Google Sues Alleged AI Text Scam Network Over Phishing Campaign

Google Files Lawsuit Against AI-Powered Text Scam Network – Coordinated Action Targets Large-Scale Phishing Infrastructure

Key Takeaways

• Google has filed a lawsuit against a cybercrime group it calls the “Outsider Enterprise,” alleging the use of AI tools to run large-scale text message scams.
• The group allegedly operated 9,000 fake websites and more than 1 million fraudulent URLs, sending 2.5 million scam messages in May alone.
• Android users reported 55,000 spam texts in May, while Google says its systems block more than 10 billion malicious messages per month.
• The FBI is preparing its own enforcement actions, and major US telecom providers are working with Google to block scam messages.

Google Targets Alleged AI-Driven Scam Network in Court

Google has filed a civil lawsuit against what it describes as an organized cybercrime network operating from China under the name “Outsider Enterprise.” According to the company, the group used artificial intelligence tools, including Google’s own Gemini system, to conduct large-scale phishing campaigns via text messages.

The lawsuit aims to permanently dismantle the alleged operation by targeting what Google describes as core software developers behind the scheme. In a public statement, the company said the network coordinated its activities through Telegram and sold phishing kits to other criminals. These kits allegedly enabled users to launch mass text campaigns impersonating well-known brands, including Google itself.

Google stated that hundreds of thousands of victims were affected and that total losses reached millions of dollars. The company has not disclosed specific financial figures in connection with the lawsuit.

Scale of the Operation: Millions of Messages and Thousands of Fake Sites

Details released by Google indicate a broad and structured infrastructure behind the alleged scam activity. Investigators linked the group to approximately 9,000 fake websites and more than 1 million fraudulent URLs.

In May alone, the network allegedly sent 2.5 million scam text messages. During the same month, Android users flagged 55,000 spam texts connected to the campaign. Google said this reporting contributed to identifying patterns associated with the operation.

The phishing messages reportedly impersonated legitimate services in order to trick recipients into revealing sensitive information. By combining automation with AI-generated content, attackers were able to create messages designed to appear credible and personalized, increasing the likelihood of user interaction.

Google argues that AI tools now allow cybercriminals to scale operations that previously required significant manual effort. According to the company, this shift changes the structure of fraud operations by lowering barriers to entry and expanding the speed and reach of attacks.

Coordination With FBI and US Telecom Providers

The legal action is part of a broader coordinated response. Google said it is pursuing the case alongside the Federal Bureau of Investigation, which is preparing its own enforcement measures related to the alleged scheme.

Brett Leatherman of the FBI Cyber Division described the case as an example of shared defense against transnational fraud. He stated that criminals increasingly use AI to make fraudulent activity more convincing and harder to detect.

In addition to law enforcement coordination, Google is working with major US telecom providers, including AT&T, T-Mobile, and Verizon. The stated goal is to block scam messages at the network level and reduce the reach of similar campaigns.

This multi-party approach combines civil litigation, criminal enforcement, and technical countermeasures. According to Google, such cooperation is necessary to address cross-border digital fraud operations that rely on distributed infrastructure.

Policy Advocacy and Platform-Level Countermeasures

Alongside the lawsuit, Google announced support for seven bipartisan legislative initiatives aimed at combating scams. These include the National Strategy for Combating Scams Act and the Stop SCAMS Against Seniors Act.

The company presented these efforts as part of a wider policy strategy to address systemic fraud risks. While the legislative process is separate from the lawsuit, Google linked both efforts as complementary steps in reducing online scam activity.

On the technical side, Google reported that its messaging systems currently intercept more than 10 billion malicious messages each month. The company also highlighted Android scam detection features that flag suspicious calls and contacts in real time.

These defenses are designed to identify patterns associated with phishing attempts, including unusual sending behavior, known malicious domains, and impersonation indicators. Google did not specify whether the systems were directly responsible for identifying the Outsider Enterprise but indicated that user reports and automated detection played a role.

Relevance for Digital Payment and Crypto Users

Although the lawsuit focuses on text-based phishing impersonating major brands, the case reflects a broader trend in online fraud. AI-generated content enables attackers to craft more convincing messages at scale, increasing risks for users of digital services, including crypto platforms, online payment systems, and iGaming providers.

Phishing campaigns often aim to capture login credentials, two-factor authentication codes, or wallet access information. For users evaluating crypto betting or gambling platforms, large-scale impersonation campaigns can lead to unauthorized account access or financial loss if security practices are not followed.

The alleged scale of the Outsider Enterprise, with millions of messages and thousands of fake domains, illustrates how automated infrastructure can be deployed across multiple sectors simultaneously. The use of Telegram to distribute phishing kits also points to a service-based model, where technical tools are sold or shared among different actors.

Our Assessment

The lawsuit against the group known as Outsider Enterprise combines civil action, law enforcement coordination, telecom cooperation, and policy advocacy. According to Google, the alleged operation involved millions of fraudulent messages, thousands of fake websites, and AI-generated phishing tools. The case highlights how artificial intelligence is being integrated into large-scale scam infrastructure and how companies and authorities are responding through legal and technical measures.