Google sues Gemini-linked scammers running phone phishing blitz

Google sues – Google says a Chinese cybercrime network called the Outsider Enterprise used Gemini AI to generate thousands of brand-impersonation phishing sites and flood U.S. phones with millions of scam texts. The company has filed a lawsuit in federal court to shut the o

For months, many people in the U.S. have learned to treat certain texts like background noise—an unpaid toll notice. a delivery that never arrived. rewards points that suddenly “expire.” Then the messages started arriving with more polish than a lone scammer could manage. Google says the shift is real.

In a lawsuit filed in a New York federal court. Google targets a Chinese cybercrime network it calls the Outsider Enterprise. The company alleges the group used Gemini AI to create phishing websites and to power a large-scale scam campaign aimed at millions of users. Google’s claim isn’t just that the scams are widespread—it’s that the fraud can now be scaled in ways that change how quickly it spreads and how convincingly it lands.

The network, Google says, coordinated through Telegram and distributed phishing kits to criminals around the world. Instead of relying on a handful of static pages. it used Gemini AI to generate fake websites impersonating trusted brands. including Google. YouTube. and the US Postal Service. Google says the operation used AI to produce hundreds of imposter websites at a scale that wasn’t possible before.

The numbers Google points to are staggering. The group created over 9,000 fake websites and more than one million fraudulent URLs. In just two weeks ending June 1, Android users flagged 55,000 suspicious texts. In the same period, Google says the Outsider Enterprise sent 2.5 million messages containing links to fake websites.

The fallout isn’t confined to clicks. The FBI estimates the operation stole 3.87 million credit card numbers from victims across dozens of countries, with total losses reaching $1.9 billion since July 2023.

Those figures land hardest when you imagine the everyday moments the texts are designed to interrupt. A toll you meant to pay. a package you’ve been waiting on. points you thought you could redeem later—each message is built to look like the next step in a normal routine. When that routine is hacked at this volume, it stops being a nuisance and becomes a financial threat.

Google is asking the court to shut down the operation entirely. The company says it is working alongside the FBI and carriers AT&T. T-Mobile. and Verizon to block these texts before they reach phones. Google also points to existing defenses: it says its built-in messaging defenses intercept over 10 billion malicious messages every month. and Android’s scam detection tool flags suspicious calls and contacts in real time.

But Google’s lawsuit is only one part of its push. The company is also urging seven bipartisan bills in Congress to make these protections permanent, arguing that legal action by itself will not be enough against a threat that AI has made “effectively limitless.”

Right now, the question for users isn’t whether scammers will keep trying—it’s how fast protections can catch up when the tools to mass-produce credible fraud are already in circulation.

Google lawsuit Gemini AI phishing operation Outsider Enterprise Telegram Android scam detection AT&T T-Mobile Verizon cybersecurity AI scams fraud URLs