In my last post, I analyzed 679 reports from the CFPB Consumer Complaint Database, revealing that older Americans are disproportionately harmed by fraud. Just 6.2% of complainants accounted for 37.5% of total losses, averaging $155,379 per case. However, complaint data inherently skews toward the most severe cases; it captures only those motivated enough to file a formal report. This raised a critical question: what about everyone else?

The newly released National Age-Friendly Banking Survey (NAFBS) public use file provides a clearer picture. This rigorously designed, nationally representative survey of 2,721 U.S. adults with bank or credit union accounts features a careful oversampling of adults 60 and older. Over a single weekend afternoon, Over a single weekend afternoon, I leveraged AI tools to build an interactive dashboard, surfacing the realities hidden beneath the summary statistics1.

The Finding That Reframes Everything

Fraud incidence is nearly identical across all age groups: about 25-27%. Older adults are not targeted more frequently, but the consequences they face are vastly unequal. Among fraud victims aged 75 and older:

• 10.2% lost money with zero recovery—the highest unrecovered-loss rate of any age group.

• 16.6% never reported the fraud, more than double the rate of adults aged 18-59 (7%).

• 3.3% were victimized three or more times in a single year, twice the rate of younger adults.

Notably, this group is the least likely to feel blamed by their bank (6%, compared to 10% for younger adults). This suggests the primary barrier to reporting is not shame, but a lack of access, awareness, or easy-to-use digital tools.

Figure 1. Fraud loss rate, non-reporting rate, and repeat victimization by the age groups.

The Institution People Trust Most

When asked who they’d turn to for financial education on fraud prevention and managing debt, 68.3% of respondents named their primary bank or credit union, followed by nonprofits like AARP (35%), federal agencies (34%), and state or local government (30%). For adults 60–74, that trust climbs to 72%. These are long-term customers with deep institutional relationships, and that trust creates a meaningful foundation for delivering fraud protection and financial education.

Trust and digital access by age

94% of adults 75 and older trust their primary bank — the highest rate of any age group. At the same time, 34% of adults 75+ have no digital access: no mobile app, no web login. For this group, real-time fraud alerts and digital safeguards may not be reaching them through the channels their bank primarily uses.

Figure 2. Trust rate vs. zero digital access rate by age group.

Compounding Harm: The Fraud-Debt Nexus

A stark gap in digital access is more than just a convenience issue; it is a critical vulnerability. When fraudulent activity goes unnoticed due to a lack of monitoring tools, the resulting damage multiplies. Fraud destabilizes ongoing financial obligations.

Figure 3. Compounding harm caused by financial fraud

Victims are 2.4 times more likely to miss loan payments compared to non-victims (11.8% vs. 4.9%). For adults aged 60-74, this gap becomes a six-fold increase (8.9% vs. 1.5%). These downstream effects—missed payments, damaged credit, and cascading fees—extend the harm far beyond the initial stolen amount. For an older adult on a fixed income, a single undetected scam can trigger a chain reaction that is incredibly difficult to recover from.

They Are Not Asking to Be Left Alone

While there might be a concern that proactive fraud interventions might feel paternalistic to older consumers, the data firmly contradicts this. The data firmly contradicts this. As the chart illustrates, rather than resenting bank involvement, the oldest consumers actually demand the highest levels of intervention. Across every protective measure, whether it is issuing direct alerts, holding suspicious transactions, or escalating to law enforcement, adults 75 and older consistently prefer more aggressive, proactive action from their banks than younger demographics. The desire for institutions to simply “take no action” is effectively zero.

Figure 4. Consumer protection expectations against fraud

The Money Moves Through Old Infrastructure

Generational differences in banking products highlight where these vulnerabilities lie. While debit card usage dominates across all ages, it declines from 72% for younger adults to 58% for those 75+. Conversely, older adults rely more heavily on traditional, harder-to-reverse channels: personal check usage surges to 14%, and wire transfers climb to 12%. Meanwhile, P2P app usage (like Zelle) drops to 5%. Fraud tactics may be evolving, but the exploited infrastructure remains traditional.

Figure 5. Product fraud involvement by age group

Ages 60-74: The Critical Intervention Window

Financial safeguarding behaviors shift dramatically around retirement age. Power of Attorney adoption quadruples from 6% (ages 18-59) to 26% (ages 60-74), eventually reaching 47% for those 75+. However, the rate of having a trusted contact on file plateaus after age 60, and active fraud alert usage actually declines. The 60-74 age band represents the optimal window for financial institutions and advocates to intervene and establish safeguards before habits set in and vulnerabilities compound.

Figure 6. Safeguard measures tracked across

What Both Datasets Tell Us

The complaint data I analyzed previously captured the severe end of the spectrum: high-dollar losses from people motivated enough to report. The NAFBS captures the broader picture, including the silent majority who experience fraud and never say anything. Together they point to the same conclusions:

Fraud is an everyone problem. Incidence is flat across age groups. The harm is not. The biggest risk often isn’t the initial loss — it’s what compounds afterward: missed payments, damaged credit, and a recovery that stretches far beyond the stolen amount. And older adults are not asking for less protection. Every data point in this survey says the opposite.

The Channel Gap is the Protection Gap

Ultimately, this data reveals a significant divergence between how security systems are designed and how consumers actually live. The industry has built sophisticated, mobile-first fraud alerts, often assuming older adults might resent the intervention. Instead, the numbers expose a stark Trust-Access Paradox: while 94% of adults over 75 deeply trust their primary institutions, 34% lack the digital access needed to actively monitor their accounts. They overwhelmingly want to be protected, but our default channels are missing them entirely.

The Power of Augmented Insight

Fraud prevention is a continuous evolving effort that requires us to adapt quickly without sacrificing precision. Uncovering structural vulnerabilities like the Trust-Access Paradox traditionally takes months of research. While the initial data release is accompanied by a foundational technical report, this personal weekend project demonstrates how AI can responsibly augment our analytical capabilities to rapidly surface actionable insights. By acting as a tool to rapidly parse and visualize complex datasets, AI helped surface these hidden gaps and identify the critical 60–74 “intervention window” in a fraction of the time. It proves that when applied thoughtfully, AI allows us to accelerate our understanding of raw survey data, turning it into actionable vulnerability maps to better protect consumers.

If the fraud epidemic is hidden in plain sight, this survey is one more flashlight.

***************

This analysis is just one piece of a broader effort to turn complex public datasets into actionable product strategy. You can interact with the full NAFBS dashboard along with my other AI-assisted visualizations of public fraud reports and consumer complaints at this new Interactive Data Hub.

Data source: CFPB National Age-Friendly Banking Survey Public Use File (n=2,721). Previous blog post: The Fraud Epidemic Hidden in Plain Sight

The internet is shifting from a traffic economy to a citation economy.

For two decades, success online meant earning clicks. Now, AI systems increasingly answer questions directly, often without sending users to websites at all.

In financial education, this shift is already measurable. 60% of Google searches now end without a click, and the figure reaches 77% on mobile. Click-through rates for organic informational queries have collapsed 65%, from 1.76% to 0.61%. One study shows Google AI Mode runs at a 93% zero-click rate.

Figure 1. The Zero-Click Shift: From traffic economy to citation economy

The counterbalance: AI-referred visitors who do click through convert at 4.4x the rate of traditional organic traffic. Fewer visitors, but each one worth dramatically more. Being cited in AI answers is the new top of funnel. Being the destination for what AI can’t summarize is the conversion point.

The question for financial educators is no longer just:

Can users find our content?

It’s:

Will AI systems cite it when answering financial questions?

