AI Threat Watch

Case openai-wrong-number-task-scamAI phishingUnited Kingdom

Wrong Number: Cambodia task scam used ChatGPT to translate SMS lures into six languages

A centralised Cambodia-based operation generated recruitment-style messages in six languages offering pay for trivial tasks, routing responders from SMS to WhatsApp to a Telegram mentor; one lure hit an OpenAI staffer.

MediumAttack using AIStatus: ContainedVerified case file

Open in the interactive mapCite this case

Reported
Jun 9, 2025
Location
United Kingdom
Target
UK mobile users recruited via SMS, WhatsApp and Telegram
Severity
Medium
Triggered by
Unknown Cambodia-based scam operation
Actor type
Criminal
Reported loss
None reported
CVE
None

What happened

A centralised Cambodia-based operation generated recruitment-style messages in six languages offering pay for trivial tasks, routing responders from SMS to WhatsApp to a Telegram mentor; one lure hit an OpenAI staffer.

Impact: Scam reach extended to UK numbers; losses not quantified.

Who triggered it

Actor: Unknown Cambodia-based scam operation

Attribution: OpenAI assessed the operation as likely originating in Cambodia; entities not independently verified.

Motive: Task-scam fraud

How it happened

Attack vector: Translation between Chinese and victim languages for SMS and chat lures

Root cause: Scam centres embedding LLM translation into existing workflows

Timeline

  1. Lure SMS sent to UK numbers, one belonging to an OpenAI investigator
  2. OpenAI publishes the Wrong Number case and bans the accounts

Response

Accounts banned; indicators shared with partners.

Current status: Contained

Sources (open in a new tab)

Cite this case

Wrong Number: Cambodia task scam used ChatGPT to translate SMS lures into six languages. AI Threat Watch, case openai-wrong-number-task-scam, Jun 9, 2025. https://aithreat.io/cases/openai-wrong-number-task-scam/

Permanent link: https://aithreat.io/cases/openai-wrong-number-task-scam/

This case file in other languages: EnglishFrançaisEspañolالعربية中文