India Orders Google to Scrap 57 Firebase Bank-Phishing Deployments

States have long chased the medium, not just the message: in 1872 the U.S. Post Office began banning lottery leaflets from the mail, and in 2005 law-enforcement dismantled ‘Rock Phish’ fast-flux servers rather than each spoofed URL. India’s order extends that logic to 21st-century cloud back-ends, signaling a shift from punishing individual scammers to deputising hyperscale platforms as first-line gatekeepers. It reflects two structural forces: (1) explosive digital payment adoption—242 billion UPI transactions last fiscal year—creating a vast attack surface; and (2) rising “digital sovereignty” where governments assert jurisdiction over foreign tech stacks that underpin domestic finance. Whether this is a blip or a hinge-point matters: if major clouds become quasi-regulated public utilities, global cyber-crime policing may centralise, but the same levers could be pulled for speech control. In a hundred-year view, the episode is another step in the century-long dance between new communication rails and the state’s resolve to make them safe—or pliant.