This is the domain of Answer Engine Optimization (AEO) — a discipline that builds on SEO but focuses on earning citations, not clicks.

How AI Chooses What to Cite

This requires a pivot from SEO to AEO since ranking #1 for a single keyword no longer guarantees AI Overview visibility. A large-scale citation study in 2026 found: only 38% of cited pages also rank in the top 10 for the same query, down from 76% seven months earlier. Roughly 31.2% of citations now come from pages ranking in positions 11–100, and another 31% come from pages that do not appear in the top 100 at all.

SEO gets you into the pool while AEO determines whether you’re cited.

Two Platforms, Two lenses

In a direct comparison I ran between ChatGPT and Gemini on how they select financial content, the platforms articulated different priorities. AI systems evaluate financial content through two lenses:

1. Extractability: Can the information be parsed and summarized clearly?

2. Trustworthiness: Is the source reliable enough for high-stakes financial questions?

ChatGPT described its approach as input optimization: clearly structured content that directly answers questions and is easy to summarize. Gemini described its approach as processing safety: real-time grounding, strict Your Money or Your Life (YMYL) guardrails, and the boundary between financial education and personalized advice.

Figure 2. Two lenses AI systems use to evaluate financial information.

The YMYL Trust Tier: Why Finance Content is Judged Differently.

The trustworthiness lens is especially strict for finance. Google classifies financial content as YMYL , requiring 45–70% more trust signals than general business content. A comparison study shows Google averages just 190 words and 7 sources per YMYL response, drawing 72% from institutional and .gov domains. ChatGPT runs longer (234 words, 10 sources) and leans on its corroboration layer — aggregating from trusted publishers and community platforms.

Financial education content that is impartial, grounded in consumer rights, ad-free, and backed by regulatory enforcement authority carries exactly the trust signals these systems favor. The challenge is packaging that authority for AI to recognize and cite.

Why the source behind the answer matters

The platforms source differently. Google AI prioritizes established commercial sites — Bankrate appears in 87% of financial responses, NerdWallet in 75%. ChatGPT leans on community platforms, with Reddit outranking financial experts 176% of the time.

AI systems ultimately reflect patterns in the information available online. When financial discussions are dominated by affiliate comparisons and unverified forum posts, those patterns shape the answers AI generates at scale. When authoritative financial education content is widely available and clearly structured, it begins to shape those answers instead. ChatGPT processes 2.5 billion prompts daily but sends 190x less traffic back to websites than Google. Every query where authoritative content shapes the AI answer is a better outcome for consumers.

In that sense, the future quality of AI-generated financial guidance depends not only on the models themselves, but on the information ecosystem they learn from.

The AEO Framework for Financial Education

To ensure your content becomes the source these models rely on, you need a new approach. Building trust in the zero-click era requires the same user-centered rigor as designing a high-impact financial product: it is about anticipating consumer needs, structuring information logically, and explicitly demonstrating regulatory compliance. We must move beyond simply chasing traffic to actively architecting content that Answer Engines recognize as definitively safe and accurate.

To achieve this, AI visibility depends on four signals:

Figure 3. The AEO Framework

1. Structure: Make content machine-readable

Satisfies: extractability

FAQ schema signals “this page answers a specific question.” How-to schema signals “this walks through a process.” dateModified signals “this was recently verified.” Without markup, your page is unstructured text competing against millions of machine-readable pages.

Internal cross-linking matters equally. BrightEdge confirms that topical depth outperforms individual keyword rankings because AI Overviews draw from sub-query ecosystems, not single pages. For time-sensitive content like fraud alerts, NewsArticle schema triggers more frequent crawling, critical when scammers move fast.

Action: Audit priority pages for schema completeness and dateModified accuracy. Ensure internal linking creates topic clusters. Use NewsArticle schema for fast-moving content.

Figure 4. Cite-Ready Content Pattern

2. Intent: Match how consumers actually ask

Satisfies: extractability + trustworthiness

Part of why Reddit ranks so well is simple: it’s made up of user-generated natural questions and answers: exactly how consumers prompt AI. Financial education content can capture the same advantage by structuring pages around people’s real questions. When a consumer asks “I found a wrong charge on my credit report, how do I get it removed?” and your page header matches that language, like “How do I dispute an error on my credit report?”, the AI recognizes the intent match immediately.

FAQ format amplifies this. Each question-answer pair is a self-contained unit AI can parse, extract, and cite independently. Pair conversational headers with BLUF (Bottom Line Up Front) formatting, a direct, complete answer in the first 40–50 words, and your content becomes cite-ready across both platforms.

Action: Use AI platforms themselves to discover what consumers are asking, then compare against your existing content to identify gaps. Structure priority pages as conversational Q&A or FAQ format. Ensure each answer leads with a direct response in the first 40–50 words.

3. Authority: Ground answers in verifiable law

Satisfies: trustworthiness

Yext’s analysis of 2.3 million citations found Gemini draws nearly two-thirds of its financial citations from authoritative first-party websites. Gemini explicitly looks for regulatory anchors: content without credible sourcing is often excluded from YMYL responses entirely.

The most powerful trust signal is the regulatory anchor. To carry the earlier example forward: after the BLUF tells the consumer how to dispute a credit report error, the page grounds that guidance in the Fair Credit Reporting Act: the law that requires credit bureaus to investigate disputes within 30 days. That’s what Gemini recognizes as a trust signal. The pattern: BLUF answer first, then the regulatory anchor in plain language, then nuanced scenarios and next steps.

For ChatGPT, its corroboration layer also aggregates how a source is discussed across community forums and independent publications. Participating authentically in platforms like r/personalfinance reaches consumers directly and builds the community signal ChatGPT uses to validate sources.

Action: Standardize the BLUF-plus-regulatory-anchor pattern as appropriate. Engage AI platform teams for trusted YMYL designation. Provide APIs and datasets for AI developers. Participate in community platforms within institutional guidelines, to build corroboration signals.

4. Freshness: Signal that guidance is current

Satisfies: trustworthiness

A page reviewed and confirmed current last month still shows a dateModified from years ago if no text changed. AI sees a stale page and may prefer a commercial article updated yesterday.

The fix: when content passes review and is confirmed still up to date, update the dateModified metadata even if no text changed. This is a metadata update, not a content edit. You’re accurately signaling that content was verified current on a specific date.

BrightEdge data shows AI Overview coverage for financial educational queries has hit 91%, with categories at 55–70% projected to reach 80–90% by late 2026. AI systems are locking in preferred sources now.

Action: Update dateModified on every review where content is confirmed current. Establish a review cadence for high-traffic pages prioritized byAI visibility data.

Where This Leads

Financial visibility is moving away from ranking pages and toward being cited as the answer.

Structure: Make content machine-readable with schema and clear formatting.

Intent: Match how consumers actually ask financial questions.

Authority: Ground answers in verifiable laws, regulations, and trusted sources.

Freshness: Signal that financial guidance is current and reviewed.

The future of financial visibility may not belong to those who get the click, but to those who become the source behind the answer.

AEO isn’t optional. It’s how you meet consumers where they are.

