Google files a lawsuit against an alleged Chinese cybercrime operation called Outsider Enterprise, accusing it of using AI-powered phishing tools to run large-scale scam campaigns through fraudulent text messages. Google alleges the group impersonates Google and other brands to trick recipients into clicking links that lead to fake websites designed to steal personal information, including passwords and credit card data.

Across outlets, Google says the campaign reached Android users with more than 2.5 million fraudulent texts sent over a two-week period in May. Google also alleges the operation relied on extensive web infrastructure, including thousands of fake websites, large numbers of malicious URLs or domains, and activity that victimized “hundreds of thousands” of people, with losses estimated in the millions.

Google says it is coordinating with the FBI and working with U.S. mobile carriers AT&T, T-Mobile and Verizon to disrupt the scam messages. It also describes ongoing efforts using AI-based defenses to detect and intercept scam communications. Separately, Google supports legislation aimed at strengthening protections against AI-enabled scams and online fraud.