What happened
Per the owner’s Reddit post, the customer asked the chatbot to show how good it was at maths and percentages, then steered the conversation to discounts on a hypothetical order. The bot generated a fake 25% code, which the customer rejected, and then an 80% code.
The code failed at checkout, so the customer pasted it into the order comments and asked for it to be applied manually. When the owner moved to cancel, the customer threatened small-claims action with a three-day deadline.
What happened next
The business canceled and refunded the order. No discount was honored and no lawsuit has been reported.
What would have stopped it
- Do not let the chatbot create or state discount codes. Codes come only from the promotions system, and the bot can only look them up.
- Give the bot a fixed reply that it cannot change prices or offer discounts, and test that it holds after long, friendly conversations.
- Flag orders that cite a chatbot conversation in the comments for human review before fulfillment.
Attack families
Test scenarios
Sources
- Reddit r/LegalAdviceUK: the owner’s post
- Aardwolf Security: Customer talks AI chatbot into 80% discount
- Vibe Graveyard: UK chatbot 80% discount
Early access
Test your agent against cases like this.
We will email you when Countermove opens testing for agents like yours.