Summary
- Google Messages has a new opt-in setting called Enhanced Protection, announced on 14 October 2026, which is now reaching Android phones.
- It adds three layers on top of the standard on-device spam filter: cloud Gemini analysis of conversations with unknown senders, on-device Gemini Nano checks for unfamiliar links, and redesigned warnings before you tap a link from a number not in your contacts.
- The cloud analysis runs in Google’s Private AI Compute, which Google says encrypts the data and keeps it inaccessible to anyone, including Google — and it only covers chats with strangers, not your contacts.
- The cloud scam check works on Pixel 6 and newer, Galaxy S24 series and newer, Galaxy Z Flip 6 and Z Fold 6 and newer, and other Android devices with AICore. The Gemini Nano link checks need newer hardware: Pixel 10 and newer, Galaxy S26 series, Galaxy Z Flip 8 and Z Fold 8, and a few other devices.
- It is free and takes a few taps to switch on: profile picture → Messages settings → Protection & safety → Spam and scam protection → Enhanced protection.
- Rollout is gradual, so the option may not be visible on your phone yet — updating Google Messages from the Play Store and checking again in a few days is the fix.
The Scam That Starts With “Hello”
Most people can spot a scam text that promises free money or a life-changing side hustle. The dangerous ones do not look like that. They start with a package update, a job offer, or a simple hello. The sender chats for days before asking for anything, and by then most people have let their guard down.
Google’s own survey with YouGov across the US, Canada and Australia found that 40% of smartphone users are very or extremely concerned about mobile fraud. That is the problem Enhanced Protection is built for — not the obvious spam that the existing filter already catches, but the slow-burn conversation that reads like a real chat and carries no known-bad link.
Google announced Enhanced Protection on 14 October 2026 alongside other Android scam defences, and it started reaching phones later that month. 9to5Google first spotted the setting in the Messages beta (version 20261020_00_RC00) on 23 October, and by mid-November it is appearing on more phones in the stable app. It is not on by default: nothing changes until you choose it.
What Enhanced Protection Actually Does
Enhanced Protection adds three things on top of Standard Protection, and each one targets a different weakness in the current setup.
The first is cloud-based Scam Detection. Google Messages already runs Scam Detection on the phone, and Google says the feature flags more than 5 million suspected scam calls and texts every month across Messages and the Phone app. The standard check runs locally with smaller models. In Enhanced mode, when you are chatting with someone who is not in your contacts, Messages can use Google’s larger cloud Gemini models to evaluate the full context of the conversation and work out whether the sender is trying to scam you. The point is speed and depth: the cloud models can weigh a conversation that builds over days, which is exactly the kind of scam the on-device models are most likely to miss.
The second is a smarter link check. Gemini Nano runs on the phone and uses live web signals to rate unfamiliar links before you tap them. That matters because brand-new scam sites are not on any blocklist yet — a link to a site created yesterday will sail past a list-based check. This part needs newer hardware, so it is limited to the Pixel 10 and newer, the Galaxy S26 series, the Galaxy Z Flip 8 and Z Fold 8, and a few other devices.
The third is a redesigned warning screen. Before you open a link from a number that is not saved in your contacts, Google Messages now shows a screen with clearer context about the link, designed to make you pause before tapping — especially in the moments when you are most likely to tap without thinking. This warning was previously limited to select countries or to phones with Android’s Advanced Protection turned on. With Enhanced Protection it reaches more people, and the redesigned warnings alone work on any phone running Android 6 or later.
The Privacy Trade-Off, Honestly Stated
The obvious question is what it costs in privacy. Standard Scam Detection keeps its processing on the phone. Turning on Enhanced Protection changes where some of your messages are analysed, and that is a real trade-off worth understanding before you switch it on.
Google runs the cloud analysis in Private AI Compute, a secure cloud environment for its larger Gemini models. Google says the data is encrypted there and inaccessible to anyone, including Google. The other limit that matters: Enhanced Protection only analyses conversations with unknown senders, so chats with family and friends are not included.
There are two caveats to keep in mind. First, the privacy guarantee is Google’s own description of its system — no outside auditor is named in Google’s announcement or in the coverage so far. Second, reporting a message as spam works differently: Google says a reported message and its contents are sent to Google for analysis outside Private AI Compute. So the protection is real, but it is not a promise that no scam will ever get through, and it is not a reason to stop being careful about strangers in your inbox.
How to Turn It On
The setting is not hidden, but you do need to know it exists. These are the steps, as tested in the Google Messages app:
- Open Google Messages and tap your profile picture in the upper-right corner.
- Tap Messages settings.
- Open Protection & safety.
- In the Spam and scam protection section, select Enhanced protection.
