Google has filed a lawsuit against an alleged China-based cybercrime network accused of using artificial intelligence tools to support large-scale phishing and text-message scams.
The company said the group, which it calls “Outsider Enterprise,” created fake websites and sent scam messages designed to steal passwords, payment details and other sensitive information from users. Google said the operation affected hundreds of thousands of victims, with losses estimated in the millions.
The lawsuit was filed in Manhattan federal court, according to Reuters. Google is seeking to shut down the alleged phishing infrastructure and prevent the operators from continuing to use its services, trademarks and platforms in scam campaigns.
The case comes as technology companies and law enforcement agencies face growing pressure to respond to scams that use AI tools to create more convincing messages, websites and online identities.
According to Google, Outsider Enterprise used phishing kits to create fake websites that impersonated trusted brands. These websites were designed to look like real services and trick users into entering personal or financial information.
Google said the operation was linked to more than 9,000 fake websites and over 1 million fraudulent URLs. The company also said it detected more than 1.5 million URLs connected to the phishing kit between November 2025 and April 2026.
The scam campaigns reportedly relied heavily on text messages. Google said Android users reported 55,000 spam texts tied to the operation over a two-week period in May. During the same period, around 2.5 million messages containing links to Outsider-generated websites were sent to Android users.
The messages often appeared to come from legitimate companies or services. Their goal was to push users to click links and enter sensitive details on fake pages.
Google said the phishing tools made it easier for cybercriminals to launch scams at scale. The company said the operation included templates and infrastructure that allowed users to quickly create fraudulent websites impersonating well-known brands.
The lawsuit highlights how AI can be used to make online scams faster and more convincing. Google said the alleged network used AI tools, including Gemini, to help build phishing websites and scam infrastructure.
AI tools can generate text, code and layouts quickly. In the wrong hands, that can help scammers create fake pages and messages that look more polished than older phishing attempts.
Google also said it is using AI to fight scams. The company said its security systems help detect suspicious calls, texts and websites before they reach users. Google has also said it blocks billions of scam messages and works with partners to disrupt cybercrime operations.
The rise of AI-assisted scams has become a major concern for technology companies, banks, telecom providers and law enforcement agencies. Phishing attacks that once required more technical effort can now be created more quickly using automated tools.
This makes it harder for ordinary users to recognize fraudulent messages, especially when fake websites copy the design, branding and language of real companies.
Google said it is working with the FBI and major telecom companies, including AT&T, T-Mobile and Verizon, to disrupt the alleged operation and block scam texts.
Reuters reported that Google has accused the unidentified operators of misusing Google Cloud, Google Drive and Google trademarks to make scams appear more legitimate. The company is seeking monetary damages and a court order banning the phishing software.
The FBI has also warned that AI-powered fraud is becoming a growing threat. Law enforcement agencies and technology companies are increasingly working together to identify scam infrastructure, take down malicious domains and reduce the spread of phishing campaigns.
Google said the operators behind Outsider Enterprise remain unidentified but are believed to be based in China. The company described the group as a cybercrime network that supported scams targeting users through fake websites and text-message campaigns.
The lawsuit is part of a broader effort by Google to use legal action against cybercrime groups. The company has previously filed lawsuits against operators of botnets, fake review networks and other online abuse systems.
In this case, Google said legal action is only one part of the response. The company is also supporting legislative efforts in the United States aimed at improving coordination between law enforcement, government agencies and private companies fighting online scams.
For users, the case is a reminder to be careful with unexpected text messages, especially those asking for urgent action, payment details or account login information. Scam messages may appear to come from trusted brands, but links inside them can lead to fake websites designed to steal data.
Google said it will continue working with law enforcement and telecom partners to block scam messages and disrupt the infrastructure behind phishing operations. The case may also become an important example of how courts, regulators and technology companies respond as AI tools become more common in cybercrime.
Comments