Indian police to query Google over 500,000 fake Gmail IDs linked to bomb hoax

The investigation comes after a bomb threat email was sent to Gujarat government on Sep 10, days ahead of the recent New Delhi summit of the BRICS grouping.

Read a summary of this article on FAST.
Get bite-sized news via a new
cards interface. Give it a try.
Click here to return to FAST Tap here to return to FAST
FAST

NEW DELHI: Indian police will question Google over a lack of safeguards after smashing a criminal network that set up and managed more than 500,000 fake Gmail accounts to send hoax bomb threats to government offices, a police official told Reuters on Tuesday (Sep 15).

India is one of Google's largest markets by users, where the United States tech giant is already under scrutiny after authorities found a pattern of criminals misusing its web development platform, Firebase, for financial scams.

Police in the western state of Gujarat broke up an email network this week that they described as sending "inter-state" bomb threats and arrested two individuals, uncovering 513,847 Gmail IDs and passwords being used since 2022.

Reuters is the first to report that Google itself figures in the investigation. The scale of fake Gmail accounts in use is unprecedented, Vivek Bheda, a senior cybercrime official of the Gujarat police, told Reuters.

CNA Games

Guess Word
Crack the word, one row at a time

Buzzword
Create words using the given letters

Mini Sudoku
Tiny puzzle, mighty brain teaser

Mini Crossword
Small grid, big challenge

Word Search
Spot as many words as you can
Show More
Show Less

"We will write to Google, ask them to make some policy changes so (safeguards) cannot be bypassed," Bheda said, adding that police planned to formally designate Google as a subject of the investigation soon.

Google, owned by Alphabet, did not immediately respond to a request for comment. It was not immediately clear what legal charges or penalties, if any, Google could face.

BOMB THREAT TIMED TO BRICS SUMMIT

India's burgeoning cybercrime causes losses running into more than US$2 billion a year from financial scams, and its law enforcement has increasingly tackled technology platforms seen to have been exploited to enable such crimes.

The Gujarat investigation began after a bomb threat email received by the state government on Sep 10, days ahead of the recent New Delhi summit of the BRICS grouping.

It also threatened countries cooperating with India during the summit, police said in a statement.

The threats proved false, Bheda said, adding that one of those arrested was in contact with a buyer in Bangladesh who purchased batches of the accounts and paid partly in cryptocurrency to send the fake emails.

Also of concern to police, Bheda said, was the fact that each fraudulent account employed two-factor authentication, an extra security step Google offers to keep accounts safe.

How the criminal network managed to do this for such a large number of accounts is another angle of investigation.

Newsletter

Morning Brief

Subscribe to CNA’s Morning Brief

An automated curation of our top stories to start your day.

Newsletter

Week in Review

Subscribe to our Chief Editor’s Week in Review

Our chief editor shares analysis and picks of the week's biggest news every Saturday.

Sign up for our newsletters

Get our pick of top stories and thought-provoking articles in your inbox

Subscribe here

Get the CNA app

Stay updated with notifications for breaking news and our best stories

Download here

Get WhatsApp alerts

Join our channel for the top reads for the day on your preferred chat app

Join here