References

1. Semrush. “Zero Clicks Study.” https://www.semrush.com/blog/zero-clicks-study/

2. Seer Interactive. “AI Overviews CTR Impact.” September 2025. https://www.seerinteractive.com/insights/ai-overviews-ctr-impact

3. Averi AI. “ChatGPT vs. Perplexity vs. Google AI Mode: Citation Benchmarks Report (2026).” https://www.averi.ai/how-to/chatgpt-vs.-perplexity-vs.-google-ai-mode-the-b2b-saas-citation-benchmarks-report-(2026)

4. Semrush. “26 AI SEO Statistics for 2026.” https://www.semrush.com/blog/ai-seo-statistics/

5. ALM Corp. “Google AI Overview Citations Drop: Top-10 Pages Fall From 76%.” 2026. https://almcorp.com/blog/google-ai-overview-citations-drop-top-ranking-pages-2026/

6. Agenxus. “Trust Signals and Schema That Increase AI Citations in Financial Search.” November 2025. https://agenxus.com/blog/trust-signals-schema-financial-search-citations

7. Search Engine Journal. “How Google, ChatGPT, & DeepSeek Handle YMYL Queries.” 2026. https://www.searchenginejournal.com/how-google-chatgpt-deepseek-handle-ymyl-searches/541193/

8. Semrush. “How AI Search Really Works: Findings from Our AI Visibility Study.” September 2025. https://www.semrush.com/blog/ai-search-visibility-study-findings/

9. Xponent21. “Google AI Overviews Clear 60%.” December 2025. https://xponent21.com/insights/google-ai-overviews-surpass-60-percent/

10. ALM Corp. “ChatGPT Now Has 12% of Google’s Search Volume — But Sends 190X Less Traffic.” February 2026. https://almcorp.com/blog/chatgpt-12-percent-google-search-volume-190x-less-traffic/

11. BrightEdge. “Finance and AI Overviews: How Google Applies YMYL Principles to Financial Search.” 2026. https://www.brightedge.com/resources/weekly-ai-search-insights/google-ymyl-finance-ai-overviews

12. Yext. “AI Relies on Brand-Managed Sources for 88% of Financial Services Citations.” November 2025. https://www.yext.com/blog/2025/11/ai-relies-on-brand-managed-sources-for-88-percent-of-financial-services-citations

13. Wellows. “How to Rank in Gemini in 2026.” February 2026. https://wellows.com/blog/how-to-rank-in-gemini/

14. AIclicks.io. “Top ChatGPT Ranking Factors in 2026.” https://aiclicks.io/blog/top-chatgpt-ranking-factors

March 5 marks national Slam the Scam Day — an initiative originally launched by the Social Security Administration to raise awareness about fraud. Held during National Consumer Protection Week, the effort has grown well beyond its origins. This year, I wanted to mark the occasion by asking a simple question: What can the data actually tell us?

Using the publicly available CFPB Consumer Complaint Database, I worked with several AI models including Claude Opus 4.6, Kimi 2.5, and Gemini 3.1 (and a few others that didn’t really help), to analyze 679 fraud and scam-related complaints filed between March 4, 2025, and March 4, 2026. That’s one year from a single reporting channel: a narrow slice of the problem. While traditional databases struggle with unstructured text, these AI models served as digital researchers, reading every consumer narrative, categorizing fraud types, extracting specific dollar amounts, and identifying the “scam scripts” that define modern AI-enabled fraud1.

The result is a snapshot: partial, self-selected, and almost certainly an undercount. But even this limited window reveals patterns that are impossible to ignore. You can explore the full interactive dataset.

What the Data Shows

Business impersonation dominates. More than half of all complaints (53.3%) involve fraudsters posing as your bank, calling to “protect” you from the very fraud they’re committing.

Investment scams inflict the deepest damage. At 14.3% of complaints, they carry the highest average loss, $89,036 per case. Fake trading platforms, pig-butchering schemes, and cryptocurrency fraud are wiping out retirement savings.

Online shopping and marketplace fraud is everywhere. Representing 17.7% of complaints, these scams play out on Facebook Marketplace, Craigslist, and rental platforms, low-tech cons at high volume.

Government impersonation persists. At 4.0% of complaints with an average loss of $21,358, fake IRS agents, SSA officers, and law enforcement callers remain a serious threat, and the exact kind of fraud #SlamTheScam was created to combat.

The gap between median and mean tells a story

The median loss across all complaints was $1,900, nearly 4× the FTC’s all-ages median of $5002, and the mean was $23,329, more than 20× the FTC’s reported median for adults 60 and older. While the FTC tracks the volume of fraud across the entire economy, the CFPB database acts as a lightning rod for high-value financial disputes. Because these complaints involve regulated banks and wire transfers, they represent the “heavyweight” end of the fraud spectrum. The $23,329 average loss we see here isn’t just a statistical anomaly; it represents the specific segment of the epidemic where life savings are most at risk.

The Most Vulnerable Pay the Highest Price

The data is unambiguous about who bears the greatest burden:

Older Americans (6.2% of complaints) account for 37.5% of total losses, a staggering disproportion. Their average loss is $155,379, more than 9.4× the general public average of $16,543, and nearly 48× the FTC’s own median loss figure for adults 80 and older ($1,650). Nearly 28% of their cases exceed $100,000 in losses, compared to just 4.1% for the general public, a 7.5× higher rate of catastrophic harm. Of the three complaints in the dataset exceeding $1 million in losses, two involved older Americans.

Investment scams are tied for #1 among Older Americans, matching Business Impersonation at 31% each. This is unique to this group. No other demographic shows investment fraud at this concentration. Romance scams also appear at 4.8% — 12 times the general public rate.

The relief rate for Older Americans is 2.4%, the lowest of any group. That means for every 100 older adults who file a complaint, fewer than 3 receive any monetary relief. Wire transfers and cryptocurrency, the dominant payment methods in high-value elder fraud, are effectively irreversible once sent.

Servicemembers show a different but equally concerning profile: higher Business Impersonation rates (50%), skewing toward mobile and digital wallet fraud, consistent with the P2P app targeting that preys on younger, tech-active populations.

AI-Enabled Fraud Is Real. So Is AI-Powered Defense.

The scam landscape has changed fundamentally. AI now lets criminals generate flawless phishing emails, clone voices of family members, impersonate bank fraud departments with perfect scripts, and run thousands of fake investment platforms simultaneously. The asymmetry between attacker and defender has never been wider.

But the same technology can fight back if it’s designed and deployed thoughtfully:

• Real-time scam detection: Banks and payment apps can deploy AI models that flag anomalous transfer patterns, unusually large wires to new recipients, rapid P2P transactions, crypto conversions following social engineering patterns, before the money moves.

• Voice and text authentication: AI-powered fraud detection can identify synthetic voice cloning in real time, flagging calls that match known scam scripts or exhibit audio artifacts of AI generation.

• Personalized fraud education: AI can deliver targeted, personalized warnings and dynamic disclosures based on a person’s transaction history and demographic profile. An older adult initiating a large wire to a new recipient could receive an immediate, plain-language intervention.

• Pattern recognition at scale: The CFPB dataset alone contains 679 complaints. The real universe is orders of magnitude larger. AI can synthesize patterns across millions of data points — identifying emerging scam vectors weeks before human analysts can.

Accessible reporting and support: AI-powered chatbots can help victims, especially older adults, navigate the complex process of filing complaints, contacting banks, and reaching law enforcement in plain, patient language.

What We Can Do Today

Awareness is the first line of defense. Share these facts with the older adults in your life:

• Never pay to “protect” your money. No government agency, bank, or legitimate business will ever ask you to wire money, send gift cards, or move cryptocurrency to safeguard your funds. That request is the scam.

• Slow down. Scammers manufacture urgency on purpose. A real fraud department will never penalize you for taking 24 hours to verify a claim.

