Scammers are selling unverified AI subscriptions worth up to $2,000 a year through websites that use a genuine Google sign-in screen to appear legitimate. According to Malwarebytes, the scheme relies on a $249 website toolkit that lets fraudsters quickly build convincing but fake subscription pages.
More than 100 such websites have been found, all tied to the same toolkit and sharing similar construction. The use of a real Google login page is the key element that makes the sites believable, as victims may assume the payment or subscription process is sanctioned by a trusted provider.
The research highlights how even a familiar authentication screen can be weaponized to lend credibility to a scam. No other sources were provided, so the findings rest solely on Malwarebytes' analysis.