Google has raised concerns that over a billion Android phones are now exposed to cyber risks after security support ended for older software versions. The development puts millions of users at risk of hacking, online fraud and data breaches, especially those using phones that still appear to work perfectly but no longer receive protection behind the scenes.
According to Google’s Android distribution figures, a large share of users are still on Android 12 or earlier, versions that no longer get security patches. This means any new loophole discovered by security researchers can be exploited by hackers without a fix being rolled out.
For users, the danger is largely invisible. Phones may continue to run smoothly, apps may open as usual, and performance may not drop. However, in the background, these devices become easier targets for cybercriminals looking to steal personal data, banking details, messages or even take control of the device remotely.
The issue affects both budget and premium smartphones. Many well-known models have already completed their update life cycle, leaving users unaware that their phones are technically unsafe. Experts warn that continuing to use such devices for online payments or sensitive communication carries growing risks.
Google’s Play Protect still scans apps for malware, but specialists stress that it cannot replace full system security updates. Without regular patches, even careful users can fall victim to attacks through messaging apps, malicious links or compromised websites.
The wider concern lies in Android’s update system, where manufacturers decide how long devices receive support. This often results in phones being abandoned after just a few years, despite remaining functional.
Google advises users to check their phone’s software version and upgrade where possible. If updates are no longer available, moving to a newer device with guaranteed long-term security support is considered the safest choice.
