FBI, Google Take Down AI-Powered Cybercrime Ring That Was Using Over A Million Phishing URLs To Steal Data

The FBI and Google announced the dismantling of Outsider Enterprise, a Chinese phishing-as-a-service (PhaaS) operation that used AI to deploy over 1 million phishing URLs. The group stole 3.8 million credit card records and targeted victims in 95 countries since July 2023, generating an estimated $1.9 billion in losses. Authorities seized a Shopify storefront, administration servers, a Telegram bot storing stolen data, and $100,000 in cryptocurrency. Thousands of phishing pages were redirected to an FBI announcement site. Google filed a lawsuit claiming Outsider Enterprise abused its Gemini AI to orchestrate scams, distributing phishing kits via Telegram that mimicked trusted brands. The operation triggered over 55,000 spam text complaints from Android users in two weeks, with 2.5 million messages linking to fraudulent sites. Google collaborated with the FBI, AT&T, T-Mobile, and Verizon to block scam traffic and disrupt malicious activity. Interpol reported fraud costs reached $442 billion in 2025, exceeding Denmark’s GDP, with AI-enhanced scams proving 4.5 times more profitable than traditional methods. Dark web ‘fraud-as-a-service’ platforms now offer deepfake tools for as little as $50 monthly, enabling voice cloning and forged documents within hours. Agentic AI systems automate entire fraud campaigns at reduced costs compared to five years ago. The takedown highlights the growing threat of AI-powered cybercrime, requiring cross-industry cooperation to combat increasingly sophisticated scams. Tech providers and law enforcement are working together to disrupt malicious activity and protect consumers from evolving fraud tactics. The case underscores the need for unified responses to counter AI-driven financial crimes.