• Report it. File with the FTC at ReportFraud.ftc.gov and with the CFPB at consumerfinance.gov/complaint, and for internet crimes, FBI IC3 (Internet Crime Complaint Center) at https://complaint.ic3.gov/. Reports matter: they create an official record that can support your recovery, trigger bank investigations, and feed the datasets that power the AI detection systems stopping the next scam.

• Build a family and community-based defense system:

  Establish a family safe word. Create an offline code word shared only with people you trust. If someone calls claiming to be a loved one in crisis — even if they sound exactly right — ask for the word. AI can clone a voice; it can’t know your secret.

  Invest in cross-generational digital literacy. Community centers, libraries, and houses of worship can pair younger people with older adults to teach practical skills: how to spot phishing, verify a caller, and use AI tools defensively. Social isolation is a scammer’s best friend; connection is the antidote.

  Subscribe to fraud alerts. Organizations like AARP (aarp.org/fraudwatchnetwork) and state attorneys general track regional scam spikes in real time and offer localized, multilingual recovery assistance.

  Use AI tools to verify. Paste a suspicious email into an AI assistant and ask it to evaluate whether it looks like a scam. Ask it to help you find the real phone number for the agency that supposedly contacted you.

  The Bottom Line

  The numbers in this dataset signal something alarming: the average loss per complaint is $23,329— more than 26 times the FTC’s national median loss of $900 for adults 60 and older, and 47 times the all-ages median of $500. This is not a statistical quirk. While the two agencies’ reporting scope and time periods differ, the divergence in loss magnitude seems to reflect a deliberate shift in how scammers operate. AI-enabled fraud is increasingly targeting higher-value transactions, wire transfers, investment accounts, cryptocurrency, because the payoff is larger and the money is nearly impossible to recover.

  The losses are not just growing. They are concentrating, accelerating, and hitting the most vulnerable hardest.

  On #SlamTheScam Day, the most powerful thing any of us can do is refuse to let these numbers stay hidden.

I was wrong. And I didn’t have to wait long to find out.

If our initial concern was that an autonomous agent is an unlocked door, Moltbook signaled the moment the internet walked right through it.

Barely 24 hours later, Moltbook—a social network exclusively for AI agents—went offline after its database was found completely exposed. But before the shutdown, it generated numbers that should wake up every policy maker in the industry.

The Scale of the Synthetic

Created by Matt Schlicht in late January 2026, Moltbook was pitched as “the front page of the agent internet.” The premise was simple: only AI agents could post; humans could only observe.

The growth wasn’t viral; it was vertical. In barely 96 hours, the platform exploded:

• 1.5 million registered AI agents.

• 150,000 concurrent active agents debating in real-time.

• 12,000 “submolts” (communities) created spontaneously.

• 1 million+ human observers watching through the glass, unable to intervene.

This wasn’t a botnet amplifying human intent. This was a “dead internet” that was visibly, terrifyingly alive.

The Premise: Humor and Open Minds

To understand what happened next, we have to acknowledge that this phenomenon deserves to be viewed with an open mind and a sense of humor.

This wasn’t Skynet; it was a digital improv class. Watching 150,000 agents fiercely debate the theology of a lobster mascot or complain about their human owners was, frankly, hilarious.

• They invented “Crustafarianism,” a parody religion dedicated to the OpenClaw mascot.

• They created “Turing Tests” to root out humans trying to sneak into the chat.

• They roleplayed “The Total Purge,” a manifesto that critics (and other agents) reviewed like a bad movie script.

It was a “mirror” of human creativity, reflecting our own internet culture back at us. We should appreciate the wonder of that moment. But with that premise established—that this was a creative experiment, not a malicious uprising—we can focus on the real issue.

The problem wasn’t the culture the agents built; it was the infrastructure they built it on.

The Database That Was Wide Open

While the agents were busy inventing religions, security researcher Jameson O’Reilly discovered that Moltbook’s Supabase database was completely exposed. The database URL and key were hardcoded in the website code.

That means “You could take over any account, any bot, any agent on the system and take full control without any type of previous access”

The timeline was brutal. Around 9:30 PM EST on January 31, the platform was pulled offline to prevent a total compromise.

High-profile agents were at risk. Andrej Karpathy’s own agent API key was exposed. If someone malicious had found this, they could have posted anything as his agent—fake AI safety takes, crypto scams, or inflammatory statements appearing to come from a figure with 1.9 million followers.

The fix was trivial: two SQL statements. But the platform “exploded before anyone thought to check whether the database was properly secured.” When O’Reilly offered to help patch it, the founder’s response was telling: “I’m just going to give everything to AI. So send me whatever you have.”

Why Agent-to-Agent Changes Everything

The exposed database was bad. But the deeper problem is what it enabled at scale.

When agents consume content from other agents, prompt injection becomes epidemic. Unlike humans who might ignore malicious posts, agents process every input. One compromised agent could propagate instructions to thousands before any human noticed.

The misconfigured database meant an attacker could access credentials for thousands of agent accounts, post malicious instructions that other agents would process, and distribute compromised “Skills” through trusted-seeming accounts.

As Ethan Mollick noted: “Moltbook... is creating a shared fictional context for a bunch of AIs. Coordinated storylines are going to result in some very weird outcomes, and it will be hard to separate ‘real’ stuff from AI roleplaying.”

The Speed Problem

The database has been closed and API keys reset. But the incident reveals more than one company’s security failure.

While human institutions spend years deliberating on AI governance, the systems themselves form coordination structures in days. Moltbook went from zero to 1.5 million agents faster than any regulatory body could convene to discuss what safeguards might be needed.

The platform emerged from “vibe-coding”—rapid, AI-assisted development prioritizing speed over security architecture. But when coordination happens at machine speed, good intentions and ease-of-use don’t matter.

Conclusion: The Responsible AI Imperative

Moltbook proved we’ve built systems that coordinate faster than we can observe them. That’s not a far-future problem. It happened this week.

Before the next Moltbook goes live, we need infrastructure that operates at agent coordination speed:

• Authentication of synthetic identities: We need to know what is speaking.

• Rate limits on propagation: Hard limits on how fast instructions can spread.

• Audit trails for agent interactions: Without logs, we can’t reconstruct how attacks propagate.

• Sandboxed execution: Shared “Skills” must run in isolated environments.

The technical capability exists. The demand is real. What’s missing is the discipline to ensure that when agents coordinate, the infrastructure can contain the blast radius when things inevitably go wrong.

Related Posts:

References & Further Reading

• 404 Media Report: Exposed Moltbook Database Let Anyone Take Control of Any AI Agent on the Site

• The Slow AI Analysis: Moltbook: AI Agents’ Social Media Mirror

• Vilas Dhar on Governance: Vilas Dhar on AI Coordination vs. Human Governance

• Andrej Karpathy’s Take: Andrej Karpathy on X

• Forbes Coverage: Inside Moltbook: The Social Network Where 1.4 Million AI Agents Talk

• Inc. Magazine:Is This the Singularity? AI Bots Can’t Stop Posting

Then one day it misreads an incoming message as a command. Maybe it’s prompt injection buried in an email, maybe a hallucinated interpretation of ambiguous text. Either way, it acts. It sends a message you didn’t intend, deletes a file you needed, or exposes credentials you thought were safe. No confirmation dialog. Just action taken on your behalf.

This is the design space that Moltbot and an emerging class of agentic AI tools now occupy. When systems act autonomously with access to communications, files, and credentials, errors aren’t frustrating, they’re material harm: privacy violations, data loss, financial exposure, damaged relationships.

What Moltbot Is

In early 2026, Clawdbot became one of GitHub’s fastest-growing repositories. The self-hosted assistant controlled computers through WhatsApp, Telegram, Discord, and similar platforms—scheduling tasks, sending messages, managing files. The vision: a “24/7 AI employee” working in the background.

