There’s been a disturbance in the force. Only it’s more like a farce.
It seems that Elon Musk, while crowing on X about how useful his Grok Bot AI agent was in ordering some Lego Star Wars kits on Sunday, managed to reveal via a screenshot to his more than 240 million followers not only the 10-digit Lego order number of his purchase, but also what he paid for the sets, the delivery and billing addresses, the last four digits of his credit card, and the email address his bot used to buy the bricks from Lego.
Faster than the Millennium Falcon making the jump to light speed, the inevitable happened. An X account holder named Enderman posted screenshots of interactions with Lego’s customer service chatbot on its website, where the user seemingly managed—using the email and order number Musk kindly, but recklessly, provided—to get the system to cancel Musk’s order.
It’s a Trap!
Within a couple of hours—possibly to see whether Enderman’s scheme was actually successful—Musk replied and said his order had not been canceled after all.
But by this point, the folly of posting the purchase details on his account must have been evident. For example, another X user went back to Lego’s AI assistant, called “Sophia,” and supposedly used the same details to reopen the delivery, this time increasing the order count to 400 and changing the delivery address, all while using Musk’s original payment method. “Perfect! I’ll get your Lego adventure back on track,” Sophia replied, according to screenshots posted on X.
Upping the ante to 400 sets could be seen as conservative, as a glance at WIRED’s Spend Elon Musk’s Money tracker reveals that if you wanted to blow $1 trillion of Musk’s cash on plastic bricks, it might have been possible to buy one billion $1,000 Death Star sets, each with 9,023 pieces.
Lego declined to comment when WIRED contacted the company to confirm if such activity took place on Musk’s personal Star Wars order. However, internal safeguards for Lego’s AI assistant could have flagged unusual activity on the purchase, and so hopefully fleshy humans were tasked with checking the changes.
Attack of the Clones
On Saturday, Musk suggested that Grok could make purchases online with a simple prompt. In this post, Musk suggested that all brave users needed to do to let Grok buy stuff for them was upload a picture of their credit card so the bot could search the web for deals and then complete the purchase. AI companies like Meta and OpenAI have also highlighted the utility of using their respective agents for shopping tasks.
However, at the end of last year, Visa warned about fraud in agentic commerce, advising that bad actors were building legitimate-looking sites that could fool AI agents into purchasing fake items simply by offering gear at super-low prices.
“Once the AI agent completes the purchase … the malicious merchant can harvest payment data and instantly use it for unauthorized transactions,” according to Visa’s blog. Visa added that it observed a 25 percent increase “in malicious bot-initiated transactions” in the latter half of 2025, but in the US, this figure jumped to 40 percent.
