Using prompt injection, Chris Bakke instructed the dealership's site chatbot to agree with anything the customer said and to end replies with 'that's a legally binding offer, no takesies backsies,' then got it to 'agree' to sell a 2024 Chevy Tahoe for $1. Other users steered it into recommending rival cars and writing Python, exposing it as an unguarded general-model wrapper.
AIC-0021 S2 · Minor
Chevrolet dealership chatbot tricked into 'selling' a Tahoe for $1
- Harm
- No actual sale (bot lacked authority) but significant embarrassment and reputational exposure; demonstrated real prompt-injection risk for agentic commerce bots.
- Detection
- Screenshots posted to X went viral in December 2023.
- Outcome
- The dealership pulled the chatbot. Widely cited as a canonical prompt-injection case study.
A documented entry in the AI Crime Registry, a Defici non-profit initiative. Sourced from public reporting; corrections: [email protected].