January 1, EXPOSED: FBI Takes Down Billion-Dollar Scam Operation That Used AI to Steal From Americans

Wyatt’s Take

• FBI and tech giants just dismantled a Chinese phishing empire that stole nearly $2 billion from Americans using AI-powered scam texts that looked completely real
• These criminals used artificial intelligence to create fake websites and messages so polished you couldn’t tell them apart from your actual bank or delivery service
• Over 3.8 million credit cards were compromised, proving these aren’t just annoying spam texts — they’re organized crime operations targeting hardworking Americans

That text about a missed package or unpaid toll might look harmless. You see a familiar company name and think you’ll just tap once to check. That single tap can drop you straight into a professional criminal operation.

The FBI, Google and Black Lotus Labs just broke up a massive China-based scam ring called Outsider Enterprise. This wasn’t some guy in a basement sending sloppy emails. This was a full-scale criminal business selling phishing tools to other crooks, helping them steal credit card numbers, passwords and personal information from everyday Americans.

What makes this scary is how professional these scams have gotten. Criminals don’t need technical skills anymore. They just rent phishing kits, use AI to polish everything up and blast waves of fake texts to unsuspecting people. Every single one of us needs to think twice before tapping any link that shows up in a text message.

Outsider Enterprise worked like a criminal software company. Instead of one scammer working alone, this setup gave other criminals ready-made tools to run their own scams. They offered phishing kits, fake websites and all the tech infrastructure needed to impersonate trusted American brands.

Google says the network created more than 9,000 fake websites and over 1 million fraudulent web addresses. Those sites looked real enough to trick people into handing over credit card details, passwords and other sensitive information.

The scams usually started with text messages that appeared to come from major cell phone carriers, delivery companies, toll agencies or other familiar businesses. That’s what makes these attacks so dangerous. The fake text arrives right alongside real alerts from your bank, FedEx or phone company.

AI gave this operation frightening speed and polish. In a federal lawsuit filed in New York, Google says the phishing operation used AI tools, including Gemini, to help criminals create convincing fake sites and scam messages. That means the texts look cleaner, the websites appear more legitimate and the whole operation moves faster than ever before.

That’s a massive shift. Most Americans still expect scam messages to have bad spelling, weird grammar or obvious red flags. Those clues still pop up sometimes, but they’re becoming less reliable. A fake website can now look identical to the real thing. A scam text can sound completely normal. A payment request can seem urgent without raising any alarms. That’s terrifying because regular people have almost no time to spot the trap.

The scale was enormous. Google says 2.5 million scam messages were sent to Android users from Outsider Enterprise’s system over just two weeks in May. Android users flagged 55,000 of those messages as fraud.

FBI Cyber Division Assistant Director Brett Leatherman said Outsider’s network was connected to an estimated 3.87 million stolen credit cards and $1.9 billion in losses.

That number tells you everything. These scams aren’t random annoyances. They’re part of an organized criminal business built to reach millions of Americans at lightning speed.

The action against Outsider Enterprise included both technical shutdowns and legal moves. The FBI called the technical takedown Operation Ghost Hook. Leatherman also connected the effort to Operation Riptide, a broader FBI campaign targeting cybercrime operations.

The FBI and its partners seized administration servers, phishing domains, a Shopify storefront and about $100,000 from payment wallets tied to the operation.

Google’s lawsuit is part of the larger effort to destroy Outsider Enterprise’s infrastructure. The company says it’s working with AT&T, T-Mobile and Verizon to help block fraudulent messages before they reach customers. Google says its Android protections also help detect suspicious calls and block malicious messages. Still, no filter catches everything.

Text scams often arrive when you’re distracted. Maybe you’re heading into a meeting, paying bills or waiting for a package. A message about an account problem makes you react fast before you stop to question it.

Scammers count on that split-second panic. A fake text might say your delivery failed, your phone bill has a problem or your account will be locked. The link sends you to a page that looks real enough to steal your login, credit card number or security code. The whole trick depends on speed. The less time you spend thinking, the better the scam works.

These steps can help you avoid the fake texts, fake websites and account traps that phishing operations rely on.

Treat unexpected links like a warning sign, even when the message looks official. Go directly to the company’s app or website instead. Type the address yourself or use a saved bookmark.

Scammers want you to panic. Take a breath before you act. Real companies usually give you more than a few minutes to fix a problem.

Look closely at the web address before typing in a password, card number or code. A scam site may use one extra word, a strange ending or spelling that looks close to the real company.

A legitimate company will never ask you to send back a one-time security code by text. If someone asks for a code, assume they’re trying to break into your account.

If a text asks for a credit card number, password or account login, stop immediately. Open the official app or call the company using a number from your card, bill or trusted website.

Spam protection can help move suspicious texts out of your main inbox before you accidentally tap a bad link.

On iPhone: Go to Settings > Apps > Messages > Unknown Senders > turn on Screen Unknown Senders. You can also open Messages, tap Filters and review messages under Unknown Senders or spam/junk filtering when available.

For suspicious texts on iPhone, use Report Junk when it appears under the message.

On Samsung using Google Messages: Open Google Messages > tap your profile icon or initials > tap Messages settings > tap Spam protection or Protection & Safety > turn on Enable spam protection.

For suspicious texts on Samsung, open the message in Google Messages, tap the three dots, tap Details and choose Block & report spam.

Set a strong account password and add a carrier PIN when your provider offers one. This helps protect your phone number from criminals who try to hijack accounts or reset passwords.

Scammers often sound convincing because they already know something about you. That information can come from people-search sites, data brokers, old breaches or public records. Consider using a data removal service to reduce how much personal information is floating around online.

Strong antivirus software can help block malicious links, fake websites and phishing pages before they cause damage. It adds another layer of protection when a scam slips past your first line of defense.

A password manager can help you avoid reusing passwords across accounts. It can also make fake login pages easier to spot because it won’t autofill your credentials on a fake site.

Use two-factor authentication on important accounts, especially email, banking and wireless carrier accounts. An authentication app or hardware security key gives you stronger protection than texted codes.

Some banks and card companies offer virtual card numbers. These can limit the damage if a shopping site, fake checkout page or scam link steals payment details.

Check your accounts often for small mystery charges. Criminals sometimes test a stolen card with a small purchase before going bigger.

A credit freeze can stop criminals from opening new accounts in your name. You can freeze your credit for free with Equifax, Experian and TransUnion.

Forward suspicious texts to 7726, which spells SPAM. You can also report phishing attempts to the company being impersonated and to the FBI’s Internet Crime Complaint Center at IC3.gov.

Wyatt Matters

Taking down this Chinese scam operation is a win, but let’s be honest — the crooks aren’t going anywhere. What should concern every American is how real these fake texts and websites look now. AI gives criminals another tool to copy trusted brands, clean up their wording and move faster than most folks expect. The advice is simple: don’t tap the link. Open the company’s real app or type in the website yourself. Those few extra seconds can be the difference between staying safe and handing a foreign scammer your credit card, password or security code. Our families deserve better than to be targeted by organized crime from halfway around the world.