Musk posts order details to millions

Elon Musk posted a screenshot on X bragging about his Grok AI agent ordering Lego Star Wars kits on Sunday.

X users attempt to hijack the order

An X account holder named Enderman used the exposed email and order number to contact Lego's customer service chatbot and attempted to cancel Musk's order.

“Perfect! I'll get your Lego adventure back on track.”

Musk says order was not canceled

Within a couple of hours, Musk replied to say his order had not been canceled after all. By then, the folly of posting his purchase details publicly must have been evident to him.

Lego declines to confirm what happened

Lego declined to comment when WIRED contacted the company to confirm if such fraudulent activity took place on Musk's order. Internal safeguards for Lego's AI assistant Sophia could have flagged unusual activity.

Visa warns of AI shopping fraud surge

Visa warned at the end of last year about fraud in agentic commerce, with bad actors building legitimate looking sites to fool AI agents.

“Once the AI agent completes the purchase … the malicious merchant can harvest payment data and instantly use it for unauthorized transactions.”