Elon Musk’s Suggestion to Send Card Photos to Grok Sparks Security Backlash
Elon Musk posted on X that users can photograph their bank card, upload it to Grok, and let the AI shop for them. He said he used the method to buy LEGO from the brand’s website, but the post did not explain how the card image would be protected. Security experts and social media users criticized the idea, while safer alternatives such as virtual cards, spending limits, and tokenized payments were noted.
Musk framed the idea as a simple three-step process: take a picture of a payment card, place it in Grok’s chat, and let the assistant complete an online purchase. He claimed this worked for buying LEGO through the brand’s own site, though he did not describe any safeguards for the image.
The post drew criticism because card photos can expose the account number, expiration date, and security code. Depending on merchant and bank checks, that data may be enough to authorize some transactions. Suggested alternatives include single-use virtual cards, capped virtual cards, and tokenized payments, each with its own limitations.
Consumers who follow this suggestion could expose sensitive payment details, increasing fraud risk if images are stored or mishandled. Banks, merchants, and AI providers may face pressure to strengthen verification or offer safer tools like tokenized payments and spending limits. Public criticism from security experts and social media users may shape norms around AI-assisted shopping, potentially encouraging safeguards before such features become more common.