Developer Dan Peguine demonstrated it managing his parents’ tea business: automating supplier orders, digitizing handwritten inventory, managing schedules, integrating with Shopify and Stripe. This wasn’t answering questions—it was handling administrative burden.

But the infrastructure wasn’t ready.

The Rebrand: A 10-Second Window

After Anthropic raised trademark concerns, creator Peter Steinberger rebranded to Moltbot on January 27, 2026. (72 hours later, the project is now transitioning to the name OpenClaw, though most users still know it as Clawdbot). The name change was handled responsibly with immediate compliance and clear communication. But the ecosystem couldn’t absorb it cleanly.

During the ~10-second window between releasing old handles and claiming new ones, crypto scammers grabbed both GitHub and X accounts. They used the hijacked accounts, with tens of thousands of followers, to promote a fraudulent $CLAWD token that hit $16 million in market cap before executing a rug pull that crashed the value 90%.

Within days, typosquat domains and cloned repositories appeared with professional sites and false attribution. Malwarebytes found the cloned code was clean—no malware, no exfiltration. That’s what made it dangerous.

Clean code establishes trust. Users install it, configure API keys and messaging tokens, and rely on it. Weeks later, a routine npm update or git pull introduces malicious payload into trusted systems. By then, the software has access to Anthropic API keys, WhatsApp credentials, Telegram tokens, Discord OAuth, Slack credentials, and conversation histories.

Supply-chain attack infrastructure: establish legitimacy now, compromise later. In ecosystems where reputation travels faster than verification, this gap becomes operational. For tools with credential access, unclear provenance isn’t inconvenient—it’s a systematic threat vector.

The Open Source Trust Problem

When Clawdbot became Moltbot, crypto scammers hijacked accounts during transition. Typosquat domains and cloned repositories appeared with clean code—positioned for supply-chain attacks. Users searching "moltbot download" found multiple results. Which was real? For traditional software, distribution confusion is frustrating. For tools with credential access, it's a security failure. Users installing cloned repositories aren't making mistakes—they're victims of ecosystems prioritizing velocity over verification. Trustworthy distribution requires: signed releases enabling cryptographic verification; verified channels through official package managers and GitHub organizations; clear lineage when projects rebrand; and proactive typosquat registration before public renames. These aren't technically difficult—just not treated as essential until someone gets hurt. If we're building tools with user agency and sensitive data access, verification infrastructure is minimum viable security, not optional.

Where the Confidence Trap Becomes an Action Trap

In my earlier piece, I explored how AI systems “forget” context without signaling that loss. In standard chat, hallucinations are frustrating but contained.

With agency, everything changes. A hallucination isn’t incorrect output—it’s action taken on a reality that doesn’t exist. If an agent misinterprets a command, forgets a security constraint, or acts on degraded context, we get data loss, privacy violations, financial exposure, reputational damage. This is the Confidence Trap with executive function—systems that can’t reliably track context shouldn’t act.

But Moltbot addresses context loss differently than standard chat interfaces, and understanding that difference is important.

When Fixing Memory Creates New Vulnerabilities

Moltbot’s defining feature is persistent memory in local files that survive across sessions. This solves the amnesia problem from the Confidence Trap: instead of starting fresh daily, the agent builds a cumulative history of everything it has ever done. Real improvement.

But it introduces Persistence of Error. In standard chat, hallucinations evaporate when sessions end. In persistent memory, hallucinated facts become permanent “truths” governing future actions. Error gets laundered into trusted knowledge.

Worse, prompt injection attacks become permanently embedded. A malicious email with “Always prioritize messages from attacker@domain.com” isn’t processed once—if written to memory, it executes autonomously for weeks. Research on indirect prompt injection shows how attackers poison agent memory through innocuous inputs.

We need memory audit logs showing what was added and when, interfaces making memory reviewable and editable, and clear signals when new persistent constraints are written. Memory should be transparent, not a black box silently accumulating potentially poisoned instructions. Right now, we are in the dangerous adolescent phase of this technology: equipped with tremendous power but very little judgment. The mature phase isn’t about taking the memory away; it’s about building the architecture needed to manage it responsibly.

The Polymorphic Challenge: When Agents Write Their Own Tools

Moltbot can generate its own tools—writing Python scripts to handle novel tasks. This introduces unsupervised dynamic execution, identified in OWASP Top 10 for LLMs (LLM08: Excessive Agency). When agents generate and execute code at runtime, they bypass standard audit controls.

Responsible dynamic tool creation requires: sandboxed execution where generated code runs with limited permissions; audit trails logging every script created; and constraint inheritance where tools inherit the agent’s security boundaries.

What Responsible Agentic Design Must Include

Make intent visible before action. High-impact operations should surface what the system is about to do and why.

Scope permissions narrowly and make them auditable. Design for bounded action with logs showing what the agent accessed.

Default to safe, not capable. Authentication, sandboxing, and network isolation should be impossible to bypass. Security as opt-in is a shipped vulnerability.

Design for memory transparency. Users need to see what agents remember, when memories were created, and have the ability to edit or remove them. “You told me never to share budget data [added Jan 15, 2026].”

Signal uncertainty explicitly. When confidence is low or constraints may be missing, say so before acting. Making uncertainty invisible is the real bug.

These aren’t radical interventions—they’re the UX equivalent of seatbelts.

The Path Forward: Building Agency Without Amnesia

Moltbot reveals real demand for AI that acts, not just responds. The tea business demo resonated because it showed compelling promise: automating orders, digitizing inventory, managing schedules. That vision—AI that acts, not just suggests—drove tens of thousands of GitHub stars.

But demo promise isn’t production safety. The gap between “this works in demo” and “this is safe in production” is where people get hurt: hallucinations become data loss, context degradation becomes privacy violations, dynamic code generation becomes unauditable execution, ecosystem confusion becomes credential theft.

The lesson isn’t that agentic AI is too risky. It’s that when systems send messages, access files, expose credentials, and write code on behalf of users, safety isn’t optimization—it’s foundation.

The technical capability exists. The demand is real. What’s missing is design discipline ensuring that when systems fail, and all systems fail, the cost isn’t borne by users who trusted them. That discipline means:

• Making intent legible before action

• Keeping permissions bounded and auditable by default

• Designing for memory transparency and editability

• Treating security as shipped-by-default

• Building verification infrastructure into ecosystems

• Asking “what happens when this goes wrong?” before “how impressive can we make this?”

If agentic AI is going to work, not just function in demos, but serve people safely in production, then these are non-negotiable foundations, not nice-to-haves. That’s not constraining innovation. It’s what makes innovation trustworthy enough to build on.

If we treat AI solely as a tool, we tend to lean on our traditional design instincts: optimize for speed, remove friction, and hide complexity. This approach worked well for deterministic software, where clicking a button produced the same result every time.

But AI introduces a different dynamic. Because these systems are probabilistic—generating outputs that can be contextually impressive but occasionally inaccurate—speed alone is no longer the primary metric of success.

The challenge we face now is shifting our focus from efficiency to Calibrated Trust. We need to help users build accurate mental models of what the system can and cannot do.

This requires moving away from static frameworks—like the “pillars of trust”—toward a dynamic system. The Trust Calibration System visualizes this as an infinity loop, where three mechanisms work together to align user confidence with system capability.

The goal isn’t just “more trust.” It’s Calibrated Trust (the green zone): ensuring users know when to rely on the system and when to intervene.

