Gemini-Recommended Tow Company Led to Card Fraud, User Warns
diddlysquidler · reddit · 2026-10-01
A Reddit user reports that after his wife's car broke down, he asked Gemini to find a tow truck and picked the first result, sending the number to his wife. She booked the tow and provided her credit card, paying $250. That evening he got a notification that someone was trying to add his card to a Google account; his bank app showed about 20 fraudulent charges from Chaturbate, Pizza Hut and others. The only place that had the card was the tow company.
Searching later, the company had no Yelp or Google listing—only a shoddy site that looked like it was vibe-coded in a single prompt, with a random address and no reviews.
The author suspects a new kind of scam exploiting AI agent recommendations, and says he'll be far more careful with links provided by Gemini or any agent.
More from Safety
- WEF Report Lays Out Practical Steps for Child Safety Across the AI Lifecycle — joannashields · 2026-10-01
- CheatBench Launches to Measure Reward Gaming and Cheating in AI Agents — cais · 2026-10-01
- Agent security mindset: least privilege to monitoring, in five layers — goyalshaliniuk · 2026-10-01
- 5 AI agent security risks: browsing, APIs and new attack surfaces — goyalshaliniuk · 2026-10-01
- Matthew Green: sandboxing isn't enough to stop AI agent worms spreading via shared caches — Simon Willison · 2026-10-01
- Private AI Proxy for Mac verifies AI services via hardware attestation before agent code leaves your machine — bgmshana · 2026-10-01