OpenAI's "Disrupting Malicious Uses of AI" Report Exposes Spies — And Sends Backthrills Down Every User's Spine
How OpenAI Became the World's Most Powerful Surveillance Infrastructure — And What Comes Next
Inside a scam compound somewhere in Cambodia, a supervisor typed in Mandarin. Across the room, workers on laptops sweet-talked Indonesian men about yachts and golf — not in their own words, but in phrases minted by ChatGPT, translated on the fly, calibrated for maximum emotional extraction. Each victim had been assigned a "kill" value: a ceiling on how much money could be squeezed from him before he was discarded.
OpenAI knew. They were reading the whole time.
That uncomfortable fact sits at the heart of the company's February 2026 threat intelligence report — a landmark document that is simultaneously a triumphant account of disrupted cyberoperations and an inadvertent confession about the surveillance architecture underpinning every AI chatbot conversation on the planet.
A Rogue's Gallery of the AI Age
The operations detailed in the report read like a geopolitical fever dream. A Cambodia-based romance scam — dubbed "Date Bait" by investigators — lured victims onto fake platforms called "LoveCode" and "SexAction," using AI to bridge the language gap between Chinese management and Indonesian marks. A parallel recovery scam, "False Witness," fabricated entire law firms, forged FBI letterheads, and conjured fake Bar Association credentials, all while ChatGPT ghostwrote prose in pitch-perfect "American English."
The influence operations were more chilling in their ambition. A likely Russian network tied to the "Rybar" military blog drafted business plans for election interference across four African nations — the Democratic Republic of Congo, Burundi, Cameroon, and Madagascar — with line-item budgets reaching $600,000. A China-linked actor, operating under the banner of "Cyber Special Operations" (网络特战), described a machine of hundreds of staff, thousands of social media accounts, and presence on over 300 platforms. Targets included named Chinese dissidents subjected to sexual smear campaigns, fake obituaries, and physical posters placed near their families' homes in what amounted to state-sponsored psychological warfare.
The findings confirm a strategic truth that governments have been slow to absorb: AI did not replace the spy, the scammer, or the troll. It promoted them to management.
The Mirror Turns
But the report's most unsettling revelation is buried in a single line: "Our primary source of evidence is the scammers' own inputs."
OpenAI did not intercept these operations through a mole or a leaked hard drive. They read the conversations. That is how they caught them — and that is how they would catch anyone.
The company operates a layered monitoring system: automated classifiers scan for policy violations in real time; flagged conversations escalate to human investigators. Conversations are stored on company servers unless a user holds an enterprise-grade zero-retention agreement. The free and consumer-tier accounts that most of the world uses — hundreds of millions of them — are logged, retained, and subject to review.
This is legal. The terms of service you clicked through say so. Under frameworks like GDPR, fraud prevention constitutes a "legitimate interest" that creates carve-outs from ordinary privacy protections. OpenAI is not doing anything it didn't tell you it could do.
The question is whether users understood that when they typed their most private thoughts, their medical anxieties, their business strategies, their political frustrations into the blinking cursor of a friendly chatbot, they were doing so inside a glass house.
The Verdict
There is a constituency that has been drawing this conclusion for some time — not in op-eds, but in capital allocation. The conviction is simple: the future belongs to open-weight models that run on private devices.
If the mechanism for catching a state-backed cyberwarrior is identical to the mechanism for reading your messages, then the only structural solution is a model that never phones home — one that processes your words on your own hardware, under your own roof, answerable to no terms of service, no safety classifier, no human reviewer with a federal subpoena in their inbox.
OpenAI deserves genuine credit for disrupting operations that were causing real harm to real people. The scammers in Cambodia were not abstractions; their victims were.
But the report is also a document about power — about who holds it, how it is exercised, and at whose discretion. The watchers caught the predators. The question that lingers, long after the press release fades, is a simple one:
Who watches the watchers?