Google Brings AI-Powered Scam and Smishing Detection to Circle to Search

안드로이드 서클 투 서치 화면에서 의심스러운 문자 메시지에 동그라미를 쳐 AI가 사기 위험도를 분석하는 모습

Unsplash

On October 15, 2026, Google officially announced the addition of a new security feature to ‘Circle to Search,’ the flagship visual search tool on Android smartphones. This update allows users to instantly diagnose suspicious text messages and the risk of ‘smishing’ (SMS phishing) using artificial intelligence. With this update, Android users who receive messages from unknown sources or suspicious SMS alerts can identify potential fraud by simply circling the message on their screen, eliminating the need to click external links or switch to a separate spam reporting app.

AI Fraud Diagnosis Powered by a Simple Circle

The new feature integrated by Google works in conjunction with the existing Circle to Search system within the Android operating system. Once a user activates Circle to Search by long-pressing the home button or navigation bar, they can use their finger or a stylus to draw a circle around the specific text message they wish to verify. The AI Overview then triggers immediately.

Google’s AI model comprehensively analyzes the selected text for context, phishing intent, suspicious URL patterns, and deceptive language that mimics a sense of urgency. Once the analysis is complete, the screen displays potential ‘Red Flags’ along with actionable guidance, such as ‘Delete Message’ or ‘Block Number.’ This helps users proactively avoid the risk of accessing malicious links that could otherwise lead to the installation of harmful files (.apk).

Differences from Existing Spam Protection and FIM Security Analysis

Traditional mobile security systems have largely relied on carrier-level keyword blocking or databases of blacklisted numbers within messaging apps. However, modern smishing techniques are increasingly bypassing these filtering systems by using modified messages and sophisticated social engineering tactics.

Combining the recent announcement with FIM’s analysis, we can identify several technical and market implications:

  • Achieved Performance: The system provides an intuitive user experience that instantly analyzes textual context and risk factors using the native OS interface, without requiring users to switch apps or install separate security software.
  • Financial and Daily Impact: Immediate verification of smishing texts—such as fake delivery notifications, government funding alerts, or credit card transaction alerts—is expected to significantly reduce financial fraud, including small-payment theft and bank account breaches caused by clicking lure links.
  • Uncertainties and Technical Limitations: Google has not yet disclosed specific rollout timelines per device or region, nor provided statistics on analysis accuracy across different languages. The balance between on-device and cloud-based processing, as well as how diagnostic accuracy varies with network connectivity, remains a subject for further investigation.

Protecting Daily Expenses and the Mobile Ecosystem in Korea and Japan

Smishing and mobile phishing represent persistent security threats that cause direct and devastating financial losses. Countries with high smartphone penetration and significant mobile payment usage, such as South Korea and Japan, have long struggled with the social fallout of financial fraud via deceptive text messages.

In South Korea, smishing attacks disguised as delivery notifications spike during major holidays like Seollal or Chuseok, while Japan faces frequent phishing attempts involving courier services and credit card verification. By integrating fraud analysis directly into the Android OS, even elderly users or those less familiar with digital devices can identify fraudulent messages through intuitive touch gestures, which is expected to drastically lower the costs associated with social financial damages.

Global Disaster/Security Ecosystem and Google’s Strategic Direction

The introduction of this scam analysis feature aligns with Google’s broader efforts to improve global crisis response and bolster social safety nets. In the Crisis Resilience White Paper released on the same day, Google shared its global investment and research achievements in using AI to predict natural disasters, issue flood warnings, and enhance public health and cybersecurity.

The integration of personal cyber-crime prevention technology with state- and regional-level disaster preparedness systems demonstrates that AI is evolving beyond a simple convenience tool into essential infrastructure that safeguards the physical and financial well-being of the public.

Official Sources and Verified Information

This article was written based on announcements from the official Google Blog.