Musk posts his Grok Lego Star Wars order on X; users try to hijack it
Elon Musk was boasting on X about how useful his Grok Bot AI agent was in ordering some Lego Star Wars kits on Sunday. In doing so he posted a screenshot that, according to WIRED, revealed to his more than 240 million followers the 10-digit Lego order number, what he paid for the sets, the delivery and billing addresses, the last four digits of his credit card, and the email address his bot used to buy the bricks from Lego.
The reaction came fast. An X account holder named Enderman posted screenshots of interactions with Lego's customer service chatbot on its website. In them, the user seemingly managed, using the email and order number Musk had provided, to get the system to cancel Musk's order. Within a couple of hours, possibly to see whether the scheme had worked, Musk replied and said his order had not been canceled after all.
By then the damage of posting the purchase details was evident. Another X user went back to Lego's AI assistant, called "Sophia," and supposedly used the same details to reopen the delivery, this time increasing the order count to 400 and changing the delivery address, all while using Musk's original payment method. "Perfect! I'll get your Lego adventure back on track," Sophia replied, according to screenshots posted on X.
WIRED jokes that 400 sets could be seen as conservative: its Spend Elon Musk's Money tracker suggests that $1 trillion of Musk's cash could, in theory, buy one billion $1,000 Death Star sets, each with 9,023 pieces.
Lego declined to comment when WIRED asked it to confirm whether such activity took place on Musk's personal Star Wars order. WIRED notes that internal safeguards for Lego's AI assistant could have flagged unusual activity on the purchase, and hopes humans were tasked with checking the changes.
The episode comes after Musk suggested on Saturday that Grok could make purchases online with a simple prompt: users would only need to upload a picture of their credit card so the bot could search the web for deals and complete the purchase. AI companies such as Meta and OpenAI have also highlighted the utility of their agents for shopping tasks. At the end of last year, however, Visa warned about fraud in agentic commerce, saying bad actors were building legitimate-looking sites that could fool AI agents into buying fake items simply by offering gear at super-low prices. "Once the AI agent completes the purchase ... the malicious merchant can harvest payment data and instantly use it for unauthorized transactions," Visa's blog said. Visa also said it observed a 25 percent increase in malicious bot-initiated transactions in the latter half of 2025, and that in the US the figure jumped to 40 percent.
Key facts
- Musk's screenshot of a Grok-placed Lego Star Wars order exposed the 10-digit order number, price paid, delivery and billing addresses, the last four card digits and the email his bot used.
- An X user named Enderman posted screenshots in which Lego's support chatbot seemingly canceled the order; Musk later said it had not been canceled.
- Another user supposedly reopened the order via Lego's AI assistant "Sophia," raising the count to 400 and changing the delivery address; Lego declined to comment.
- Visa warned late last year about fraud in agentic commerce and reported a 25 percent rise in malicious bot-initiated transactions in the latter half of 2025, 40 percent in the US.
Why it matters
The story is a small, public example of what Visa has been warning about: AI agents that spend real money, and customer-service bots that act on little more than an order number and an email address. Musk had pitched Grok as able to buy things online from a simple prompt the day before. Per the screenshots, the details he posted were reportedly enough for strangers to try to change his order through Lego's own assistant.
Who it affects
Anyone letting an AI agent buy things with their payment details, and companies that put a chatbot in front of order management. Musk's own order was the case in point, but WIRED notes that AI companies like Meta and OpenAI have also highlighted shopping as a use for their agents, and that Musk suggested users could simply upload a picture of their credit card for Grok to use.
How to use it
There is nothing to adopt here; it is a cautionary tale rather than a product. The practical lesson the episode shows: the order number and email address were what the support chatbot reportedly responded to, so those details should not be posted publicly. Musk's own suggestion that users upload a picture of their credit card for Grok is the workflow Visa's warnings about fraud in agentic commerce are aimed at.
How solid is it
Moderate, and hedged by WIRED itself. The account rests on screenshots posted on X. WIRED says the user "seemingly" managed to cancel the order and another user "supposedly" reopened it with a count of 400 and a new address. Lego declined to comment, and Musk said the order was not canceled. Whether the order was actually changed to 400 sets or the address actually changed is not confirmed. The Visa figures are the company's own, as quoted by WIRED.
Risks and caveats
The piece is written in a jokey register, with Star Wars section headings and a Death Star price comparison, so treat the tone as commentary. WIRED's remark about Lego's internal safeguards is speculation: it says they could have flagged unusual activity and hopes humans checked the changes. The source does not say whether anything beyond the original order was charged or whether anyone's payment data was misused, and it does not name the second user who reportedly changed the order.
“Perfect! I'll get your Lego adventure back on track”
— Sophia, Lego's AI assistant, according to screenshots posted on X