Google files civil lawsuit against AI-powered 'Outsider Enterprise' cybercrime network, coordinates with FBI

Google filed a civil lawsuit on June 12, 2026 targeting a China-based cybercrime operation it calls the "Outsider Enterprise," alleging the network built an AI-powered phishing infrastructure that has defrauded hundreds of thousands of victims. The company is coordinating with the FBI on parallel law enforcement actions and working with AT&T, T-Mobile, and Verizon to block fraudulent texts at the carrier level.

What's new

The Outsider Enterprise operates out of China and uses Telegram to distribute phishing kits—ready-made toolkits that allow criminals to run spoofed SMS campaigns impersonating trusted brands including Google, financial institutions, and parcel services. The scale of the operation is significant:

• 9,000 fake websites and over 1 million fraudulent URLs
• 55,000 spam texts flagged by Android users in May 2026 alone
• 2.5 million fraudulent messages sent to Android users over a single two-week period
• Hundreds of thousands of victims with losses in the millions

Google's civil lawsuit targets the technical infrastructure underpinning the network, with the goal of dismantling its operational capacity. The FBI is conducting simultaneous law enforcement actions. AT&T, T-Mobile, and Verizon are participating in an active carrier-level blocking effort.

On the policy front, Google is supporting seven bipartisan federal bills to create permanent legal protections against AI-assisted fraud, including the Stop SCAMS Act sponsored by Representatives Brian Fitzpatrick and Josh Harder.

Context

Google has escalated its anti-scam posture through 2025 and 2026, issuing monthly fraud advisories and investing in Android's built-in scam detection capabilities. This lawsuit marks a shift from defensive countermeasures—spam filters, user alerts—to direct legal action against criminal infrastructure.

This is not an isolated case. OpenAI's June 10 report documented PRC-linked influence operations using ChatGPT to interfere in U.S. debates over AI data centers and trade policy. The Outsider Enterprise case is distinct—it is financially motivated rather than politically driven—but it reflects the same pattern: sophisticated actors adopting AI tools to automate fraud at a pace human defenders struggle to match.

FBI Assistant Director Brett Leatherman noted: "Criminals increasingly use AI to make fraud like this more convincing and harder to detect." A Congressional statement from the bipartisan coalition backing anti-scam legislation warned that criminal networks "are using AI, spoofed messages and trusted brands to defraud families, seniors and small businesses."

Why it matters

This case is shaping up as an early template for how large technology companies will use civil litigation as an enforcement instrument against AI-facilitated crime. Criminal prosecution of China-based actors faces obvious jurisdictional barriers; civil lawsuits targeting infrastructure—domains, servers, toolkits—can deliver injunctive relief that disrupts operations in near-real time.

The layered approach Google is deploying—legal action, carrier coordination, and federal legislative advocacy simultaneously—reflects an understanding that no single mechanism is sufficient. The lawsuit can dismantle the current Outsider Enterprise infrastructure, but without permanent legislative frameworks, successor operations can rebuild. The proposed Stop SCAMS Act and related bills would create ongoing legal obligations for platforms and carriers to address AI-powered fraud.

For the broader AI industry, this action reinforces a growing expectation that providers bear some responsibility for detecting and disrupting misuse of their platforms. Google's civil lawsuit is both a direct counter-operation and a signal about where the legal landscape is heading.