ChatGPT fake billing notices use live operator polling to steal cards
Fake billing emails tied to ChatGPT Plus are leading recipients to payment pages built to collect credit card details and one-time passwords. Fortra identified the phishing operation and documented its infrastructure in research published on October 26, 2026. What the billing lure collects The campaign starts with an email that pretends to be an OpenAI payment notice and says a subscription payment failed. It asks the recipient to update billing…