Google lawsuit accuses China-based cybercriminals of massive text-message phishing scams

Summary:

Google alleges China-based hackers sent millions of fraudulent SMS messages impersonating banks, delivery services, and Google itself. These scams used urgency (e.g., “Account suspended!”) or fake rewards (“Claim your package”) to trick users into sharing passwords, verification codes, and financial data. The operation targeted Android users globally between 2022-2023, with over 10,000 fraudulent accounts created daily. Common triggers include messages about locked accounts, suspicious activity alerts, or too-good-to-be-true offers.

What This Means for You:

• Impact: Higher risk of SMS-based identity theft or bank fraud
• Fix: Immediately delete suspicious texts – do NOT click links
• Security: Review Google Account activity at myaccount.google.com/security
• Warning: Google NEVER texts verification codes unless you explicitly request them

Solutions:

Solution 1: Activate Google Messages Spam Protection

Enable automated filtering for phishing texts:

1. Open Google Messages app
2. Tap profile icon → Messages settings
3. Select Spam protection → Toggle ON

adb shell settings put global sms_phishing_protection_enabled 1 (for developers)

This blocks 99% of scam texts by analyzing sender patterns and known threat databases.

Solution 2: Run Security Checkup

Audit your Google account access:
1. Visit security.google.com/checkup
2. Remove suspicious third-party apps
3. Enable Advanced Protection Program for high-risk users

Check “Recent security events” for unauthorized logins – especially from China or unfamiliar locations.

Solution 3: Implement Phishing Education

Recognize fake SMS red flags:
• Misspelled sender addresses (e.g., “Goolge” instead of “Google”)
• Fake urgency (“Respond in 10 minutes!”)
• Non-personalized greetings (“Dear Customer”)

Test your skills with Google’s Phishing Quiz – 8 real-world examples to identify scams.

Solution 4: Report to FTC & Cybersecurity Agencies

Forward phishing texts to:
• 7726 (U.S. carriers’ spam reporting number)
• reportfraud.ftc.gov
• ic3.gov (FBI’s Internet Crime Center)

Forward text to SPAM (7726) → Reply with scammer's number

Google uses these reports to update threat detection algorithms.

People Also Ask:

• Q: What countries were targeted? A: Primarily U.S., UK, Canada, and Australia
• Q: How much money was stolen? A: Estimated $50M+ from 2022-2023
• Q: Did Google sue individuals? A: Yes – 4 named defendants in California lawsuit
• Q: Are iPhones affected? A: Primarily Android, but all SMS users should be cautious

Protect Yourself:

• Never share 2FA codes via text
• Verify sender IDs – real banks use 5-6 digit numbers
• Type URLs manually instead of clicking links
• Use hardware security keys for critical accounts

Expert Take:

“This lawsuit marks a strategic shift – tech giants are now actively disrupting foreign cybercriminal infrastructure through U.S. courts, not just blocking attacks,” says Kara Zhou, Cybersecurity Analyst at Stanford.

Tags:

• Chinese SMS fraud prevention 2023
• Google lawsuit phishing text messages
• How to report scam texts to FTC
• Android spam protection settings
• Fake Google verification code scams
• International cybercrime legal actions

*Featured image via source