The company is using civil litigation to disrupt infrastructure linked to large-scale text message scams.
Google has filed a civil lawsuit in federal court in California against a cybercrime group known as Darcula, alleging the group built and operated tools used to send large volumes of phishing text messages. According to Forbes, Google claims the group’s infrastructure was responsible for a large share of phishing texts delivered to users and that its services enabled scammers to impersonate companies and government agencies. The lawsuit seeks court orders to disable domains, servers, and related systems used to distribute the scams.
Court filings describe Darcula as a provider of smishing tools that were sold or leased to other criminals through an underground service model. The kits allowed users to send large volumes of text messages containing links to fake payment pages and credential collection sites. Google alleges the platform offered additional services, including technical support and tools that could clone legitimate websites. Because the operation is believed to be based primarily outside the United States, criminal prosecution and extradition are unlikely, making civil action one of the few available options to interfere with the group’s infrastructure.
Google said the goal of the lawsuit is to obtain restraining orders and injunctions that allow hosting providers and registrars to disable assets linked to the smishing network. Company representatives stated that civil court orders can move faster than cross-border criminal cases and allow technology companies to act when foreign law enforcement cooperation is limited. Google also said the action builds on earlier cases where court-approved takedowns reduced scam traffic by removing technical resources.
According to NBC News, these kinds of phishing operations often thrive overseas, where local authorities do not consistently cooperate with US law enforcement. That lack of coordination makes it difficult for American agencies to dismantle scam networks at the source. As a result, major technology companies such as Google and Microsoft have turned to civil lawsuits as a disruption tool, using court orders to seize or shut down websites tied to criminal infrastructure when criminal enforcement alone cannot reach the operators behind the campaigns.
Smishing refers to phishing attacks delivered through text messages rather than email, often directing victims to fake websites or payment portals.
Civil lawsuits allow companies to request court orders that disable infrastructure even when criminal prosecution is not feasible due to jurisdictional limits.
They automate message delivery, host fake websites, and simplify scam setup for users who may lack technical skills.
Text messages often bypass email filters, and users tend to trust messages received on mobile devices more than email.
They can avoid clicking links in unexpected texts, contact companies directly through official websites, and treat payment requests delivered by text with skepticism.