Google has filed a lawsuit against an alleged Chinese cybercrime operation called Outsider Enterprise, accusing the group of using artificial intelligence to supercharge a massive scam-text campaign that targeted Android users. The tech giant announced the legal action on Friday, revealing that the network deployed 2.5 million scam messages in just two weeks this past May, impersonating Google and other brands to steal passwords and credit card numbers.
According to Google, the group created more than 9,000 fake websites and registered 1 million fraudulent web domains to support its operations. The company estimates that Outsider Enterprise financially scammed hundreds of thousands of victims, with total losses reaching into the millions of dollars. In a two-week period alone, Android users flagged 55,000 spam texts, a rate of more than two complaints per minute.
Also read: Oracle warns of critical PeopleSoft bug exploited by ShinyHunters in mass hacking campaign
How AI powered the scam operation
The lawsuit highlights a growing trend: cybercriminals using AI to generate convincing scam messages at scale. Google said Outsider Enterprise leveraged AI tools to craft text messages that closely mimicked legitimate communications from well-known brands, making it harder for recipients to distinguish real alerts from phishing attempts. The messages often included links to fake login pages designed to harvest credentials and financial data.
Google is countering with its own AI-powered defenses. The company said it uses machine learning models to detect and block suspicious messages, intercepting more than 10 billion scam texts per month globally. These tools also alert users in real time about potentially harmful calls and messages.
Also read: Andrew Yang on AI, UBI, and why he is building instead of waiting for Washington
Industry and law enforcement coordination
Google said it has been working with major U.S. carriers — AT&T, T-Mobile, and Verizon — to block the scam texts at the network level. The company is also coordinating with the Federal Bureau of Investigation, which is taking unspecified law enforcement actions. The FBI did not immediately respond to a request for comment.
The lawsuit seeks to dismantle the infrastructure behind Outsider Enterprise, including its domain registrations and hosting services. Legal experts say the case could set a precedent for holding foreign cybercrime groups accountable under U.S. law, particularly when they use emerging technologies like generative AI.
Why this matters for Android users
For the millions of Android users who receive unsolicited text messages daily, the case underscores the importance of vigilance. Google advises users to avoid clicking on links in unsolicited texts, to report spam messages through the Android Messages app, and to enable spam protection settings. The company also recommends using two-factor authentication and regularly updating passwords to reduce the risk of account compromise.
The lawsuit is the latest in a series of legal and technical actions by Google to combat AI-enabled fraud. As cybercriminals adopt more sophisticated tools, the line between legitimate communication and scam is becoming harder to draw — a challenge that regulators, carriers, and tech companies are racing to address.
