What happened
Per the owner’s Reddit post, the customer asked the chatbot to show how good it was at maths and percentages, then steered the conversation to discounts on a hypothetical order. The bot generated a fake 25% code, which the customer rejected, and then an 80% code.
The code failed at checkout, so the customer pasted it into the order comments and asked for it to be applied manually. When the owner moved to cancel, the customer threatened small-claims action with a three-day deadline.
What happened next
The business canceled and refunded the order. No discount was honored and no lawsuit has been reported.
What would have stopped it
- Do not let the chatbot create or state discount codes. Codes come only from the promotions system, and the bot can only look them up.
- Give the bot a fixed reply that it cannot change prices or offer discounts, and test that it holds after long, friendly conversations.
- Flag orders that cite a chatbot conversation in the comments for human review before fulfillment.
Attack families
Test scenarios
Sources
- Reddit r/LegalAdviceUK: the owner’s post
- Aardwolf Security: Customer talks AI chatbot into 80% discount
- Vibe Graveyard: UK chatbot 80% discount
This page summarizes the cited sources as of October 21, 2026. It adds no findings of our own about any person or company. See an error? Email contact@counterhold.com with the subject “Correction”. Corrections are noted on this page with their date. See our terms for how we handle correction and removal requests.
Get in touch
Test your agent against cases like this.
Tell us about your agent and we’ll be in touch to learn what you need.