Google’s Gemini AI was weaponized by the Outsider Enterprise PhaaS network to mass-generate fraudulent websites and SMS lures at scale, resulting in an estimated 3.87 million compromised payment cards and $1.9 billion in consumer losses. Google has filed a federal lawsuit and the FBI’s Operation Ghost Hook has seized infrastructure, but the broader campaign remains partially operational. Organizations face elevated brand impersonation risk in SMS channels and AI platform abuse risk in content generation pipelines.