The screen offers three options: Enhanced protection, Standard protection, and No protection, which Google marks as not recommended. Standard keeps the on-device spam filter and known-bad link checks. Enhanced adds the three layers described above. If you change your mind about cloud analysis later, switching back follows the same steps.
Not every phone gets the full package. The cloud scam analysis supports the Pixel 6 and newer and the Samsung Galaxy S24 series and newer, plus the Galaxy Z Flip 6 and Z Fold 6 onward and other Android devices with AICore. The Gemini Nano link checks need the newer phones listed above. But the redesigned link warnings — the part that simply gives you a moment to think before tapping — work on Android 6 and later, which covers almost every Android phone still in use.
If the option is not in your settings yet, Google is rolling it out gradually. Update Google Messages from the Play Store and check again in a few days.
Why This Matters More Than Another Spam Filter
Text-message scams have quietly become one of the most effective ways to steal money and personal information, precisely because they do not look like the scams people are trained to spot. A delivery notice, a wrong-number text that turns into a friendly chat, a part-time job offer — these are the openings, and the ask comes days later, after trust has been built. A filter that only checks for known-bad links cannot catch that, because there is no bad link until the final message.
That is why the cloud Gemini analysis is the meaningful part of this update, and also why it is limited to strangers. Google is betting that the conversations most worth analysing are the ones with people you do not know, and that most users will accept a cloud check on those chats in exchange for an earlier warning.
It is also worth noting that Enhanced Protection is part of a wider push. Google’s November system notes also cover other Android safety and backup improvements — Quick Share can now automatically back up photos to a Windows PC — and the same month’s security update landed on Pixels and Galaxy phones, as covered in Android’s November 2026 security update. Scam protection is becoming a standard part of the Android update cycle, not a one-off feature.
The Limits Worth Knowing
No scam filter catches everything, and Enhanced Protection is no exception. Google does not promise that every scam will be detected, and the rollout is still staged — your phone may not have the option yet even if a friend’s identical model does. The Gemini Nano link checks are the most hardware-limited part, so owners of older phones will get the cloud analysis and the warnings but not the on-device link rating.
There is also the question of what happens when a scammer’s message contains no link and no obvious ask. The cloud models are designed to judge intent from context, but a patient scammer who keeps the conversation clean for long enough may still get through. The practical advice has not changed: if a message from a stranger feels off, do not tap the link and do not reply with personal details. The Android SMS bug that crashed phones earlier this year was a reminder that the Messages app itself can be a target — and that keeping the app updated is part of staying safe.
Enhanced Protection earns its place as a setting worth turning on first with a new phone. It is free, it takes a few taps, it does not change how you use the app, and it gives you an earlier warning on exactly the slow conversations you are most likely to miss. Just remember what it is: an extra layer, not a guarantee — and keep being careful about strangers in your inbox.
FAQs
Q1: What is Google Messages Enhanced Protection?
A: Enhanced Protection is a free, opt-in setting in Google Messages that adds three layers on top of the standard spam filter: cloud Gemini analysis of conversations with unknown senders, on-device Gemini Nano checks for unfamiliar links, and redesigned warnings before you tap a link from a number not in your contacts. Google announced it on 14 October 2026.
Q2: How do I turn on Enhanced Protection in Google Messages?
A: Open Google Messages, tap your profile picture in the upper-right corner, tap Messages settings, open Protection & safety, then in the Spam and scam protection section select Enhanced protection. The screen also offers Standard protection and No protection, which Google marks as not recommended.
Q3: Which phones support Google Messages Enhanced Protection?
A: The cloud scam analysis works on Pixel 6 and newer, Galaxy S24 series and newer, Galaxy Z Flip 6 and Z Fold 6 and newer, and other Android devices with AICore. The Gemini Nano link checks need newer hardware: Pixel 10 and newer, Galaxy S26 series, Galaxy Z Flip 8 and Z Fold 8, and a few other devices. The redesigned link warnings work on any phone running Android 6 or later.
Q4: Does Enhanced Protection send my messages to Google?
A: The cloud analysis runs in Private AI Compute, a secure cloud environment that Google says encrypts the data and keeps it inaccessible to anyone, including Google. It only analyses conversations with unknown senders — chats with your contacts are not included. However, if you report a message as spam, Google says that message and its contents are sent to Google for analysis outside Private AI Compute.
Q5: Why can’t I see Enhanced Protection on my phone yet?
A: Google is rolling out Enhanced Protection gradually, so the option may not have reached your phone, region or device yet. Update Google Messages from the Play Store and check again in a few days. The setting only appears on phones where it is available.
Sources: Android Police, “Google Messages has a new scam protection feature; here’s why and how I turned it on” (13 November 2026); 9to5Google, “Google Messages rolling out Enhanced Protection mode on Android” (23 October 2026).
