How the Outsider Enterprise allegedly ran an AI-powered scam factory

The core of the lawsuit describes a highly organized operation that turned phishing into a subscription-based service . According to court filings, the Outsider Enterprise used several specific tactics:

• Generating fraudulent websites with Gemini: The group allegedly used Google’s Gemini AI chatbot to help write the code for fake websites, dramatically accelerating the production of convincing phishing pages . These weren’t a few amateur clones; Google linked the network to over 9,000 fraudulent websites and one million deceptive web domains impersonating brands like Amazon, major banks, package delivery services, and government entities .
• Industrial-scale SMS phishing (smishing): The operation is accused of orchestrating a massive smishing campaign, dispatching 2.5 million scam text messages to Android users over a single two-week period in May 2026 . The messages contained links to the AI-generated fake sites, aiming to harvest passwords, credit card numbers, and other personal information.
• Phishing-as-a-Service on Telegram: The ring didn’t just run its own scams; it commercialized the operation. It allegedly used Telegram channels to sell "phishing kits" and subscriptions to other criminals, offering over 290 pre-built templates for a reported $88 per week . This commoditized access lowered the barrier for lower-level threat actors to launch attacks using enterprise-grade tools.

The human impact was severe. Google stated that the operation affected "hundreds of thousands of victims," generating financial losses estimated in the millions of dollars . Android users themselves flagged 55,000 of the scam texts as spam during the two-week spike in May .

An unprecedented alliance: Google, the FBI, and U.S. telecoms join forces

The response to the Outsider Enterprise is as noteworthy as the attack itself. Google’s lawsuit, the first of its kind targeting the direct misuse of its own Gemini model, is just one part of a coordinated takedown .

The company is collaborating directly with the FBI, which is taking parallel law enforcement actions, and has formed an operational partnership with U.S. telecom giants AT&T, T-Mobile, and Verizon, as well as Lumen, to block the scam texts before they can reach users . This multi-front strategy represents a rare level of cooperation between the private and public sectors against a mutual cybersecurity threat.

A legal template for the AI era?

The lawsuit seeks to permanently dismantle the infrastructure of the Outsider Enterprise. Google has framed the legal action as a long-term strategy, stating it already blocks 10 billion harmful messages monthly, and that this case represents litigation becoming a "standing anti-fraud instrument" .

The case creates a potential legal and operational template for future enforcement, one that links civil injunctive relief with FBI domain seizures and real-time cooperative filtering by carriers . As AI tools make it cheaper and faster for cybercriminals to generate persuasive, large-scale fraud campaigns, this lawsuit is a clear signal that the owners of those platforms are prepared to go to court to fight back.

How the Outsider Enterprise allegedly ran an AI-powered scam factory

The core of the lawsuit describes a highly organized operation that turned phishing into a subscription-based service . According to court filings, the Outsider Enterprise used several specific tactics:

• Generating fraudulent websites with Gemini: The group allegedly used Google’s Gemini AI chatbot to help write the code for fake websites, dramatically accelerating the production of convincing phishing pages . These weren’t a few amateur clones; Google linked the network to over 9,000 fraudulent websites and one million deceptive web domains impersonating brands like Amazon, major banks, package delivery services, and government entities .
• Industrial-scale SMS phishing (smishing): The operation is accused of orchestrating a massive smishing campaign, dispatching 2.5 million scam text messages to Android users over a single two-week period in May 2026 . The messages contained links to the AI-generated fake sites, aiming to harvest passwords, credit card numbers, and other personal information.
• Phishing-as-a-Service on Telegram: The ring didn’t just run its own scams; it commercialized the operation. It allegedly used Telegram channels to sell "phishing kits" and subscriptions to other criminals, offering over 290 pre-built templates for a reported $88 per week . This commoditized access lowered the barrier for lower-level threat actors to launch attacks using enterprise-grade tools.

The human impact was severe. Google stated that the operation affected "hundreds of thousands of victims," generating financial losses estimated in the millions of dollars . Android users themselves flagged 55,000 of the scam texts as spam during the two-week spike in May .

An unprecedented alliance: Google, the FBI, and U.S. telecoms join forces

The response to the Outsider Enterprise is as noteworthy as the attack itself. Google’s lawsuit, the first of its kind targeting the direct misuse of its own Gemini model, is just one part of a coordinated takedown .

The company is collaborating directly with the FBI, which is taking parallel law enforcement actions, and has formed an operational partnership with U.S. telecom giants AT&T, T-Mobile, and Verizon, as well as Lumen, to block the scam texts before they can reach users . This multi-front strategy represents a rare level of cooperation between the private and public sectors against a mutual cybersecurity threat.

A legal template for the AI era?

The lawsuit seeks to permanently dismantle the infrastructure of the Outsider Enterprise. Google has framed the legal action as a long-term strategy, stating it already blocks 10 billion harmful messages monthly, and that this case represents litigation becoming a "standing anti-fraud instrument" .

The case creates a potential legal and operational template for future enforcement, one that links civil injunctive relief with FBI domain seizures and real-time cooperative filtering by carriers . As AI tools make it cheaper and faster for cybercriminals to generate persuasive, large-scale fraud campaigns, this lawsuit is a clear signal that the owners of those platforms are prepared to go to court to fight back.