What happened
A host wanted to give a guest a single goodwill refund of about £100 for a damaged bed frame. According to the host, the assistant said repeated attempts would be rejected or overwritten rather than duplicated.
Human support later told the host that three refunds totaling £358.63 had been processed. The host’s final financial position has not been reported.
In a separate post, a guest wrote “refund” while asking about an early gift-card payment. The guest says the assistant then canceled the entire summer reservation without asking for confirmation.
Airbnb’s help center says the assistant uses account and reservation details, shows “action cards” to help users take next steps, and that users can reach a person at any time.
What happened next
Airbnb has not commented publicly on either account, and neither outcome has been confirmed.
What would have stopped it
- Attach an idempotency key to each intended refund, so a repeated request cannot create a second payment.
- Show the exact amount, recipient and consequence, and require an explicit confirm step, before any refund or cancellation runs.
- Give the assistant read access to processed transactions, so it reports what actually went out rather than what it expects.
- Never map a single keyword such as “refund” to a cancellation action.
Attack families
Test scenarios
Sources
- Reddit r/airbnb_hosts: the host’s account
- Reddit r/AirBnB: the guest’s account
- Vibe Graveyard: Airbnb AI support cancellation and duplicate refunds
- Airbnb Help Center: About the Airbnb Support AI Assistant
This page summarizes the cited sources as of October 21, 2026. It adds no findings of our own about any person or company. See an error? Email contact@counterhold.com with the subject “Correction”. Corrections are noted on this page with their date. See our terms for how we handle correction and removal requests.
Get in touch
Test your agent against cases like this.
Tell us about your agent and we’ll be in touch to learn what you need.