FBI Disrupts AI-Powered Phishing Service Linked to 3.8 Million Stolen Credit Cards

The FBI, working with Google and Black Lotus Labs, has dismantled a Chinese phishing-as-a-service operation called Outsider Enterprise that used artificial intelligence to create and distribute thousands of fake websites. The takedown, announced June 14, 2026, is part of the FBI's broader Operation Riptide targeting cybercrime infrastructure.

Google linked Outsider Enterprise to more than 9,000 fake websites and over a million fraudulent URLs. Authorities believe the operation led to the theft of more than 3.8 million credit card records, causing an estimated $1.9 billion in losses.

AI-Powered Phishing Kits and SMS Campaigns

The operation sold phishing kits that allowed criminals to blast fake text messages impersonating trusted brands. Messages were sent through AT&T, T-Mobile, and Verizon networks. Over a two-week period in May, Google said that 2.5 million SMS messages were sent to Android users from Outsider Enterprise infrastructure. Android users flagged 55,000 of them as fraudulent.

• The FBI seized multiple administration servers, a Shopify e-commerce storefront, and a test account used by the threat actor.
• Around $100,000 in USDT was seized from Outsider payment wallets.
• Thousands of phishing domains registered at U.S. providers now redirect to an FBI splash page.
• A Telegram bot containing customer information was taken over by authorities.
• Google filed a civil lawsuit targeting the operation's infrastructure and is coordinating with AT&T, T-Mobile, and Verizon to block fraudulent messages.

Legal and Legislative Implications

Outsider Enterprise has been active since at least 2023. The group operated at a massive scale, using AI to generate convincing phishing lures about missed packages, unpaid tolls, and parking violations. Google estimated that hundreds of thousands of victims lost millions to these scams. The company is using the case to advocate for seven bipartisan U.S. anti-scam bills, including the Stop SCAMS Act, which would require the FBI to lead a coordinated national anti-scam strategy. Google also noted that Android users are protected by AI-powered defenses that block more than 10 billion malicious messages every month and warn users about suspicious calls. The takedown demonstrates the increasing use of AI by both criminals and law enforcement. The FBI and its partners continue to target cybercrime infrastructure under Operation Riptide.