Google is implementing a new security measure in Android that prevents users from modifying sensitive settings during active phone calls. This feature, currently available in Android 16 Beta 2, specifically targets common scammer tactics by blocking two critical actions during calls: the installation of apps from unknown sources and granting accessibility permissions.

When users attempt to modify these settings during a call, they receive a warning message: “Scammers often request this type of action during phone call conversations, so it’s blocked to protect you. If you are being guided to take this action by someone you don’t know, it might be a scam.”

This security enhancement aims to combat Telephone-Oriented Attack Delivery (TOAD), a method where cybercriminals use SMS messages and phone calls to manipulate victims into installing malicious software. The NCC Group and Finland’s National Cyber Security Centre previously identified cases where attackers used this technique to distribute malware like Vultr.

The update aligns with Google’s broader security initiatives, including:
– Expanded restrictions on permission categories for sideloaded apps
– Automatic blocking of potentially unsafe sideloaded apps in various markets including Brazil, India, Singapore, and other Asian and African countries

This feature represents a significant step in protecting Android users from social engineering attacks during phone conversations.