Google declares war on fake USPS and toll scam texts

According to Android Police, Google is filing litigation under RICO, Lanham Act, and Computer Fraud and Abuse Act laws to dismantle ‘Lighthouse,’ a Phishing-as-a-Service operation behind those rampant fake USPS and unpaid toll text scams. The company found at least 107 fraudulent websites using Google’s branding to trick victims, with Lighthouse reportedly harming over 1 million people across 120+ countries. Between 12.7 million and 115 million credit cards were stolen just in the US, representing a five-fold increase in these attacks since 2020. Google is also endorsing three bipartisan bills in Congress while expanding its Scam Detection features beyond Google Messages to include WhatsApp, Signal, and Twitter, plus rolling out call scam detection to the UK, Ireland, India, Australia, and Canada.

The phishing industrial complex

Here’s what’s really concerning about this whole situation. We’re not talking about some kid in a basement sending spam emails anymore. Lighthouse represents a fully professionalized criminal enterprise – basically phishing as a service. Anyone can essentially rent this capability to run sophisticated scams. And the numbers Google revealed are absolutely staggering. Over a million victims? Up to 115 million credit cards? That’s not small-time crime – that’s industrial-scale fraud.

Why Google actually cares

So why is Google going nuclear with RICO lawsuits and multiple federal acts? It’s not just about being a good corporate citizen. When these scam sites use Google’s branding on their fake login pages, that directly damages user trust in Google’s entire ecosystem. If people start associating Google logos with financial scams, that’s existential for a company whose business depends on people willingly sharing their data. They can’t afford to have their brand become synonymous with “you’re about to get robbed.”

The legal chess game

But here’s the thing about legal action – it’s like playing whack-a-mole. You shut down one operation, and three more pop up. Google knows this, which is why they’re simultaneously pushing for legislative changes. Those three bills they’re endorsing? They’re trying to create systemic solutions rather than just playing defense. The GUARD Act targeting retirement scams makes sense – older Americans are particularly vulnerable to these schemes. And the foreign robocall legislation? That’s closing another major attack vector.

The detection arms race

The most immediate impact for regular people is Google’s expansion of scam detection features. Moving beyond just their own Messages app to cover WhatsApp, Signal, and Twitter is huge. Basically, they’re acknowledging that these scams have spread across every communication platform. And expanding call scam detection internationally? That suggests the problem has gone truly global. The question is whether these detection systems can stay ahead of increasingly sophisticated scammers who are clearly well-funded and organized.