Google warns 40% of Android phones are no longer receiving critical security updates

Google has released updated Android distribution figures, revealing that more than 40% of active Android smartphones are no longer eligible for critical security patches.

Devices running versions older than Android 13 remain exposed to new malware and spyware threats. According to the latest data, only Android 13 and newer receive critical security updates. Android 16 accounts for 7.5% of devices, Android 15 for 19.3%, Android 14 for 17.9%, and Android 13 for 13.9%. Combined, that represents roughly 58% of the ecosystem. The remaining 42% are running Android 12 or earlier without ongoing security support.

Amid growing spyware activity, Google is urging users of unsupported devices to take the risks seriously. If a phone cannot be updated to Android 13 or newer, switching to a more recent device — even a mid-range model — is considered the safest option.

Google notes that Play Protect continues to function on devices running Android 7 and above, providing real-time app scanning and malware detection. However, this does not replace system-level security updates.

Samsung has also drawn attention in this context. The Galaxy S21 series no longer receives security patches, while the Galaxy S22 and S21 FE have been moved from a monthly to a quarterly update schedule.