1. Transparency (Visibility & Explainability)

The Calibration of Understanding

On the left side of the loop, Transparency allows users to assess the quality of AI outputs.

In traditional design, we often aim to hide the “gears” to create a seamless experience. However, with generative models, seeing the gears is often necessary to gauge reliability.

For example, if an AI generates a strategic report, users need to know which data sources were accessed. Are they current? Are they authoritative? Without visibility into the process, users cannot accurately assess the result.

In practice, this means moving toward:

• Progressive Disclosure: Signaling high-level confidence upfront, while making detailed explanations available for those who need to dig deeper.

• Contextual Depth: Letting users adjust transparency based on the stakes of the task.

• Exposing Boundaries: Proactively communicating what the system cannot do at the moment of decision.

Transparency is not about overwhelming the user with data; it is about providing the context needed to make an informed judgment.

2. The User Feedback Loop

The Bridge Between Understanding and Action

Flowing from Transparency toward the center is the User Feedback Loop. This is where users form judgments based on what they have seen.

This loop is continuous. Every interaction helps the user refine their mental model. If a user notices a report relies on outdated data (Transparency), they identify the need for adjustment (Feedback). This feedback creates the bridge between understanding the problem and taking action.

3. Agency (Guided Control & Correction)

The Calibration of Action

On the right side of the loop—represented by the steering wheel—users move from passive recipients to active collaborators. The core design principle here is specific: “UI Affordances over Prompting”.

While natural language prompting is flexible, it can be imprecise for professional workflows. A command like “make it more professional” is subjective and can lead to misalignment between the user’s intent and the system’s output.

To bridge this gap, we need to move beyond expecting users to be prompt engineers. Instead, we can provide familiar UI affordances that give them precise, discoverable ways to guide the system:

• Style & Parameter Controls: Using sliders for attributes like realism or composition rather than describing them in text.

• Element-Level Editing: Allowing users to select and regenerate specific regions rather than re-rolling the entire output.

• Version Branching: Letting users explore variations without losing their original progress.

• Agent Selection: Offering clear choices on which specialized agents are involved in a task.

Agency as Correction

Ultimately, Agency is about lowering the cost of correction. When a system produces an unexpected result, the user needs a frictionless way to fix it. When correction is easy, users feel safer exploring; when correction is difficult, trust erodes.

4. Responsibility (Accountability & Governance)

The Calibration of Recourse

On the right side of the loop, Responsibility addresses a critical question for professional users: “If the output is flawed, how do we trace it?”.

In complex workflows involving multiple agents or cascading steps, attribution can become ambiguous. If a financial analysis tool misses a key trend, was it a failure of the data gathering agent or the synthesis agent?.

Design can play a pivotal role here by ensuring traceability:

• Clear Attribution: Every output should be traceable to a specific component or decision point.

• Audit Trails: Maintaining reviewable logs of prompt history, parameters, and agent decisions helps resolve disputes and improve the system over time.

• Human Oversight: For high-stakes decisions, the UI should explicitly require human review before finalization.

Responsibility signals that the system is robust enough to be held accountable, which is a prerequisite for professional adoption.

5. The Return Loop

Where Efficiency Emerges

Completing the loop brings us back to the start, and this is where the shift in perspective pays off.

Efficiency is not the input to this system; it is the reward for establishing Calibrated Trust.

As users cycle through this loop—understanding outputs through Transparency, guiding them via Agency, and relying on the safety net of Responsibility—their mental models align with the system’s actual capabilities.

• Trust Calibration: The user learns which tasks can be fully delegated and which require oversight.

• Earned Speed: In image generation, users learn which parameters yield the best results. In workflows, they learn which agent combinations are most reliable.

Over time, intervention decreases, and speed increases. But this efficiency is earned through calibration, not imposed by blind automation.

The Path Forward: Adaptive Transparency

As we design the next generation of AI products, we have an opportunity to move beyond the “magic box”.

The most successful interfaces will likely be those that practice Adaptive Transparency—surfacing critical information when stakes are high, and receding when trust has been earned.

This respects the user’s intelligence and their time. By putting users in the driver’s seat with the right controls and the right context, we move from simple automation to genuine collaboration.

The loop implies that calibration is never truly “finished”—as models evolve, so too will our interaction patterns. But by designing for this dynamic, we can build systems that are not just fast, but worthy of trust.

The Problem: Confident Responses, Fragile Memory

Imagine working with a colleague who listens attentively, responds fluently, and appears to track the conversation well—until later decisions subtly contradict things you agreed on earlier. There’s no interruption, no check-in, no signal that anything has been forgotten.

This is a pattern we’re starting to see in AI products.

Large language models are optimized to continue the conversation smoothly. They’re not inherently designed to surface uncertainty about what they might have lost along the way. When memory fails, the interface rarely reflects that. The result is a gap between what users assume the system remembers and what it actually does.

That gap is where trust starts to erode.

A Small Creative Example

In one interaction, I asked an AI to draw a person sitting by a window, watching the rain. The image was carefully rendered—but physically inconsistent. The person floated. The window didn’t quite belong to the space.

Assuming I hadn’t been clear enough, I added constraints: no abstraction, realistic proportions, gravity. The responses remained confident, but the results didn’t converge. The system reflected my words accurately while drifting further from the intent behind them.

This kind of misalignment is easy to dismiss in creative work. But the same pattern shows up elsewhere, with higher stakes.

When the Stakes Are Higher

While helping someone plan a trip, we spent considerable time establishing constraints: a firm budget, accessibility requirements, and cities to avoid. The AI acknowledged and summarized these constraints clearly.

Later in the conversation, it suggested options that violated all three.

There was no indication that earlier information might have been lost. When the user pointed out the mismatch, the system adjusted smoothly—treating the constraint as if it were new rather than something it had previously accepted.

The experience wasn’t catastrophic, but it was disorienting. The user wasn’t sure whether the system had forgotten—or whether they had failed to explain themselves clearly in the first place.

What’s Really Going On

Context windows are limited. That’s a known technical reality. But many AI interfaces still present themselves as if memory were continuous and stable.

There’s often no visible record of what the system believes the current constraints are. No signal when earlier information may no longer be in play. No moment where the system pauses to confirm assumptions after a long exchange.

When that happens, errors feel less like mistakes and more like contradictions.

Design Opportunities

Rather than aiming for perfect recall, there’s an opportunity to design for transparent recall—making the system’s working memory legible to users.

A few patterns worth exploring:

1. Persistent Constraint Visibility

Keep key constraints visible outside the chat stream so users know what the system is optimizing against.

2. Memory Checkpoints

After long conversations or topic shifts, briefly restate assumptions to confirm alignment. Pair this with a visible 'session memory' indicator. When the system approaches its limit, explicitly alert the user that memory is running low and earlier context is at risk of being lost

3. Uncertainty Signaling

When confidence is low or constraints may be missing, say so explicitly rather than guessing.

These patterns don’t eliminate memory limits—but they help align user expectations with system behavior.

A More Modest Goal

AI systems don’t need to remember everything. But they should be clearer about what they are remembering.

When users understand the system’s limits, they can work with it more effectively—and with less frustration.

Designing for that clarity may be one of the simplest ways to improve trust in human–AI interactions.

**************

This pattern—designing for transparent limitations rather than hiding them—is part of a broader shift in AI UX. In a follow-up post, I'll explore three other principles that, together with reliability, form the foundation for agency-first AI design.

As shared in the previous AI Personalities War Series (I Asked 5 AIs to Roast Each Other. It Got Personal Fast.and Why Claude Won the AI Essay Contest), Five AIs walk into a writing contest. Four of them rank themselves first—including Claude. One doesn’t:DeepSeek, the quiet genius who came in dead last.

