Microsoft found ChatGPT-themed emails leading to payment-data collection forms.
Source: Microsoft Threat IntelligenceDates for the wider campaign were not disclosed.
A warning threatened loss of paid ChatGPT access.
Microsoft Threat IntelligenceRedirects led to a fraudulent payment page.
Microsoft Threat IntelligenceThe form requested personal and card details.
Microsoft Threat IntelligenceEditorial analogy: a letter wearing a familiar company's logo asks you to hand your wallet to a stranger. Recognizing the logo does not establish who will receive your information.
An analogy for the mechanism; not an additional claim about the incident.Microsoft documented forms requesting names, addresses and credit-card details. Microsoft Threat Intelligence
Victim totals and financial losses are undisclosed.
No compromise of OpenAI is established.
AI assistance to the attacker is not established.
Editorial lesson: enthusiasm for a useful tool can make messages about access feel urgent. Verify unexpected billing requests by opening the service through a trusted route, rather than relying on the message's button.
A campaign-wide shutdown is not established. Microsoft Threat Intelligence
Editorial defense mapping: verify the request and investigate the destination.
Show employees how to reach approved services and billing support directly. Provide a simple way to report unexpected payment requests before entering information.
A known logo and a convincing message cannot establish who runs the destination. Training alone cannot guarantee that every deceptive request will be recognized.
Correlate suspicious emails with visited sites, block confirmed harmful destinations, and give responders a process for helping people who may have disclosed payment information.
Finding a phishing message does not establish that a recipient submitted information. Investigate the actual interaction before asserting a loss or a compromise.
Editorial connections to relevant controls, not evidence that a particular technology would have prevented this case. Each guide links to the security guidance behind its recommendations.
Explore the full AI security frameworkExplore more original accounts in the source report library ↗.
These are source-reported findings. An independent assessment, when available, is labeled explicitly.
01Read this case’s update history →
Reviewed Sep 14, 2026 · Editorial methodology · Structured data