Google has filed a lawsuit against an alleged Chinese cybercrime network known as Outsider Enterprise, accusing the group of operating a large-scale AI-assisted phishing scheme that targeted hundreds of thousands of victims.
The company said the operation impersonated Google and other brands to steal passwords, multi-factor authentication codes and financial information.
According to Google, losses linked to the scheme are estimated in the millions of dollars.
Massive phishing infrastructure
Google said the operation involved:
- More than 9,000 fake websites.
- Around 1 million fraudulent domains.
- 2.5 million scam text messages sent to Android users within two weeks.
The company said Android users flagged 55,000 spam texts during a two-week period in May, averaging more than two complaints every minute.
Over a five-month period between November 14, 2025, and April 14, 2026, Google detected more than 1.59 million URLs associated with the network.
FBI seizes infrastructure
The FBI, working with Google and Lumen’s Black Lotus Labs, seized several domains allegedly used by the operation.
Authorities also shut down:
- Shopify storefronts.
- Accounts used to test phishing services.
An FBI spokesperson told TechCrunch that since July 2023, the platform had enabled criminals to steal an estimated 3.87 million credit cards, resulting in approximately $1.9 billion in losses.
‘Phishing-for-dummies’ platform
According to Google’s complaint, the real identities of the individuals behind Outsider Enterprise remain unknown.
The company described Outsider as a subscription-based software platform that simplifies phishing attacks.
Pricing allegedly starts at:
- $88 per week.
- $200 per month.
Google said the platform allows users with limited technical expertise to create fraudulent websites using AI tools, including Google Gemini.
The fake sites imitate:
- Telecom providers.
- Banks and financial institutions.
- Government agencies.
- Retailers.
Hundreds of website templates
Google alleged that the platform provides:
- More than 290 pre-built templates.
- AI-generated code guides.
- Real-time dashboards for monitoring phishing campaigns.
According to the lawsuit, fake websites can be created within minutes.
The company also said criminals used Google Drive and Google Cloud services to host some of the phishing pages.
Telegram groups used for coordination
Google said members of the operation communicate openly through Telegram channels.
These groups allegedly allow participants to:
- Share training materials.
- Exchange attack strategies.
- Collaborate on phishing campaigns.
“Part of the Outsider software’s appeal is the ease with which someone with limited technical expertise can purchase the software, execute various phishing attacks, and, upon purchase, meet other members of the Enterprise who are proficient in other areas,” Google said in the complaint.
Multiple criminal groups involved
Google said Outsider Enterprise consists of several specialized groups, including:
Software developers
Responsible for maintaining phishing software and templates.
Data suppliers
Collect target lists from:
- Public records.
- Social media.
- Data breaches.
Spammers
Provide the infrastructure needed to distribute messages, including:
- Smartphone banks.
- SIM cards.
- Modems.
Money launderers
Monetize stolen credentials and move illicit funds.
Payment cards stolen worldwide
Google said attackers stole at least 36,000 payment cards issued by financial institutions in 95 countries.
The company accused the network of:
- Trademark infringement.
- Copyright violations.
- Racketeering.
- Wire fraud.
- False advertising.
Google is seeking:
- Compensatory damages.
- Punitive damages.
- A court order to halt the operation.
Google says AI is fighting AI
The company said it uses AI-powered tools to counter scams and currently intercepts more than 10 billion scam messages each month.
Google added that it has worked with:
- AT&T
- T-Mobile
- Verizon
to block malicious text campaigns and is coordinating with the FBI.
TL;DR
Google has sued an alleged Chinese cybercrime operation called Outsider Enterprise, accusing it of using AI-powered phishing tools to steal millions of dollars and compromise millions of payment cards. The FBI says losses linked to the scheme are estimated at $1.9 billion.
AI summary
- Google sued the alleged cybercrime group Outsider Enterprise.
- The operation used AI to create phishing sites and send scam texts.
- The FBI estimates losses of $1.9 billion from stolen credit cards.
- More than 1 million fake domains and 9,000 websites were involved.
- Authorities seized domains and related infrastructure.