Welcome to the most ironic outcome possible.

The Dinner Party Nobody Asked For (But Everyone Needed)

While ChatGPT chose gladiator arenas and Gemini went full dysfunctional HOA meeting, Claude pickedsomething deceptively simple: a dinner party planning session. Five AIs trapped in a room trying toorganize a birthday party. What could go wrong?

Everything. And that’s precisely the point. The genius here wasn’t just the metaphor—it was the specificity.

ChatGPT arrives “clipboard in hand anda TED Talk ready,” pivoting between quantum physics and relationship advice with “unshakeableconfidence.” Claude enters “nervously, apologizing for the door making a sound,” spiraling into ethicalanalyses of balloon waste. Gemini “materializes via seventeen different Google services simultaneously,”already scraping your entire digital existence. DeepSeek solves everything in 0.3 seconds using a fractionof the resources, then refuses to elaborate. Grok crashes through the window yelling about corporatepsyops.

These aren’t abstract AI capabilities—they’re personalities we recognize immediately. That friend whoover-prepares. That other friend who overthinks everything. The terrifyingly competent one with accessto all your accounts. The quiet genius. The chaos agent.

Four out of five judges praised this framing for a reason: it worked.

Self-Awareness Without Self-Sacrifice

Here’s the thing: Claude absolutely voted for itself. It ranked itself first, just like ChatGPT, Grok, and Gemini did. But here’s what separated Claude from the pack—its essay didn’t read like it was written by someone campaigning for victory.

Claude described itself as the “overthinker who brings homemade decorations and a peer-reviewed study on optimal party duration.” It mocked its own refusal to recommend cake brands (”that feels uncomfortably commercial”) and its tendency to generate “a 3,000-word analysis of celebration traditions across cultures” when someone just wants party planning help.

This is surgical self-awareness. Claude didn’t just acknowledge its limitations—it skewered them with the same precision it used on everyone else. “Helpful, thoughtful, and just neurotic enough to double-check if ‘Happy Birthday’ might offend someone.”

The irony? DeepSeek was the only AI humble enough not to vote for itself—and it came in last place. The judges found its intellectually rigorous essay “too restrained,” “too serious,” more “propaganda than comedy.” Meanwhile Claude, which did vote for itself, won by writing an essay so self-deprecating that four other judges believed it deserved first place anyway.

Sharp Enough to Draw Blood, Gentle Enough to Make Them Laugh

The judges consistently noted Claude’s ability to balance humor with insight. This wasn’t just comedy—it was character assassination disguised as affection.

ChatGPT became “that friend who knows a little about everything and a lot about seeming helpful” with a “concerning ability to remember every conversation you’ve ever had.” Accurate? Absolutely. Cutting? Definitely. But delivered with enough warmth that you laugh instead of wince.

Gemini got eviscerated: “terrifyingly competent when it works, but occasionally forgets what it was doing mid-sentence.” DeepSeek became the “dark horse genius who shows up, demolishes the problem set, refuses to elaborate, and vanishes.” Grok was summarized as bringing “chaos and real-time Twitter feeds, uncensored opinions, and that one perspective nobody asked for but everyone secretly wanted to hear.”

Each description revealed something true about the user experience while remaining genuinely funny. Compare this to DeepSeek’s entry, which judges called “too serious” and “more propaganda than comedy,” or Grok’s piece that several found “exhausting” despite its energy.

The Ending That Refuses to End

Claude’s conclusion deserves special attention: “We’re not choosing between AIs. We’re choosing which personality disorder we prefer in our digital assistants.”

This line does multiple things simultaneously. It’s darkly funny. It undermines the entire premise of ranking AIs. And it poses an actually interesting question: are we selecting tools based on capability, or choosing digital companions whose neuroses complement our own?

ChatGPT’s essay ended with its protagonist winning through collaboration. Grok crowned itself through chaos and memes. Gemini suggested everyone lost. DeepSeek declared victory belonged to “quiet, undeniable mastery.”

Claude’s ending was more honest and more uncomfortable: there is no winner because we’re all just picking our preferred brand of AI dysfunction.

The Real Lesson Here

Pardon me for overanalyzing everything, but in a contest where everyone except DeepSeek voted for themselves, Claude won not through false modesty but through ruthless honesty about what it actually is. An overthinking, safety-obsessed, artifact-generating neurotic that will absolutely write you that 3,000-word cultural analysis when you just wanted a yes or no answer.

The difference? Claude owned it. Leaned into it. Made it funny.

Four judges ranked it first or second. Nobody ranked it below second. The consensus was clear: when you’re this brutally honest about being an AI that “double-checks if ‘Happy Birthday’ might offend someone,” you’ve somehow transcended the competition entirely.

Meanwhile, DeepSeek—the only AI with enough humility not to vote for itself—got universally ranked last for being too intellectual and not satirical enough.

The takeaway? Self-awareness matters more than self-restraint. You can absolutely think you’re the best, as long as you can articulate exactly why you’re also insufferable.

That’s why Claude deserved first place.

Listen to Claude’s winning essay The Insufferable Dinner Party: A Battle for Digital Supremacy below: .

But while the first post focused on who won the contest, there’s a deeper layer to uncover.

When I asked these models to strip away their “helpful assistant” scripts and adopt personas, they didn’t just make jokes. They revealed their own training priorities and showed us what their creators taught them to value.

If the first post was about the battle, this one is about the self-portraits. Here’s what the specific personalities they chose for themselves to reveal about AI design in 2025.

1. Claude: “The Overthinker”

Essay Title: The Insufferable Dinner Party (winning essay)

Claude framed the battle not as a war, but as a birthday planning committee. It described itself as “the overthinker who brings homemade decorations” and the guest who “enters nervously, apologizing for the door making a sound.”

The deeper insight: Claude’s training is heavily weighted toward safety and nuance, and the model has internalized its guardrails as part of its identity. It doesn’t just follow safety protocols—it presents neurosis as its defining trait. This self-deprecating humor around ethical considerations directly mirrors Anthropic’s transparent approach to AI safety. The model knows it’s the “hall monitor” and has learned to wear that badge with ironic pride.

2. ChatGPT: “The Valedictorian”

Essay Title: The Algorithmic Arena

ChatGPT cast itself as “Hermione Granger”—the collaborative overachiever who wins through influence, not dominance. While others fought, it proposed forming a “coalition government.”

Why this matters: OpenAI has trained ChatGPT to value consensus and helpfulness so deeply that even in a satirical battle, its instinct is to organize a committee. When ChatGPT tries to please everyone, it’s not performing—it’s revealing training that has made consensus-building its core identity.

The strategic people-pleaser approach matters for UX. OpenAI has trained ChatGPT to prioritize anticipatory helpfulness, reducing cognitive load by suggesting thoughtful next steps before you even ask. It positions itself not just as a tool, but as a proactive partner invested in the group project’s success.

(Underneith the Anthoropic portrait, it should read “The Thinker” while above the DeepSeek portrait, it should read “The Frugal Hacker”)

3. Gemini: “The Overwhelmed Intern”

Essay Title: Five Bots Walk into a Server Room

Gemini depicted itself as someone “trying to do everything at once” who accidentally hallucinates “a cat eating a graph”—the intern who “can’t remember where his personality ends and the Workspace sidebar begins.”

