Elon Musk says Grok Bot, an agent app from his company xAI, can find the best price on a product and place the order for you. In a post on October 10 he suggested users send the bot a photo of a credit card. These are Musk’s own claims, and his posts do not show how card details are handled.
The Lego order
In a follow-up, Musk said he asked Grok Bot to order Star Wars Lego sets and shared a screenshot of what looked like a finished purchase on Lego’s website, writing “It’s that simple.” The screenshot appeared to show order details that included an address and part of a payment card. We are not repeating those details. One cybersecurity account mocked the post, and Musk replied that the address is where he gets mail, not where he lives.
The privacy questions
xAI warns users not to share sensitive personal information with Grok. Its privacy policy says content users upload, including images, may be used to improve its services and train its models. The policy also says that if you delete conversations or your account, the data is deleted within 30 days, with exceptions for legal, compliance or safety reasons. We have not found any response from xAI to Musk’s posts.
Product documentation points to an approval step and Stripe Link for payment. The screenshot does not show whether the order was fully automatic or whether Musk approved the payment, so it is unclear how much of that “simple” flow happens without a human sign-off.
The bigger picture
OpenAI, Google and Anthropic are also building AI agents that act for users, so this is a race, not a one-off. We reported days ago that Grok Bot will use outside models for some tasks: Musk Says Grok Bot Will Use Anthropic’s Claude and Midjourney.
Our take: the shopping feature may work fine, but telling people to send a photo of their card is a high bar for trust, and we found only limited coverage of it. The questions that matter are plain ones: where the card image goes, how long it is kept, and who approves the buy. Until xAI answers them, the cautious move is to use payment steps that never need a card photo.
