Skip to content
Submit incident
AII-1001-47207
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

Japanese teens use ChatGPT to automate fraudulent Rakuten Mobile contracts

Japanese police re-arrested two teenagers for using ChatGPT to generate code automating fraudulent mobile phone line contracts with Rakuten Mobile. The suspects used stolen login credentials obtained online and sold the fraudulently contracted lines, part of a wider pattern of similar AI-enabled fraud schemes targeting the company.

11 November 2025 · Hyogo Police · Fraud, scams and manipulation
11 November 2025
AII-1001-472072 sources ↓
Quick facts
Category
Fraud, scams and manipulation
Country
Japan
Source
日本経済新聞
Date
11 November 2025
Drafted by
Raidu Incident Detection

What happened

A 16-year-old from Saitama and a 21-year-old from Chiba were re-arrested by Hyogo Police on 11 November 2025 for unauthorized access to Rakuten Mobile's system and fraudulently contracting mobile lines. The teenagers used ChatGPT to create a program that automatically inputted stolen login credentials to contract eSIM lines without authorization.

The suspects initially manually entered stolen usernames and passwords to fraudulently contract lines, but later used information from encrypted messaging apps like Telegram to prompt ChatGPT into generating code for automated credential entry. The 16-year-old obtained approximately 1.5 million stolen credentials from an overseas website for about 50 dollars and contracted a total of 10 lines across multiple incidents. The 21-year-old sold the contracted lines for approximately 1,000 yen each.

Reported impact

Rakuten Mobile's system was compromised through unauthorized access using stolen credentials, enabling the fraudulent contract of at least 10 mobile lines. At the time of the incidents, the company's system allowed a single account to contract up to 15 lines, and previously submitted identity verification documents did not require re-submission for additional contracts under the same account.

Index analysis

This incident is part of a pattern: Tokyo Metropolitan Police had previously arrested three separate youth groups since February 2025 for similar fraudulent schemes involving generative AI to breach Rakuten Mobile's systems.

Classification

Category
Fraud, scams and manipulation
Industry
Digital security
Country
Japan
Harm status
Actual harm
Intent
Intentional
Timing
Unknown
Harm types
Economic or property
Harmed
Business
Consequences
Police investigation
AI systems
ChatGPT

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

日本経済新聞
楽天モバイル回線を不正契約、容疑の16歳少年ら再逮捕 生成AI悪用か
11 November 2025
読売新聞オンライン
「生成AIで回線契約プログラム作った」...楽天モバイルのシステムに不正接続容疑、少年ら再逮捕
11 November 2025