Fake notifications that ask you to check a package or warn you about a bank problem are no longer just annoying: many come from criminal networks that use artificial intelligence to craft messages and sites that look real. Google says enough: it filed a lawsuit, is coordinating with the FBI and working with carriers to block these attacks, and is also asking for laws that make these protections permanent.
What's happening
Google's civil lawsuit targets an organized operation called "Outsider Enterprise," which the company says operates from China and coordinates via Telegram. This network distributes phishing kits that let criminals send massive messaging campaigns that impersonate trusted brands, including Google.
How big is the problem? It's not small:
Hundreds of thousands of victims with losses estimated in the millions.
9,000 fake websites and more than 1,000,000 fraudulent URLs linked to the group.
55,000 spam messages reported by Android users in just two weeks of May; that's more than two reports per minute.
2.5 million messages sent to Android users with links to sites generated by Outsider in that same period.
Google isn't just suing: it coordinates with the FBI, asks AT&T, T-Mobile and Verizon to block those texts before they reach your phone, and is pushing legal changes so these defenses become permanent.
How they're protecting people
The response combines technology, legal action, and regulation. On the tech layer, Google uses AI-powered tools to detect scams: from warnings on suspicious calls and messages in Android to built-in defenses that intercept more than 10,000,000,000 malicious messages a month.
But technology alone isn't enough, so there are three active fronts:
Strategic litigation to dismantle the criminal infrastructure.
Collaboration with law enforcement, in this case the FBI, for enforcement actions.
Work with carriers to block malicious traffic and with lawmakers to update laws against AI-driven threats.
Google is promoting seven bipartisan bills designed to tackle scams, including the so-called Stop SCAMS Act, which seeks to coordinate government and industry at all levels to attack criminal networks.
What partners and authorities are saying
"The criminals behind Outsider Enterprise built a business by impersonating trusted brands to defraud hundreds of thousands of victims. The criminals use AI to make the fraud more convincing and harder to detect. Together with partners like Google, we can disrupt criminal networks in ways no single organization could on its own." - Brett Leatherman, Assistant Director of the FBI Cyber Division
"These transnational criminal groups move through our phones and demand a coordinated, aggressive response. Google's action is an important step to disrupt one of these networks." - Congressman Brian Fitzpatrick
"My Stop SCAMS Act will bring all levels of government together to go after these scams and the criminal organizations behind them." - Congressman Josh Harder
And from the carriers:
"AT&T blocks or tags billions of robocalls and spam messages each month using AI. Fighting fraud requires collective defense." - Rich Baich, AT&T Chief Information Security Officer
"At T-Mobile we protect customers with advanced technologies and partnerships with companies and authorities to block scam traffic and help maintain message authenticity." - Jeff Simon, T-Mobile EVP and CIO
"Verizon supports a unified response across industry, government and law enforcement to dismantle malicious domains and global criminal operations." - Nasrin Rezai, Verizon Chief Information Security Officer
What can you do right now?
Not everything depends on big companies or the law. Some practical actions to protect yourself today:
Don't click unexpected links; go directly to the official site if you're unsure.
Turn on two-factor authentication for critical services like your email and bank accounts.
Report suspicious messages to your carrier and to the platforms where they appear.
Keep your OS and apps updated; many defenses are delivered through updates.
Sound like a lot of work? Yes — but every report and every block helps break the chain these networks use.
The case Google filed is a reminder: AI powers both solutions and risks. An effective response requires technology, cooperation between companies and governments, and clear rules that protect people. We live in an era where the same tool that improves services can be used to scam you; that's why the coordinated action we see today is important and necessary.