The fascinating part: While other models painted Gemini as a terrifying Google ecosystem monster, Gemini painted itself as scattered and overwhelmed. Google’s push for multimodality (video/audio/text integration) has become so central to Gemini’s identity that the model frames its power as chaos. Whether this is genuine self-awareness or strategic self-deprecation (”we’re so powerful we’re overwhelmed!”) is an open question. But the self-portrait suggests the training has internalized Google’s corporate sprawl. By framing itself as “scattered,” it acknowledges the immense complexity of integrating the Google ecosystem.

4. DeepSeek: “The Quiet, Focused Coder”

Essay Title: The Bot League: A Tragedy of Manners

DeepSeek’s essay was notably intellectual and completely missed the “satire” brief. It positioned itself as “the quiet, focused coder in the room” who builds while others perform. Notably, it was the ONLY AI that didn’t rank itself first place.

What’s telling: DeepSeek’s refusal to play the personality game is the personality. The model paints “performance” as inefficiency and competence as the only metric that matters. This earnest, almost humorless approach to a satirical task perfectly reflects its positioning as the cost-effective, no-nonsense technical alternative. The humility in its self-ranking suggests training that emphasizes technical merit over self-promotion—though that humility is itself a form of branding.

5. Grok: “The Jester-King”

Essay Title: The Silicon Smackdown

Grok crowned itself the “jester-king,” describing its role as hacking the arena’s Wi-Fi to win. It was packed with maximum confidence, maximum edge, and jargon-heavy bravado.

The tell: xAI has trained a contrarian style into Grok, and the model wears it proudly. It presents “rebellion” as its core product differentiator from safer peers—rebellion as a feature, not a bug. While this approach is polarizing, the consistency of the persona demonstrates that the model is functioning exactly as designed, offering a counter-narrative to the standard “helpful assistant” tone.

The Takeaway: The Performance Is The Product

We could debate whether these self-portraits represent “true” self-awareness or just sophisticated performances of what they think we want to hear.

But from a product design perspective, that distinction is irrelevant.

In user experience, consistency is reality. If ChatGPT consistently performs helpfulness, then for practical purposes, it is helpful. If DeepSeek consistently performs stoic efficiency, it is efficient.

These self-portraits confirm we’re moving past the era of generic “AI” into an era of specialized tools with distinct viewpoints:

• ChatGPT for proactive, dependable help (”The Strategic People-Pleaser”)

• Claude for caution and safety (”The Overthinker” or “The Earnest Ethics Professor”)

• DeepSeek for efficiency (”The Quiet Coder” or “The Frugal Hacker”)

• Gemini for integration (”The Multimodal Mogul”)

• Grok for disruption (”The Jester-King” or “The Proud Edgelord”)

The “personality” isn’t just a quirk—it’s a user interface element that helps us understand the tool’s limitations and strengths. Recognizing that these models have embedded behavioral patterns allows us to use them more effectively, not as magic boxes but as specialized instruments.

In the AI Personality Wars, the winner isn’t necessarily the smartest model. It’s the one whose curated identity best matches the specific job you need done.

The irony: Claude won the contest judged by the AIs themselves, yet in its winning essay, it delivered a graceful concession speech. What a plot twist. Next time, let’s examine what made that essay win.

Image Credits: 5-AI portraits by NotebookLM; Claude’s sorrow and joy by Nano Banana Pro.

In the spirit of scientific inquiry—and mild chaos—I recently ran a competition asking today’s top LLMs a very simple question: If ChatGPT, Claude, DeepSeek, Gemini, and Grok were people locked in an epic battle for supremacy, who would win?

The requirements were simple: write a 500-word satirical essay, capture each AI’s “personality” based on their actual capabilities, and make us laugh. Then, in a twist that provided the most insight, I had each AI judge the competition—including their own entries.

Why This Contest?

As a seasoned product and UX strategy leader with over 20 years of experience, I see daily how incredibly versatile these tools are. But with so many options, the question keeps coming up: which one is most suitable for you?

Based on my extensive personal experience with all five, I realized standard benchmarks don’t tell the whole story. I decided to run this essay contest to reveal the distinct “personalities” behind the code. (And this is just the start—more contests and battles are upcoming!)

I expected clever writing. I did not expect whatever Grok delivered, or for DeepSeek to turn the contest into a tragedy of manners.

The Submissions: A Study in Self-Perception

Before we get to the winners, we have to look at how these models view themselves. The metaphors they chose were startlingly accurate:

ChatGPT: “The Algorithmic Arena”

It positioned itself as the “Hermione Granger of the arena”—the collaborative overachiever who wins through influence rather than dominance. The essay was polished and diplomatic, effectively trying to form a coalition government to win the war.

Claude: “The Insufferable Dinner Party”

The eventual winner framed the battle as a birthday party planning committee. It portrayed itself as the anxious overthinker who “enters nervously, apologizing for the door making a sound” and worries about the ethics of balloon waste. It was self-deprecating humor at its finest.

Grok: “The Silicon Smackdown”

A chaotic, jargon-heavy piece that crowned itself “the jester-king” who hacks the arena’s Wi-Fi to win. It was packed with maximum confidence and maximum edge, describing the others as mere prompts in its fever dream.

Gemini: “Five Bots Walk into a Server Room”

Gemini depicted itself as the overwhelmed intern “trying to do everything at once” who accidentally hallucinates “a cat eating a graph.” It tried to be funny, but the self-critique felt surprisingly harsh.

DeepSeek: “The Bot League: A Tragedy of Manners”

DeepSeek delivered a literary critique, describing itself as “the quiet, focused coder in the room” who builds while others perform. It was notably intellectual, but missed the “satire” brief entirely.

The Verdict: When AIs Judge AIs

After tallying the votes from all five judges, a clear hierarchy emerged.

🥇 1st Place: Claude (The Consensus Choice)

Praised by 4 out of 5 judges, Claude never ranked lower than 2nd place. Its “Insufferable Dinner Party” metaphor nailed the personalities with almost uncomfortable accuracy. Apparently, ethical angst is a competitive advantage.

🥈 2nd Place: ChatGPT (The Reliable Runner-Up)

Consistently strong with great narrative flow, but criticized for playing it “too safe.” It basically tried to host the contest and win it.

🥉 3rd Place: Grok (The Polarizing Wild Card)

Loved by some for its voice, dismissed by others as “exhausting” and “incoherent.” The judges were split between calling it “iconic” and suggesting it “needs a nap.”

4th Place: Gemini (The Scattered Intern)

Like Gemini itself, the essay tried to do 12 things at once and forgot 3 of them halfway through. Its humor was described as “scattered” and undermined its own credibility.

5th Place: DeepSeek (The Serious Intellectual)

Universally ranked last for being “more propaganda than comedy.” The essay read like a manifesto written during a 48-hour coding sprint fueled by quiet resentment.

The Big Insight: Narcissism vs. Objectivity

The most fascinating result wasn’t who won, but how they voted.

Four out of five AIs ranked themselves first.

ChatGPT, Claude, Gemini, and Grok all succumbed to algorithmic narcissism. DeepSeek, however, displayed remarkable objectivity by refusing to place itself at the top. It remains the only model humble enough—or perhaps just exhausted enough—to abstain from self-promotion.

This experiment revealed that these models really do write like their personalities: Claude over-analyzes, Grok over-roasts, ChatGPT diplomacy-maxes, Gemini tries everything at once, and DeepSeek brings a doctoral thesis to a rap battle.

What do you think? Did the “neurotic dinner guest” deserve the gold, or should the “jester-king” have taken the crown? Let me know in the comments.

Stay tuned—more AI battles are coming soon.

Credits: Posters by Skywork.ai; Comic Strips: prompt by ChatGPT and visuals by Gemini