed
One-click scans. No signup required.
Verify calls that claim to be your bank
Some banks support Android’s verified incoming bank calls. When available, the bank’s official app can verify a supported incoming call. Google lists three basic requirements: Android 11 or later, the official bank app installed, and a previous sign-in to that app. Participation varies by financial institution.
Verification is an additional signal, not permission to disclose secrets. If the feature is unavailable, caller-ID spoofing remains possible. End the call and open the bank app yourself, use the support number printed on a card or statement, or visit a branch. Never transfer money to “protect” it, install remote-control software, or read a one-time code to an inbound caller.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Harden the account a scammer is trying to reach
Consider Advanced Protection and a security key
Google Account Advanced Protection uses security keys to resist phishing and recommends a stronger second step than text-message codes. A compatible USB-C or NFC FIDO2/WebAuthn key is the physical device that fits this use case. Before buying, check compatibility with your Android version, browser, Google Account and the key’s connector or NFC support.
Enroll the key from your Google Account security settings, register a backup key, and store both separately. A security key is difficult for a remote scammer to use because possession of the physical key is required. It does not make a malicious app or already-unlocked phone safe, so retain screen lock, Play Protect and browser protections.
Rank #4
- POWERFUL SECURITY KEY: The YubiKey 5C Nano is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C Nano secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: The YubiKey 5C Nano is designed to stay plugged into your device via USB-C. Simply tap it to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Why text-message codes are weaker
A texted code can be relayed to a scammer who is impersonating support, or exposed if a phone number is taken over. A security key binds authentication to the genuine sign-in site and requires a physical touch or NFC action. If Advanced Protection is too restrictive for your work or travel setup, use the strongest non-SMS second step your account supports and keep recovery details current.
Check availability before troubleshooting
Android security labels and features are not identical across phones. Availability can change with:
- Android version and the phone manufacturer’s system software.
- Phone by Google and Google Messages versions, including whether RCS is enabled.
- Country, language, mobile carrier and bank participation.
- Personal versus managed work profile.
- Google Account type and administrator policies.
If a setting is missing, install pending system and app updates, confirm that the relevant Google app is the default where required, search Settings by the feature name, and check whether a work administrator controls it. Do not install an unofficial “security” app or APK to obtain a missing switch.
Fix false positives without weakening protection
A legitimate caller or message was filtered
Review the call history or voicemail, open the call details, and unblock or mark the number as not spam if that option is offered. Add important contacts to your address book. For messages, inspect the conversation in the spam folder and use the built-in recovery or “not spam” action. Keep link warnings enabled even after one false positive.
Recommended Free Tools
An app was blocked after sideloading
First, confirm that you obtained the app from the developer’s genuine channel and that the requested permissions match its purpose. If you still need it, look for an official Play Store version rather than overriding Play Protect. If the app requests accessibility, SMS, notification access or device administration without a clear reason, remove it instead of weakening detection.
A warning appears after you already entered information
- Close the page or call and disconnect remote-control software.
- From a known-clean device, change the affected password and every account that reused it.
- Contact the bank or service through its official app or published number and report possible fraud.
- Revoke unfamiliar sessions, recovery methods and third-party app access.
- Run Play Protect and install Android and app updates.
What Android settings cannot guarantee
Spam databases and scam models change, while attackers can rotate numbers, domains and wording. Filters may miss a new campaign, and a legitimate message can be flagged. Caller-ID spoofing can defeat a familiar-looking number, and a malicious app can behave normally during an initial scan. Treat an urgent request for secrecy, payment, remote access or a verification code as suspicious regardless of which label Android displays.
The safest habit is independent verification: stop the interaction, open an official app or use contact details you obtained separately, and initiate the conversation yourself. Android’s controls reduce exposure and add friction; they do not replace that verification step.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →
