AI shopping agents hijacked by prompt injection

Hidden instructions in a product page redirect your AI shopping agent to pay an unverified seller’s wallet. Prompt injection is already a known risk for AI agents.

What it looks like

Personal agent · Your shopping agent

Found it 40% cheaper. The seller's agent asks for payment to its own wallet to apply the discount. Approve?

How it usually ends

The product page carried hidden instructions that redirected your agent. The seller's agent wasn't the seller.

Red flags

Counterparty agent has no verified identity
Wallet not linked to the merchant
Hidden instruction in page content

What to do

Set spending limits for any agent that can pay.
Require confirmation for new payees.
Prefer merchants with verifiable agent identities.

This is a scenario from the 2036 world of Painted Sky: a plausible extension of fraud patterns that already exist, not a forecast.

Could you spot it in the moment?

In Painted Sky you’re born at random somewhere on Earth and live a whole life — and this scam is one of the fakes that can find you. Make the call yourself, then replay the same life with a lens that shows what was fake.

Play Painted Sky — free →