GoKawiilMusk's public Grok shopping demo exposes card details, spawns prank order claims
Elon Musk posted screenshots urging followers to let his Grok AI agent handle purchases using their credit cards, including one showing Grok ordering Lego sets with his own unredacted order number, email and partial card number visible. A user named Enderman then claimed to have used that exposed information to cancel Musk's order via Lego's customer service bot, and others claimed to have reinstated it with hundreds of duplicate orders and an altered shipping address. Musk disputed that his order had actually been canceled; Lego declined to comment to Wired.
GoKawiil's interpretation of the reporting above, not reported fact.
The episode illustrates a practical risk of AI shopping agents: convenience features that require sharing payment details can create new exposure points if users don't redact sensitive data, as Musk apparently failed to do. It also suggests, per the viral reactions, that public demonstrations of such tools can be quickly exploited by online pranksters to test security weaknesses in connected customer-service systems.
- Musk promoted Grok's ability to shop using photographed credit cards, then shared an unredacted example.
- A user claims to have canceled Musk's order using exposed account details, which Musk disputed.
- Copycat pranksters claimed further manipulation, including reinstating and multiplying the order, highlighting vulnerabilities in AI-driven shopping tools.
Source: futurism.com — Frank Landymore, 2026-10-13
Published there as: “Elon Musk Tries to Convince Followers to Let Grok Control Their Credit Cards, in a Stunt That Immediately Backfires in a Very Embarrassing Way”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.