Google · 2026-06-12 · major
Google Sues 'Outsider Enterprise' — Chinese scam ring abused Gemini
Google filed its first lawsuit over Gemini misuse, naming a China-based phishing-as-a-service ring it calls Outsider Enterprise. Members fed Gemini prompts framed as harmless to mass-produce phishing pages and SMS scams.
First time Google has gone to court over Gemini abuse — and the defendant is a phishing-as-a-service ring.
Key specs
| Fake websites | 9,000+ |
|---|---|
| Fraudulent urls | 1M+ |
| Scam texts two weeks | 2.5M |
| Android flags may | 55,000 |
| Estimated losses since jul 2023 | $1.9B |
What is it?
Google's general counsel Halimah DeLaine Prado announced a civil lawsuit against the 'Outsider Enterprise,' a China-based cybercrime network that runs a phishing kit for sale on Telegram. The complaint accuses members of using Gemini to write the HTML for fake login pages that imitate Google, YouTube, the U.S. Postal Service, E-ZPass and other trusted brands.
How does it work?
Outsider sells a phishing-as-a-service platform with 290+ ready-made templates for about $88–$200 per week. According to Google's complaint, operators asked Gemini to build 'gift redemption' pages and similar innocuous-sounding shells, then imported the generated code into Outsider to spin up live scam sites. Affiliates blasted SMS at scale — 2.5 million messages reached Android users in a two-week stretch in May.
Why does it matter?
It is the first lawsuit a major AI provider has filed targeting an end-to-end abuse network built on top of its own model, and the playbook — civil suit plus joint takedown with FBI and the three biggest U.S. carriers — sets a precedent other labs are likely to copy. For builders, it signals that providers will pursue users who try to dress malicious prompts as innocent code requests.
Who is it for?
AI safety teams, abuse/trust-and-safety engineers, security researchers