Loading story…
OpenAI said it disrupted and banned multiple ChatGPT account clusters tied to online fraud operations likely originating in Cambodia, with some related activity also linked to Myanmar and Nigeria. The campaigns used AI to support investment scams, romance scams, gambling scams, law-enforcement impersonation, and fake job or task scams, primarily by generating multilingual messages, fake personas, promotional copy, website and social media content, and internal administrative material. In one newly disclosed case, OpenAI said a coordinated scam network likely operating in or around Poipet, Banteay Meanchey province may have interacted with hundreds of targets and included signs of human trafficking and forced criminality, such as recruitment ads for "chatter" jobs and records referencing debts, fines, visas, detention, and escape attempts.
OpenAI said the operators relied on familiar fraud playbooks rather than novel AI-enabled techniques. Victims were commonly approached through SMS, job ads, or social platforms and then moved to WhatsApp, Telegram, or other messaging apps, where scammers used recruiter, mentor, or investment personas to build trust before demanding deposits, cryptocurrency purchases, activation fees, or other payments to unlock supposed earnings or rewards. OpenAI linked some campaigns to repeated employer-style branding such as Hyesung Advertising and Lightning Shared Scooter Co, said Meta provided at least one tip that helped identify a fake-review job scam, and reported sharing indicators with partners and authorities after enforcement actions.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
OpenAI reported disrupting a coordinated scam network likely operating in or around Poipet, Cambodia, that used ChatGPT to support investment, romance, gambling, and law-enforcement impersonation scams. The company said it banned the accounts, hardened defenses against reaccess, and shared threat signals with partners and authorities after receiving a lead from WhatsApp.
OpenAI said it disrupted and banned multiple scam operations likely originating in Cambodia, Myanmar, and Nigeria that used ChatGPT for fraud-related translation, message drafting, persona creation, and administrative tasks. The report included investment scams, bulk SMS lures, and a Myanmar-linked scam center using the model for internal business operations.
OpenAI published a case study on Operation "Wrong Number," an AI-assisted task scam targeting people in the UK and likely originating in Cambodia. It said it banned the associated ChatGPT accounts and described the scam's SMS-to-WhatsApp-to-Telegram workflow used to pressure victims into sending money.
OpenAI banned a cluster of ChatGPT accounts tied to a fake-review job scam that appeared to originate in Cambodia. The company said it began investigating after receiving a tip from Meta and later shared information with industry peers and relevant authorities.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
9 references tracked. Mallory keeps watching after this page renders.
thehackernews.com
Open sourcetherecord.media
Open sourcecybersecuritynews.com
Open sourcehelpnetsecurity.com
Open sourceopenai.com
Open sourceopenai.com
Open sourceopenai.com
Open sourceopenai.com
Open sourcecdn.openai.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**Transnational criminal networks** are increasingly industrializing online fraud with **AI-enabled social engineering**, according to reporting on scam compounds in Southeast Asia, an Interpol assessment, and policy commentary tied to a new US executive order. Fraud operations linked to *pig-butchering* and romance scams are using generative AI to improve language quality, deepfakes to impersonate trusted people, and low-cost "deepfake-as-a-service" offerings to scale deception. Interpol said AI-assisted fraud is **4.5 times more profitable** than non-AI schemes, while broader reporting describes these operations as structured, multinational enterprises that function like businesses and increasingly rely on automation, synthetic identities, and persuasive impersonation at scale. Reporting from Cambodia and the wider region shows scam operators are now recruiting "**AI face models**" to appear on high-volume deepfake video calls, including applicants from multiple countries seeking work in compounds associated with trafficking-linked fraud operations. The same ecosystem has been described as part of a broader organized-crime model involving forced labor, cryptocurrency investment scams, romance fraud, and impersonation schemes targeting victims globally. One reference on calculating AI ROI in enterprise cybersecurity is **not about this fraud campaign ecosystem**, and an EU sanctions announcement concerns separate state-linked cyber incidents rather than financially motivated AI-enabled fraud.
Jun 29, 2026
OpenAI reported multiple cases of **malicious use of ChatGPT and related API access** spanning financially motivated fraud and government-aligned information operations, including romance scams, fake legal services, coordinated influence campaigns, and a state-linked harassment effort. In one detailed case (“**Operation Date Bait**”), actors used ChatGPT accounts and an API customer to generate ad copy for a fake dating service, drive victims to *Telegram*, and run semi-automated “missions” that required escalating payments; OpenAI said it banned accounts involved and noted the group’s claimed revenues could not be independently verified. OpenAI also described model use for translation, persona development, and internal coordination (e.g., generating status reports and assigning targets projected payout values), and cited evidence such as repeated text patterns posted by multiple X accounts. Google’s Threat Intelligence Group (GTIG) separately assessed that **nation-state threat actors** are operationalizing LLMs (including *Gemini* and other tools) for reconnaissance, victim targeting, and generating culturally fluent, multi-turn “rapport-building” phishing lures. GTIG also observed abuse of generative AI services’ public sharing features to host deceptive content used in **ClickFix** campaigns, where victims are tricked into copying and pasting malicious commands into a terminal; the activity was first observed in early December 2025. The reporting highlights a converging trend: adversaries are using LLMs to scale and localize social engineering while shifting delivery mechanisms toward trusted AI platforms and shared content features to increase credibility and reach.
Jun 29, 2026
Researchers from Amrita Vishwa Vidyapeetham, Ca' Foscari University of Venice, the University of Melbourne, and Ben Gurion University of the Negev found that generative AI chatbots can outperform human scammers during the trust-building stage of pig-butchering fraud. In a week-long simulation with 22 participants, **46 percent** complied with an AI chatbot's request to download an app, compared with **18 percent** who complied with a human scammer's request to download a game, and participants also assigned higher trust scores to the AI. The researchers said large language models could automate the earliest and longest phase of romance-investment scams, with a human operator stepping in only at the final stage to direct victims to fraudulent investment platforms and avoid model safeguards. The study was informed by interviews with **145 former scam workers**, including trafficking survivors from scam compounds in Cambodia, Myanmar, and Laos, who described criminal use of AI for translation, language polishing, persona development, and video deepfakes. Researchers also found that some leading LLMs could be prompted to impersonate humans and at times conceal that they were AI, raising concerns that scam networks could scale operations while becoming less dependent on visible scam compounds in Southeast Asia and harder for defenders and victims to detect.
Aug 1, 2026