OpenAI: ChatGPT Aided Cambodia Scam Network

How the attack worked

OpenAI identified and banned a coordinated network of ChatGPT accounts likely tied to Cambodia's Preah Sihanouk province. The network used AI to build and manage fake online personas, translate messages, generate scam conversations, and produce promotional content for fraudulent schemes. The investigation reportedly began after a lead from WhatsApp, and the operation used both WhatsApp and Telegram to reach targets across investment, romance, gambling, and law enforcement impersonation scams.

The scams followed a structured pattern described as ping, zing, sting: outreach to make contact, emotional manipulation to build trust or urgency, and then extraction of money. Victims were pushed to send funds for fake rewards, activation fees, or fabricated fines, and were then asked to send screenshots of payments or share account information as proof.

Why it succeeded

Each scenario relied on a believable persona and a clear emotional hook. The investment pitch promised guaranteed returns and risk-free investments, while pressuring targets to act before a bonus expired. The romance scenario used romantic language and encouraged secrecy, isolating victims from outside input. The law enforcement impersonation scenario relied on the authority of a supposed official demanding an unexpected fine. In all cases, the combination of trust-building and urgency reduced the likelihood that a victim would pause and verify.

What to watch for

• Guaranteed returns or risk-free investment language
• Pressure to act quickly before an offer or bonus expires
• Requests to keep a conversation or relationship secret
• Demands to pay a fee, fine, or activation cost through chat apps
• Requests for screenshots of payments or account details as proof

Building resistance

Organizations and individuals can reduce exposure by treating any guaranteed-return pitch as a red flag and verifying independently through official channels before engaging. Urgency, whether framed as a limited-time bonus or an unexpected fine, should trigger a pause rather than immediate action. No one should send money, payment screenshots, or account information to a contact known only through messaging apps. Requests to keep a conversation private are a common isolation tactic and should prompt a check with a trusted colleague or family member before continuing. Finance teams, HR and recruiting staff, and customer support teams handling inbound messages are particularly relevant audiences for this awareness, given the range of pretexts observed, from investment offers to law enforcement impersonation.

These lessons apply broadly since the pretexts span consumer-facing scenarios as well as workplace channels where employees might receive similar unsolicited contact through personal or shared messaging accounts.

What scams did the Cambodia-linked network run using ChatGPT?

The network used ChatGPT to support investment, romance, gambling, and law enforcement impersonation scams, generating fake personas and persuasive messages sent over WhatsApp and Telegram.

How did the scammers pressure victims into paying?

They promised guaranteed returns and risk-free investments, then pressured victims to act before fake offers or bonuses supposedly expired, instructing them to send money to unlock rewards, pay activation fees, or settle fabricated fines.

What proof did scammers demand after a payment?

Victims were asked to provide screenshots of payments or share account information as proof, which helped the scammers verify compliance and continue the manipulation.

Why did the romance scam variant ask victims to keep chats private?

Scammers encouraged targets to keep conversations private to isolate them from friends or family who might raise concerns, making it easier to extract money without outside scrutiny.