Schlagwort: Safety and Security

Businesses often rely on phone calls to reach out to new customers and serve existing ones. But here’s the hang-up: customers often don’t answer the call if they don’t recognize the number. They worry it could be spam, or worse, a scam: a 2019 FTC report found that phone calls were the number one way people reported being contacted by scammers. While most people said they hung up on those calls, those who lost money reported a median loss of $1,000. Spam and scam calls erode trust in businesses and increase costs to consumers.

Verified Calls by Google

Verified Calls aims to solve this problem by showing the caller’s name, logo, reason for calling and a verification symbol indicating the business has been authenticated by Google. This is done in a secure way—Google doesn’t collect or store any personally identifiable information after verification.

Verified Calls is a feature on Google’s Phone app, which comes pre-loaded on many Android phones and will be available for download starting later this week on even more Android devices.

Better answer rates

We’ve been piloting Verified Calls for a few months, and the early results indicate that it improves the likelihood of someone answering a call. This in turn helps reduce business costs while identifying relevant calls to people in a trustworthy way. A wide range of businesses and institutions have been using Verified Calls during the pilot. For instance, banks calling to alert a customer about a possible fraudulent transaction can increase answer rates by stating the call reason. A food delivery or logistics company can do the same to make sure customers are available to receive their deliveries.

Verification increases consumer trust

Based on last year’s launch of Verified SMS, which confirms the identity of the business that’s texting you, we learned that verified communication is valuable to both businesses and consumers. A study in the U.S. and Brazil found that Verified SMS increased consumer trust in brands, which significantly improved performance on metrics like likelihood to purchase, brand satisfaction, and likelihood to recommend.

Getting started

Verified Calls is initially rolling out in the U.S., Mexico, Brazil, Spain and India, with more countries to come. Brand and channel partners can get more information on our website. We also have existing partners—including Neustar, Five9, Vonage, Aspect, Bandwidth, Prestus, Telecall, and JustCall—ready to help brands improve their answer rates by using Verified Calls. To understand how Verified Calls works, tune in to our special session at Google Cloud Next ‘20 On Air.

Keeping data safe and private is a key priority for Android—and we’ve built a number of features to keep your device secure and give you control. As part of Cybersecurity Awareness Month, here are a few of these features, and our top tips for staying safe on your phone.

Warding off sneaky phishing attacks

Phishing is when a bad actor (we’re talking criminal here, not someone with low-rated movies on Rotten Tomatoes) tricks you into giving them your private information. Phishing can come in the form of a convincing email that looks like it’s from a company or co-worker you know, spam phone calls, and even text messages. 

Typically, these bad actors want to steal credit card numbers, social security numbers, or account login information (usually for financial gain or identity theft), but there may be other pieces of data they’re looking to steal.

Thankfully, you have three important features on your Android device that protect them from phishing:

• Caller ID & Spam Protection: This shows you when a call you’re receiving may be coming from a suspected spammer.
• Safe Browsing: This Chrome feature lets you know if you stumble across a website we know to be bad, and will help you quickly get to safety.
• Phone-as-a-Security-Key: While other forms of on-device two-factor authentication, such as SMS one-time codes and push notifications, can be phished by a remote attacker, Android’s built-in security key gives you the strongest form of Google account protection. 

Privacy controls you can depend on

On mobile devices, apps can access a lot of pertinent information such as contacts, web histories, location, photos, and more. This makes apps more useful—for example, helping you navigate to a desired destination in Maps—but you still want to make sure that you control who sees what. 

You can choose how their data is shared with apps and services through a number of different means:

• Permissions: Apps have to ask you for permission to access certain types of data, like your photos or contacts. To grant or revoke permission, head to Settings > Privacy, if you are using Android 10. For Android Pie and below, head to Settings > Apps & notifications > Advanced > App Permissions.  
• Location permissions: You can tell an app that it may only access your location when you’re actually using that app, as opposed to “all the time” or “never.”
• Incognito mode in Google Maps: When you turn on Incognito mode in Maps, your Maps activity on that device, like the places you search for, won’t be saved to your Google Account and won’t be used to personalize your Maps experience.

Keeping bad apps off your device

Bad actors also use potentially harmful applications to steal information. Google Play Protect makes sure these applications stay off your device by automatically scanning your apps to make sure everything is safe. If you do encounter one of these bad apps, Google Play Protect will quickly alert you and instruct you on how to remove the app from your device. 

You can access Google Play Protect by going to the security section of your settings. If you ever want to run a scan manually, you can prompt it to do so there. When it comes to security and privacy on Android, you’re never alone. You have both the underlying, automatic protections and the personalized control you need to keep your information safe and private. Want to learn more? Visit our Security Center today. 

Phishing—when an attacker tries to trick you into turning over your online credentials—is the most common cause of security breaches. Preventing phishing attacks can be a major challenge for personal and business users alike. At Google, we automatically block the overwhelming majority of malicious sign-in attempts (even if an attacker has your username or password), but an additional layer of protection can be helpful.

Two-step verification (or 2SV) makes it even harder for attackers to gain access to your accounts by adding one more step to the sign-in process. While any form of 2SV, like SMS text message codes and push notifications, improves the security of your account, sophisticated attackers can skirt around them by targeting you with a fake sign-in page to steal your credentials.

We consider security keys based on FIDO standards, like our Titan Security Key, to be the strongest, most phishing-resistant method of 2SV on the market today. These physical security keys protect your account from phishers by requiring you to tap your key during suspicious or unrecognized sign-in attempts.

Now, you have one more option—and it’s already in your pocket. Starting today in beta, your phone can be your security key—it’s built into devices running Android 7.0+. This makes it easier and more convenient for you to unlock this powerful protection, without having to carry around additional security keys. Use it to protect your personal Google Account, as well as your Google Cloud Accounts at work. We also recommend it for people in our Advanced Protection Program—like journalists, activists, business leaders and political campaign teams who are most at risk of targeted online attacks.

To activate your phone’s built-in security key, all you need is an Android 7.0+ phone and a Bluetooth-enabled Chrome OS, macOS X or Windows 10 computer with a Chrome browser. Here’s how to do it:

1. Add your Google Account to your Android phone.
2. Make sure you’re enrolled in 2SV.
3. On your computer, visit the 2SV settings and click „Add security key“.
4. Choose your Android phone from the list of available devices—and you’re done!

When signing in, make sure Bluetooth is turned on on your phone and the device you are signing in on.

We recommend registering a backup security key to your account and keeping it in a safe place, so you can get into your account if you lose your phone. You can get a security key from a number of vendors, including our own Titan Security Key.

Here’s to stronger account security—right in your pocket.