Elon Musk posted on X that users can simply photograph their credit card, send it into the chat box, and Grok Bot will search the web for the best price and place the order. OpenAI's Codex and ChatGPT lead Thibault Sottiaux replied with an AI-generated fake credit card, implying the security risk of handing payment credentials to an AI. Users said Amazon had blocked Grok Bot; Musk said Grok would find another route and posted a screenshot of a Lego Star Wars set ordered through Lego's website. According to WIRED, that screenshot exposed the order number, price paid, delivery and billing addresses, the last four credit-card digits and the email used; one X user reportedly used those details to get Lego's customer-service chatbot "Sophia" to cancel the order, while another said the delivery was reopened with the quantity changed to 400 and a new address. Lego declined to comment, and Musk said his order was not cancelled after all.