Android 15 Rolls Out Advanced Features to Protect Users from Scams and Malicious Apps

Google is introducing Android 15 features to block malicious apps from capturing sensitive data and performing overlay/accessibility attacks: updates to the Play Integrity API to detect screen capture/overlays and check Play Protect status, expanded restrictions and user approvals for sideloaded apps, live on-device threat detection using Private Compute Core and real-time code-level scanning, alerts for unencrypted/bogus cellular networks, and automatic hiding of OTPs during screen sharing. These mitigations are aimed primarily at banking trojans and fraud campaigns (the report notes Anatsa attempting to bypass restrictions), though Google cautions attackers continue to evolve and pilots enhanced protections in select markets.