Earlier this year, OpenAI disrupted a Cambodia-based scam operation that used ChatGPT to support investment, romance, gambling, and law enforcement impersonation schemes. The investigation began following a lead from WhatsApp, and threat signals were shared with industry partners and authorities. The network illustrates how organized criminal groups diversify across multiple scam types, often blending techniques within a single operation.

The actor used ChatGPT to create and operate fake online personas, generate and translate messages sent to scam targets, produce promotional content, and assist with day-to-day operations. A subset of users also employed ChatGPT for administrative work like drafting internal announcements, translating staff communications, and documenting recruitment, immigration status, and employee discipline. Scammers deployed emotional pressure and trust-building techniques, including promises of guaranteed returns, romantic language, secrecy instructions, and urgent requests before fictitious bonuses expired. Victims were instructed to make deposits, pay activation fees, settle fake fines, and provide screenshots as proof of payment.

Alongside the scams, some users generated content suggesting involvement in human trafficking or forced labor. This included social-media advertisements for jobs in Poipet promising flights, accommodation, and work permits, as well as records of employee debts, salary deductions, disciplinary fines, and loan repayments. Conversations referenced detention, escape attempts, and potential criminal liability for trafficked individuals forced to work in scam operations, consistent with public reporting on organized crime groups in Southeast Asia.

OpenAI banned the ChatGPT accounts associated with the operation, shared indicators with industry partners and authorities, and took steps to prevent the actors from regaining access. The full financial losses are unknown, but the scammers’ communications suggest hundreds of targets across multiple scam types, with individual losses in the thousands of dollars. The case reinforces two trends: organized scam networks are highly diversified, and the boundaries between online fraud, organized crime, and human trafficking are often blurred. Effective disruption must target both the victim-facing scams and the criminal organizations that orchestrate them.