Google sues Chinese crime group for weaponizing Gemini AI in phishing

Editorial illustration for: Google sues Chinese crime group for weaponizing Gemini AI in mass phishing campaign

In brief

  • Google sued Outsider Enterprise for deploying Gemini AI to generate phishing websites and fraudulent messages targeting financial credentials
  • The operation stole 3.87 million credit card numbers and caused $1.9 billion in losses since July 2023
  • FBI identified over 8,000 phishing sites deployed across dozens of countries; Google received 55,000 suspicious reports in two weeks
  • AI-powered financial scams generated 22,364 complaints and cost Americans $893 million in 2025

Scope of the Operation

Google received approximately 55,000 reports of suspicious messages on Google Messages in the two-week period ending June 1, many allegedly connected to Outsider Enterprise. The FBI said the operation deployed more than 8,000 phishing websites across dozens of countries, casting a wide net across multiple financial sectors.

The scale of financial damage is substantial. The network stole an estimated 3.87 million credit card numbers, contributing to roughly $1.9 billion in losses since July 2023. The phishing sites allegedly targeted various financial accounts, including cryptocurrency wallets and exchange credentials, signaling that crypto holders were among the primary victims.

This case arrives as law enforcement agencies confront a widening frontier of AI-enabled fraud. For the first time in its nearly 25-year history, the FBI's Internet Crime Complaint Center dedicated a section to artificial intelligence scams. AI-powered financial scams generated 22,364 complaints and cost Americans nearly $893 million in 2025 alone.

Crypto fraud remains a persistent vector. The FBI received 1,008,597 total internet crime complaints in 2025, with crypto-related complaints accounting for 181,565 reports and $11 billion in losses. The agency has mobilized resources in response. The FBI's Operation Level Up, launched in 2024, has notified over 8,000 cryptocurrency fraud victims and prevented more than $500 million in potential losses.

The lawsuit signals Google's willingness to pursue legal remedies against organized actors who abuse its platform. It also underscores a broader challenge: generative AI tools, designed to accelerate legitimate work, can be weaponized by sophisticated criminal networks operating across borders.