Google has filed a groundbreaking lawsuit against a Chinese-based cybercriminal network responsible for flooding millions of U.S. phones with scam text messages, marking a significant escalation in Big Tech's fight against "smishing" operations.

Google has filed a groundbreaking lawsuit against a Chinese-based cybercriminal network responsible for flooding millions of U.S. phones with scam text messages, marking a significant escalation in Big Tech's fight against "smishing" operations.

Lawsuit Details

Google sued 25 unidentified defendants, primarily Chinese-speaking operators of the "Lighthouse" platform, under the RICO Act, Lanham Act for trademark infringement, and Computer Fraud and Abuse Act. The suit, filed in New York federal court in November 2025, seeks court orders to seize and dismantle the group's websites and servers rather than monetary damages. Google's general counsel, Halimah DeLaine Prado, described it as a first-of-its-kind action to disrupt infrastructure beyond U.S. law enforcement reach.

The Scam Operation

Lighthouse operates as "phishing-as-a-service," selling software kits with hundreds of fake website templates mimicking U.S. entities like USPS, E-ZPass, IRS, and New York City government sites—many featuring Google's logo to build false trust. Scammers send SMS alerts about unpaid tolls, stuck packages, or fraud, directing victims to phony pages that steal credit card details, Social Security numbers, and logins. In just 20 days, the network created 200,000 fraudulent sites, drawing 50,000 daily visits and compromising 12.7–115 million cards globally, including tens of thousands in the U.S.

Scale and Impact

Google estimates Lighthouse powered scams affecting over 1 million victims across 120+ countries, generating millions in annual losses, with 80% of analyzed phishing texts traced to this group. Victims reported via Google Messages on Pixel devices, highlighting the operation's reach despite carrier blocks. Cybersecurity firms like Silent Push linked it to the "Smishing Triad," involving data brokers, spammers, and theft coordinators using Telegram.

Google's Strategy and Broader Context

By invoking RICO—typically for organized crime—Google aims to treat the network as a criminal enterprise, potentially collaborating with carriers and hosts for takedowns. The company also backs bipartisan U.S. legislation for better fraud protections. This follows similar suits against other scam rings like Darcula, signaling tech giants' shift to proactive legal disruption of offshore cyber threats.