AI-Powered Crypto Phishing Infrastructure 2026

2023-07-22

FraudGPT first documented circulating on dark web and Telegram channels, advertising crypto phishing page generation among its capabilities at $200/month.

2024-06-01

YouTube livestream featuring an Elon Musk deepfake promoting a crypto giveaway scam draws approximately 30,000 concurrent viewers; face and voice were AI-generated.

2024-07-01

Netcraft documents a 5.2x month-over-month increase in websites with AI-generated text used for phishing, concentrated in July 2024; crypto brands are a primary target.

2024-09-01

Netcraft publishes research on over 17,000 AI-written GitBook phishing lure sites targeting more than 30 crypto brands including Coinbase, MetaMask, and Trezor, traced over a one-year tracking window.

2024-12-01

GhostGPT identified by Abnormal Security researchers operating through Telegram, providing jailbroken LLM access to criminals with no technical setup required.

2025-01-14

Chainalysis publishes its 2026 Crypto Crime Report, reporting $17 billion in crypto scam losses in 2025, 1,400%+ growth in impersonation scams, and 4.5x revenue premium for AI-enabled operations.

2025-07-01

Ripple CTO publicly debunks AI-generated video falsely depicting CEO Brad Garlinghouse endorsing an XRP reward scheme, illustrating executive deepfake targeting of crypto executives.

2026-02-01

OpenAI identifies and disrupts 'Operation Date Bait,' a Cambodia-based romance and task scam targeting Indonesian men in which ChatGPT was used to generate advertising, brand imagery, and fake personas.

2026-02-26

OpenAI publishes its February 2026 threat intelligence update documenting fraudster integration of ChatGPT into global scam campaigns.

2026-03-12

OFAC sanctions six individuals and two entities tied to North Korean IT-worker fraud scheme, which used AI tools and deepfake personas to infiltrate US companies, funneling approximately $800 million to North Korea in 2024.

2026-03-28

Operation Atlantic concludes: US Secret Service, UK NCA, Ontario Provincial Police, and Ontario Securities Commission freeze $12 million in crypto, flag 20,000+ wallet addresses, and shut 120 scam domains in a one-week multinational approval phishing enforcement action.

2026-04-09

US Secret Service announces Operation Atlantic results publicly, calling it the first coordinated multinational enforcement action specifically targeting approval phishing.

2026-04-23

OFAC designates 29 individuals and entities tied to Cambodia's cyber-fraud and human-trafficking scam compound economy, targeting infrastructure used in AI-assisted pig butchering operations.

2026-04-28

FEMITBOT campaign comes to public attention; large-scale Telegram Mini App fraud network impersonating Binance, Bitget, NVIDIA, Netflix, and BBC with fake crypto dashboards and AI chatbot support.

2026-07-31

OpenAI publishes major report confirming shutdown of a larger Cambodia-based criminal network using ChatGPT for romance fraud, fake crypto investment platforms, illegal gambling, and law enforcement impersonation.