For creators and makers, the latest wave of AI-driven fraud is a stark reminder that the tools we use to build can be weaponised against us. Google has taken legal action to dismantle a sophisticated Chinese cybercrime ring, Outsider Enterprise, which allegedly used artificial intelligence to impersonate major brands and steal sensitive data from hundreds of thousands of victims.
In a lawsuit filed on Friday, the tech giant accused the group of deploying AI to generate scam text messages that mimic Google and other trusted services. The operation, which Google claims has cost victims millions of pounds, operated with industrial precision. In just two weeks, the criminals launched 9,000 fake websites, registered one million fraudulent domains, and sent 2.5 million spam texts directly to Android users.
The scale of the intrusion was immediate. Google noted that 55,000 spam messages were reported by Android users in a single two-week period in May alone—averaging more than two complaints per minute. To combat this, the company has deployed its own AI systems to intercept suspicious communications, successfully blocking over 10 billion scam messages monthly. Google has also worked with carriers including AT&T, T-Mobile, and Verizon to block the traffic, while coordinating with the FBI.
An FBI spokesperson confirmed that, in partnership with Google and Lumen’s Black Lotus Labs, authorities seized numerous domains, Shopify storefronts, and accounts used to test the phishing infrastructure. The bureau stated that since July 2023, Outsider Enterprise’s platform facilitated the theft of at least 3,870,000 credit cards, resulting in estimated losses of $1.9 billion.
Inside Outsider Enterprise
Google’s complaint details a “turn-key” software suite that allows criminals of any technical skill level to launch fraudulent websites. Dubbed Outsider, the platform costs $88 per week or $200 per month and reportedly integrates with AI models, including Google’s own Gemini, to generate convincing fakes of telecom providers, banks, government agencies, and retailers.
The operation relies on a clear division of labour. Developers maintain the software; data brokers supply target lists harvested from public records and breaches; a dedicated “spammer group” handles the bulk messaging via smartphone banks and SIM cards; and a final team monetises the stolen credentials and launderes the proceeds. Google alleges that these groups coordinate openly on Telegram channels, discussing strategies and training one another without fear of detection.
The software’s appeal lies in its speed and accessibility. It offers over 290 pre-built templates that clone legitimate sites in minutes, alongside guides on how to “weaponise AI-generated code.” Victims are lured in via malicious texts or ads, then tricked into entering passwords and multi-factor authentication codes on the fake sites. The data is transmitted to the scammers in real-time via Outsider’s dashboard.
From November 14, 2025, to April 14, 2026, Google detected more than 1.59 million URLs linked to the operation. The criminals have allegedly stolen at least 36,000 payment cards issued by financial institutions across 95 countries. Google accuses the operators of wire fraud, racketeering, copyright infringement, and false advertising, seeking both compensatory and punitive damages alongside an injunction to halt their activities.
Key takeaways
- Google has sued Outsider Enterprise, a Chinese cybercrime ring accused of using AI to impersonate brands and scam hundreds of thousands of victims into losing millions.
- The operation generated 9,000 fake websites and 2.5 million spam texts in a single two-week period, relying on a modular team structure for development, data sourcing, and distribution.
- Authorities have seized key infrastructure used by the ring, which is estimated to have stolen nearly 4 million credit cards and caused $1.9 billion in losses since mid-2023.
- Google is seeking to dismantle the software suite and stop the criminals, highlighting the ongoing cat-and-mouse game between AI-driven defence and AI-enabled fraud.
Stay ahead of AI. Get the most important stories delivered to your inbox — no spam, no noise.
