{"meta":{"exportedAt":"2026-10-28T06:31:19.040Z","formatVersion":2,"selection":{"q":"phishing-site","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":1,"coverage":{"cases":1,"countries":1,"languages":1,"unknownLocation":0,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":0,"minors":0,"coreRelations":1,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-japan-shiga-police-say-two-teens-used-generative-ai-to-build-fake-payment-site-that-took-womens-details-used-for-purchases","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'男２人は９月１３日、東京都内で実在の決済サービスに似せたサイトのＵＲＬを女性２人に送信し、現金を受け取れる旨を伝えた上で、メールアドレスや電話番号などを入力させて取得した疑い。'","relation":"supports","source_id":"s1"},{"locator":"'サイトに個人情報が入力されると即座に２人に情報が流れる仕組みにしていたということです。'","relation":"supports","source_id":"s2"}],"assertion":"According to Shiga prefectural police, on 13 September 2026 the two suspects, in Tokyo, sent women the URL of a site made to resemble a real payment service, told them they could receive money, and had them enter details such as email addresses and phone numbers; the site passed entered details to the suspects at once.","causal_attribution":"The police allegations as relayed by two outlets from one announcement; not tested in court."},{"id":"c2","status":"reported","evidence":[{"locator":"'２人は生成ＡＩを使ってフィッシングサイトを作成し'","relation":"supports","source_id":"s2"},{"locator":"'男２人のうち１人が、偽サイトの作成などに生成ＡＩを使用したとみられ、「ＡＩを使わずにサイトを作る技術はない」と話しているという。'","relation":"supports","source_id":"s1"}],"assertion":"Police say the two used generative AI to create the phishing site; one of them, who police believe used generative AI to make the fake site, said he had no skill to build a site without AI.","causal_attribution":"Police attribution relayed by two outlets from one announcement, with a suspect statement relayed by one; the AI tool is not named."},{"id":"c3","status":"reported","evidence":[{"locator":"'旅行予約サイトに不正取得した女性の情報でログインし、都内のホテルの宿泊代金１８万２８３０円を決済したとして同１７日に電子計算機使用詐欺の疑いで逮捕。' 'もう１人の女性のアカウント情報を用い、オンラインショッピングサイトで携帯用ゲーム機３台（計９万５９４０円）を購入して盗んだとして窃盗の容疑で再逮捕されていた。'","relation":"supports","source_id":"s1"},{"locator":"'ゲーム機３点を購入したなどの疑いで、先月以降２度逮捕されています。'","relation":"supports","source_id":"s2"}],"assertion":"Police say the two used one woman's details to log into a travel-booking site and pay a Tokyo hotel bill of 182,830 yen, and another woman's account to buy three portable game consoles; they were arrested on 17 September and re-arrested on 7 October 2026.","causal_attribution":"Police allegations relayed by two outlets; the figures come from the Yomiuri only."},{"id":"c4","status":"reported","evidence":[{"locator":"'２人は他の決済サービスのアカウント情報を含めて約５０人の情報を取得し、約５００万円を決済。'","relation":"supports","source_id":"s1"}],"assertion":"Police believe the two obtained about 50 people's information, including account information for other payment services, and made about 5 million yen in payments.","causal_attribution":"Police estimate relayed by one outlet; approximate."},{"id":"c5","status":"reported","evidence":[{"locator":"'滋賀県警サイバー犯罪対策課は２７日、'; '１０代の男２人を不正アクセス禁止法違反の容疑で地検に書類送検した。' '男２人は「間違いありません」と容疑を認めている。'","relation":"supports","source_id":"s1"},{"locator":"'２人は、警察の調べに対し「間違いありません」と容疑を認めています。'","relation":"supports","source_id":"s2"}],"assertion":"On 27 October 2026 Shiga prefectural police sent the two teenagers' cases to prosecutors on suspicion of violating the unauthorised computer access law; both admitted the allegations, according to the police.","causal_attribution":"Police announcement relayed by two outlets."}],"effects":[{"label":"women's details taken through the AI-built fake site and their accounts used for a hotel bill and consoles (police allegations)","claim_id":"c3","direction":"negative"},{"label":"about 50 people's information taken and about 5 million yen charged (police estimate)","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.yomiuri.co.jp/local/kansai/news/20261028-GYO1T00029/","kind":"news_report","access":"read","language":"ja","translation_note":"Read in Japanese by the research agent (an AI) on 2026-10-28 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. The Yomiuri reports the Shiga prefectural police announcement.","independence_group":"shiga-prefectural-police-announcement-2026-10-27"},{"id":"s2","url":"https://www.asahi.co.jp/webnews/pages/abc_63270.html","kind":"news_report","access":"read","language":"ja","translation_note":"Read in Japanese by the research agent (an AI) on 2026-10-28 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. ABC reports the same police announcement.","independence_group":"shiga-prefectural-police-announcement-2026-10-27"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","privacy","everyday_life"],"unknowns":["Which generative AI tool was used and which parts of the site it produced.","Whether the women or the payment and booking services bore the charges, and whether any money was recovered.","How many of the roughly 50 people reached the