ChatGPT-Enabled Scam Network Disrupted

A Cambodia-based scam network used ChatGPT to run multiple social-engineering schemes at once, including romance scams that pivoted into fake crypto/gold investments. The same operators also posed as online gambling reps offering fake winnings and as law enforcement demanding “fines,” using forged documents to make the stories feel real.

Key findings

• OpenAI disrupted a Cambodia-based social-engineering group that used ChatGPT as part of its scam operations.
• The network ran several scam types in parallel and mixed them (romance/dating trust-building followed by fraudulent investment pitches).
• Operators impersonated multiple roles (dating personas, investment experts, gambling platform reps, and law enforcement).
• They generated forged documents and fake interfaces (e.g., passports, legal notices, stock purchase confirmations, gambling platform UIs) to support the deception.

Who’s being targeted

• Commonly targeted roles: All employees, Executives, Finance/AP (for payment/fraud awareness), HR (general scam awareness for employee targeting).
• Affected industries: Consumers/General public, Financial services (investment/crypto), Online gambling.
• Attack channels: website.
• Impersonated: A dating match (fictitious identity) and/or a “fictitious investment expert”, “Representatives of online gambling platforms”, Law enforcement agency.

Awareness takeaways

• Treat sudden investment advice from an online relationship as a red flag and do not send money or crypto based on chat-only trust.
• Be skeptical of “you won” messages, bonuses and winnings are a common hook to get you to click, pay fees, or hand over details.
• If someone claims to be law enforcement and demands payment, stop and verify through official public channels (don’t use their provided contact info).
• Polished documents and images can be forged; verify claims using trusted sources rather than screenshots, “legal notices,” or IDs sent in chat.

Red flags to watch for

• A new online relationship quickly pivots to investment opportunities
• Pressure to invest in crypto/spot gold with promises of easy gains
• Use of unverifiable “experts” and polished but untrusted documentation/screenshots
• Unexpected winnings/bonuses from a platform you didn’t use or can’t verify
• Requests to pay fees/taxes first to receive winnings
• Links lead to lookalike gambling interfaces
• Threats, urgency, and fear used to force immediate payment
• Demands for payment through unusual methods rather than official channels
• Use of “legal notices” that are images/screenshots rather than verifiable official documents