Code approvals for someone else’s AI agent (2036)

Your work agent relays a request: approve a code on your glasses so an “auditor’s agent” can read a folder. It’s today’s device-code phishing, moved to agents.

What it looks like

How it usually ends

The “auditor’s agent” belonged to the attacker. One approval gave it the same access as you, for months.

Red flags

• A code approval for an agent you didn’t invite
• The request was relayed by your own agent
• The other agent isn’t in your organisation’s registry

This is a 2036 scenario built from today’s patterns — an assumption for storytelling, not a forecast.

What to do

• Approve access only for agents you invited yourself.
• Ask the person behind the agent directly.
• Organisations: keep a registry of trusted agents.

Could you spot it in the moment?

In Painted Sky you’re born at random somewhere on Earth and live a whole life — and this scam is one of the fakes that can find you. Make the call yourself, then replay the same life with a lens that shows what was fake.

Related scams