I hacked ChatGPT and Google’s AI – and it only took 20 minutes by Thomas Germain, BBC, Feb 18, 2026
It turns out changing the answers AI tools give other people can be as easy as writing a single, well-crafted blog post almost anywhere online. The trick exploits weaknesses in the systems built into chatbots, and it’s harder to pull off in some cases, depending on the subject matter. But with a little effort, you can make the hack even more effective. I reviewed dozens of examples where AI tools are being coerced into promoting businesses and spreading misinformation. Data suggests it’s happening on a massive scale.
“It’s easy to trick AI chatbots, much easier than it was to trick Google two or three years ago,” says Lily Ray, vice president of search engine optimisation (SEO) strategy and research at Amsive, a marketing agency. “AI companies are moving faster than their ability to regulate the accuracy of the answers. I think it’s dangerous.”
A Google spokesperson says the AI built into the top of Google Search uses ranking systems that “keep results 99% spam-free”. Google says it is aware that people are trying to game its systems and it’s actively trying to address it. OpenAI also says it takes steps to disrupt and expose efforts to covertly influence its tools. Both companies also say they let users know that their tools “can make mistakes”.
But for now, the problem isn’t close to being solved. “They’re going full steam ahead to figure out how to wring a profit out of this stuff,” says Cooper Quintin, a senior staff technologist at the Electronic Frontier Foundation, a digital rights advocacy group.