Google Files Lawsuit Against Alleged International Phishing-as-a-Service Network
Google has initiated a lawsuit in the U.S. District Court in the Southern District of New York, targeting what it describes as a criminal organization based in China known as "Lighthouse." The lawsuit alleges that Lighthouse provides software and support for online scam operations.
Allegations Against Lighthouse Network
The complaint states that the Lighthouse network operates a "Phishing-as-a-Service" model. This operation reportedly sells software kits that include hundreds of fake website templates, enabling individuals to conduct phishing attacks. Google's filing indicates that nearly 200 of these templates have mimicked U.S.-based sites, including the official New York City website, the U.S. Postal Service, and the West Virginia Department of Motor Vehicles.
Halimah DeLaine Prado, Google's general counsel, stated that over 100 of these fake website templates have incorporated Google's logos in sections designed for sign-ins or payments. This is alleged to create a false impression of legitimacy for users. The lawsuit claims that the Lighthouse network has targeted victims in more than 120 countries, reportedly defrauding individuals of millions of dollars annually. Screenshots included in the complaint demonstrate the alleged misuse of logos belonging to various payment, credit card, and social media companies.
According to the complaint, between July 2023 and October 2024, the Lighthouse network created or utilized 32,094 distinct phishing websites that mimicked the U.S. Postal Service. Ms. DeLaine Prado estimated these sites could compromise between 12.7 and 115 million credit cards in the U.S. alone.
Legal Strategy and Objectives
Google's lawsuit names the defendants as "Does 1-25," as their identities are currently unknown. The filing contains handles used by these individuals on the encrypted messaging application Telegram. The primary stated objective of the lawsuit is deterrence rather than prosecuting individuals, particularly given the defendants' alleged location in China, which places them outside the direct jurisdiction of U.S. courts.
Google seeks a declaratory judgment from the court affirming the illegality of Lighthouse's activities. This ruling would establish a legal basis for Google to request assistance from other platforms and services in dismantling components of the alleged illegal infrastructure. The company also states that the lawsuit aims to inform consumers about the importance of vigilance against scams.
Broader Anti-Scam Initiatives
Google has publicly endorsed three bipartisan bills currently under consideration by the U.S. Congress, which are designed to support law enforcement efforts against scammers. These include:
- The Guarding Unprotected Aging Retirees from Deception (GUARD) Act, which would allow local law enforcement to use grant funding for investigating financial fraud targeting retirees.
- The Foreign Robocall Elimination Act, which aims to establish a task force to block robocalls originating from outside the U.S.
- The Scam Compound Accountability and Mobilization (SCAM) Act, which seeks to develop a national strategy to counter "compounds" where individuals are reportedly trafficked to work in scam operations.
Google's Ongoing Legal Context
This lawsuit occurs concurrently with other legal challenges Google is facing. In September, a federal judge ordered Google to share search data with competitors following a ruling that the company held an illegal monopoly in its core internet search business. Earlier this month, a separate court ruled that Google's digital advertising practices violated antitrust laws. Additionally, Google recently agreed to a proposed settlement with Epic Games to resolve an antitrust lawsuit concerning its Play app store.