AI-built site, as opposed to other routes.","Whether prosecutors indict the two or refer them to family court."],"geography":{"basis":"The Yomiuri reports police saying the two sent the URL while in Tokyo and paid for a Tokyo hotel with a woman's details; Shiga prefectural police investigated, so the event country is Japan. The sources do not say where the women or the other people whose information was taken live, so affected-person countries are left empty.","court_countries":[],"event_countries":["JP"],"affected_person_countries":[]},"publication":{"basis":"Published as a core case (communicated_with): Shiga prefectural police say two teenagers used generative AI to make a phishing site imitating a real payment service; women who were sent its URL entered their details, which police say were used to pay for a hotel stay and game consoles. One suspect is reported to have said he could not build a site without AI. The claims are the police's allegations as reported; no person is named.","reviewed_on":"2026-10-28"},"ai_involvement":{"basis":"Shiga prefectural police, the party that investigated the case, say the two suspects used generative AI to create the phishing site (ABC), and the Yomiuri reports that one suspect, believed to have used generative AI to make the fake site, said he could not build a site without AI. That site presented itself to the women as a real payment service, and they entered their details on it; police say the details reached the suspects and were used to pay for a hotel stay and buy game consoles. The AI-built site is the content the women relied on (communicated_with). The AI tool is not named, the police's technical basis is not stated beyond the suspect's statement, and the sources do not say which parts of the site the AI produced.","status":"reported"},"person_relations":["communicated_with"]},"name":"Japan: police say two teenagers used generative AI to build a fake payment-service site that took women's details, later used to pay for a hotel and consoles","summary":"Shiga prefectural police sent two teenagers' cases to prosecutors on 27 October 2026 on suspicion of violating Japan's unauthorised computer access law. According to the police announcement as reported by the Yomiuri Shimbun and Asahi Broadcasting (ABC), on 13 September 2026 the two, in Tokyo, sent two women the URL of a site made to look like a real payment service, told them they could receive money, and had them enter details such as email addresses and phone numbers. Police say the two used generative AI to make the phishing site, and the Yomiuri reports that one of them, who is believed to have used generative AI to make the fake site, said he did not have the skill to build a site without AI. The same day, police say, they logged into a travel-booking site with one woman's details and paid a Tokyo hotel bill of 182,830 yen; they were later re-arrested over three portable game consoles bought with another woman's account. Police believe they took about 50 people's information, including from other payment services, and charged about 5 million yen. Both admitted the allegations, according to the police. They are not named here.","incidentDate":"2026-09-13","incidentKind":"bounded_series","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2026-10-27","aiSystem":"Generative AI that, according to Shiga prefectural police, the suspects used to make a phishing site imitating a real payment service; the tool is not named","aiProduct":"Unidentified website-generation tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"According to the police, women who entered their details on a fake payment-service site made with generative AI had those details taken and their accounts used to pay a 182,830-yen hotel bill and buy game consoles; police believe about 50 people's information was taken and about 5 million yen charged.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"partial","affectedCountEvidence":"The police allegations describe two women who were sent the URL and entered their details on 13 September 2026. Police also believe about 50 people's information was taken, including for other payment services; that figure is approximate and is not linked person by person to the AI-built site, so two people are counted and the rest are an unquantified remainder.","victimAgeRange":"unknown","jurisdiction":"JP","platformType":"other","outcomeType":"criminal_charges","outcomeStatus":"pending","primarySourceUrl":"https://www.yomiuri.co.jp/local/kansai/news/20261028-GYO1T00029/","primarySourceLabel":"Yomiuri Shimbun, 28 Oct 2026: two teenagers sent to prosecutors over phishing site made with generative AI (Japanese)","firstPublishedAt":"2026-10-28T03:03:43.973412+00:00","updatedAt":"2026-10-28T03:03:43.973412+00:00","scopeVersion":"facts-v3","tags":["generative-ai","phishing-site","payment-service-impersonation","account-takeover","police-referral","japan"]}]}