Scammers Have Deployed AI Subscription Toolkit

A new fraudulent network is using fake AI subscription sites to steal user credentials and money.

Updated on Sept. 22, 2026 in Artificial Intelligence

Isometric editorial illustration depicting a central server cabinet connected to a grid of geometric conduits, representing digital infrastructure.
Scammers have deployed a fraudulent toolkit of over 100 fake AI subscription websites designed to steal financial data and user credentials. AI Illustration. Upload story photo >

Live Poll

Do you trust the authenticity of AI subscription sign-in screens you encounter online?

Scammers have utilized a specialized website toolkit to launch over 100 fraudulent pages offering unverified AI subscriptions. These sites mimic legitimate software services to deceive unsuspecting users.

Why it matters

By integrating genuine Google sign-in screens, these fake platforms appear highly credible to victims. This tactic facilitates the theft of credentials and payment data for subscriptions allegedly worth up to $2,000 per year.

Malwarebytes identified more than 100 websites created using a $249 toolkit. These platforms falsely claim to offer products such as GPT-6 Astra, DaVinci Resolve, PixAI, and OpenCut.

The players

Malwarebytes

Malwarebytes is a cybersecurity company that develops software designed to protect home and business users from malware, ransomware, and other advanced online threats.

The details

The scam network relies on a standardized website infrastructure to host dozens of imposter pages. By incorporating authentic Google sign-in prompts, the sites bypass common user suspicions regarding account security.

Timeline

  1. The report regarding the AI subscription scam network was published in September 2026.

The Tech Race

This campaign follows a pattern set by credential-harvesting schemes that exploit the implicit trust users place in Google's OAuth authentication protocol. As AI tools gain popularity, this threat marks an escalation in how bad actors leverage established tech standards to distribute malware.

Users should verify the legitimacy of any site requesting a Google login, especially when prompted to pay for high-cost AI software subscriptions. Always check the URL directly rather than interacting with suspicious pop-up windows or unverified email links.

The takeaway

Always exercise caution when prompted to sign in with your Google account on unfamiliar websites. Verify that the service is legitimate and official before entering payment details or sensitive login credentials.

Further reading

Learn more about the latest developments in the field of Artificial Intelligence.

Live Poll

Do you trust the authenticity of AI subscription sign-in screens you encounter online?