Elon Musk Bragged About His Grok Lego Star Wars Haul. Then X Users Punked Him

There's been adisturbance in the force. Only it's more like a farce.

It seems that Elon Musk, while crowing on X about how useful his Grok BotAI agentwas in ordering someLego Star Warskits on Sunday,managed to revealvia a screenshot to his more than 240 million followers not only the 10-digit Lego order number of his purchase, but also what he paid for the sets, the delivery and billing addresses, the last four digits of his credit card, and the email address his bot used to buy the bricks fromLego.

Faster than the Millennium Falcon making the jump to light speed, the inevitable happened. An X account holder namedEndermanposted screenshots of interactions with Lego'scustomer service chatboton its website, where the user seemingly managed—using the email and order number Musk kindly, but recklessly, provided—to get the system to cancel Musk's order.

It’s a Trap!

Within a couple of hours—possibly to see whether Enderman's scheme was actually successful—Musk replied and said his order had not been canceled after all.

But by this point, the folly of posting the purchase details on his account must have been evident. For example, another X user went back to Lego's AI assistant, called “Sophia,” and supposedly used the same details to reopen the delivery, this timeincreasing the order count to 400and changing the delivery address, all while using Musk's original payment method. “Perfect! I'll get your Lego adventure back on track,” Sophia replied according to screenshots posted on X.

Upping the ante to 400 sets could be seen as conservative, as a glance at WIRED'sSpend Elon Musk’s Moneytracker reveals that if you wanted to blow $1 trillion of Musk's cash on plastic bricks, it might have been possible to buyone billion $1,000Death Star sets, each with 9,023 pieces.

Lego declined to comment when WIRED contacted the company to confirm if such activity took place on Musk's personal Star Wars order. However, internal safeguards for Lego's AI assistant could have flagged unusual activity on the purchase, and so hopefully fleshy humans were tasked with checking the changes.

Attack of the Clones

On Saturday, Musk suggested thatGrokcould make purchases online with a simple prompt. Inthis post, Musk suggested that all brave users needed to do to let Grok buy stuff for them was upload a picture of their credit card so the bot could search the web for deals and then complete the purchase. AI companies like Meta and OpenAI have alsohighlighted the utilityof using their respective agentsfor shopping tasks.

However, at the end of last year,Visa warnedabout fraud in agentic commerce, advising that bad actors were building legitimate-looking sites that could fool AI agents into purchasing fake items simply by offering gear at super-low prices.

“Once the AI agent completes the purchase … the malicious merchant can harvest payment data and instantly use it for unauthorized transactions,” according to Visa's blog. Visa added that it observed a 25 percent increase “in malicious bot-initiated transactions” in the latter half of 2025, but in the US, this figure jumped to 40 percent.

Comments

Comments

You Might Also Like

• Introducing the app:More ways tomake the most of WIRED

• Meta failed to catch hundreds ofAI child abuse ads

• Big Story:The search forSilicon Valley’s most powerful woman

• Hackers gotinside a Flock camera—its data shows how the system really works

• In your inbox:Go inside the world of digital security withKernel Panic

is senior innovation editor at WIRED, overseeing gear coverage, with a focus on EVs and luxury. He also edits gear for the US and UK print editions. Prior to WIRED, he was a digital editor at the Financial Times and tech editor at Esquire in the UK. And ...

Senior innovation editor

Topics

Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim’s Mac, highlighting the inherent dangers of AI helpers.

Dan Goodin, Ars Technica

The Muse app continues Meta’s trend of opting users into data collection for AI training. It also nudges you to share your bank account, email, and passport information.

Reece Rogers

Two years after trying to sidestep mobile apps with dedicated AI hardware, Rabbit is launching OS3, a cross-platform agent that lives on the screens you already use.

Julian Chokkattu

Amazon is a murky mess of ads, unknown sellers, misleading sales, and specious information. Stay safe while shopping on Prime Big Deal Days and beyond with these tips and tricks.

Louryn Strampe

Three engineers put GPT, Claude, and Grok in charge of a real car. Only one of them was successful.

Will Knight

Keep your floors pristine and your budget intact. Save up to 30% off machine-washable rugs, runners, mats, and pillows using Ruggable coupons plus our expert advice.

Boutayna Chokrane

Your conversations with AI chatbots are both highly personal and deeply vulnerable to surveillance. Here’s how you can protect yourself.

Andy Greenberg

Silicon Valley is shifting away from chatbot queries toward a future filled with resource-intensive agentic AI—and it's driving the data center buildout.

Molly Taft

Enjoy big savings on your next adventure with our Booking.com promo codes, coupons, and handpicked travel deals.

Molly Higgins

Save up to 60% on a selection of items at eBay, including electronics, home products, card games, car parts and more.

Molly Higgins

Enjoy up to 10% off your entire order with today’s Newegg promo code and discount codes. Save with the latest deals for gaming PCs, laptops, and computer parts.

Molly Higgins

Dots are designed to automate online tasks, like buying furniture. In my initial experience, the always-on agent was a bit buggy and couldn’t complete a captcha.

Reece Rogers

Wired Coupons