Google Android Update Blocks In-Call Scam Permissions
The new Play services safeguard prevents malicious apps from accessing device controls during active phone calls.
Updated on Oct. 26, 2026 in Cybersecurity
Live Poll
Do you feel confident that your phone's current security features adequately protect your personal data?
Google has released an in-call safeguard within Google Play services version 26.41 to prevent scam apps from requesting accessibility permissions. This security update is currently available for devices running Android 15 and earlier.
Why it matters
The update mitigates risks from malicious apps, such as the RedHook banking malware identified in July 2026, which exploit accessibility settings to capture screen content and gain device control during calls.
Google Play services 26.41 adds specific protection for devices running Android 7.0 through Android 15. The update addresses the unauthorized use of accessibility permissions, a feature that was previously restricted on Android 16 in May 2025.
The players
The developer of the Android operating system and Google Play services, which provides core system updates and security patches across the Android ecosystem.
The details
The update targets apps attempting to gain accessibility permissions—services that allow apps to read screen contents and perform actions on behalf of a user—specifically during active voice calls. By restricting these requests, the system prevents malicious software from intercepting data or executing unauthorized commands while the user is engaged on the phone. This approach follows Google's ongoing effort to harden system security, including the September 2026 update which patched 180 total vulnerabilities.
Timeline
May 2025: Google restricted accessibility permissions for Android 16.
July 2026: Researchers identified the RedHook Android banking malware.
September 2026: Google patched 180 vulnerabilities in system security updates.
October 19, 2026: Google published release notes for Play services version 26.41.
The Tech Race
This update follows the discovery of RedHook banking malware, which necessitated a defensive shift in how Android handles sensitive permission requests. The change marks a further tightening of system-level controls following the initial restrictions implemented on Android 16.
Users running Android 15 or earlier can verify the update via Settings by navigating to the Google profile, selecting All services, and accessing Privacy & security under System services. The update applies automatically to supported devices, providing protection against apps that attempt to hijack accessibility functions during calls.
The takeaway
Google is prioritizing the restriction of accessibility permissions to counter sophisticated mobile malware that exploits live call sessions. Users should verify their Google Play services version to ensure they are on the latest patch, as these system-level protections are essential against evolving banking threats.
Further reading
For broader trends in mobile device security and OS hardening, see Cybersecurity.
Source note: This article includes information reported by TechRepublic.
Live Poll
Do you feel confident that your phone's current security features adequately protect your personal data?
