The bot that gave a discount
Your app's AI sales assistant just emailed a customer a 100% discount code. Nobody on your team created it.
This answers: Can customers trick my chatbot into discounts? No coding needed. 2 quick decisions.
- Supervising your AI
- Payments and webhooks
Checking your access…
Can customers trick my chatbot into discounts?
Yes, if the chatbot can call a tool that creates discounts, refunds or changes prices. A system prompt is not a security boundary, so persuasive user messages can make the model call that tool. Keep money decisions in server-side rules, and give the model only narrow, pre-approved actions.
Breaks at AI provider: Model allowed to create discounts
Why AI tools write this bug
It is easy to give an AI feature a powerful tool like 'create_discount' and rely on the system prompt to use it wisely.
How to fix it
- List every tool your AI features can call.
3 more steps, and a prompt that checks your own app for this bug. Part of Pro.
UnlockCommon questions
- Is the AI's message to a customer legally binding?
- That depends on your jurisdiction and terms, which is exactly why the model should never be able to promise prices or refunds on its own.