Skip to content
News Incident

Google sues Chinese AI-powered phishing ring that sent 2.5 million scam texts in two weeks

· by Pondero Newsdesk

The short version

Google filed a civil lawsuit on June 12 against a Chinese cybercrime network called Outsider Enterprise, alleging the group used AI to send 2.5 million fraudulent texts to Android users and build over one million fake web domains.

Google sues Chinese AI-powered phishing ring that sent 2.5 million scam texts in two weeks

Google filed a civil lawsuit on June 12 against a Chinese-based cybercrime network it calls "Outsider Enterprise," alleging the group used AI tools to run an industrial-scale phishing operation targeting Android users across the United States.

What

The complaint, filed in a U.S. court, describes Outsider Enterprise as a loosely organized network of cybercriminals who coordinate through Telegram and sell access to a subscription phishing platform. Per Google's blog post, the operation sent 2.5 million fraudulent text messages to Android users over a single two-week span in May 2026. Android users flagged 55,000 of those texts as spam during the same period. The group stood up 9,000 fake websites and over one million fraudulent web domains in support of those campaigns.

The phishing platform itself, called Outsider, sells subscriptions at $88 per week or $200 per month, per TechCrunch's review of the court filing. The software includes more than 290 pre-built templates that generate fake replicas of real websites, and guides that describe how to use AI-generated code to build phishing infrastructure. Buyers can track live phishing campaign performance through an included dashboard.

An FBI spokesperson told TechCrunch that, since July 2023, the platform has enabled the theft of an estimated 3.87 million credit cards and approximately $1.9 billion in associated losses. Google's own complaint states more than 1.59 million URLs connected to the network were detected between November 2025 and April 2026.

Google said it coordinated the lawsuit with the FBI, which was taking separate law enforcement actions, and worked with AT&T, T-Mobile, and Verizon to block the messages at the network level. Google General Counsel Halimah DeLaine Prado signed the blog post announcing the action.

Why it matters

The case puts AI-powered fraud infrastructure on trial for the first time at this scale. Prior enforcement actions against phishing networks have largely targeted individual operators or small teams. Outsider Enterprise's model is different: it abstracts the technical work away so that buyers with limited skills can purchase ready-made phishing kits, run campaigns, and launder the proceeds through a structured pipeline. The platform reportedly used Google's own Gemini among the AI tools it relied on to generate fraudulent content.

For users of AI tools, the case makes the attack surface concrete. Scam texts impersonating Google, telecom providers, banks, and government agencies are not artisanal operations. They come from subscription software that any buyer can spin up in minutes.

Google's layered defense approach, combining AI detection on Android (per the company, more than 10 billion malicious messages intercepted monthly), carrier-level blocking, and civil litigation, signals a shift from reactive moderation toward proactive legal disruption of fraud infrastructure.

The company also announced it is backing seven bipartisan legislative proposals in Congress aimed at creating federal frameworks for combating AI-enabled scams. No timeline was given for any of the bills.

Context and reactions

AT&T, T-Mobile, and Verizon each issued statements supporting the action and describing their own carrier-level anti-fraud measures. FBI Assistant Director Brett Leatherman said in a statement quoted by Google: "Criminals increasingly use AI to make fraud like this more convincing and harder to detect. Together with partners like Google, we can disrupt criminal networks in ways no single organization could on its own."

The defendants in the case are described in Google's complaint as foreign-based individuals whose true identities remain unknown. Google is seeking compensatory and punitive damages and a court order to shut down the operation. Lumen's Black Lotus Labs participated in domain seizures alongside the FBI.

What to watch next

Two threads are worth tracking. First, whether the civil suit produces any named defendants or extradition requests, given that the operators are described as China-based with unknown identities. Second, whether Apple or Meta adopt a similar litigation-plus-carrier-cooperation model against AI-enabled SMS fraud networks targeting their users.

Sources