AI Chatbots Are Leaking Users' Phone Numbers to Strangers
Google Gemini and OpenAI's ChatGPT are surfacing real people's personal phone numbers without consent, creating what privacy experts call "AI doxxing." The problem stems from years of harvested personal data colliding with AI systems trained on massive internet datasets.
A Reddit user reported that Google's AI began distributing their phone number as a placeholder for businesses and services. Strangers now call constantly asking for lawyers, product designers, and locksmiths - all citing Google's AI as their source.
"My daily life is being completely disrupted," the user wrote, describing the situation as a "massive privacy violation and data leak."
A spokesperson for privacy firm ClearNym said the issue isn't a defect. "Gemini's problem is the result of unchecked years of data brokerage practices that meet generative AI," they told The Independent.
Criminals Are Weaponizing the Problem
The privacy breach extends beyond accidental exposure. Scammers are deliberately planting fake customer-service numbers online for AI chatbots to regurgitate back to users.
Virgin Media O2 recently reported that criminals are seeding poisoned content across the web. When people search for help through AI assistants, they may end up calling a scammer instead of their trusted provider.
"AI tools are creating new opportunities for fraudsters to create realistic-looking fake numbers that appear through search results or chatbots," said Murray Mackenzie, the company's fraud prevention director.
Researchers at AI security company Aurascape described the tactic as "attackers quietly rewriting the web that AI systems read."
Real Cases of Exposure
MIT Technology Review documented cases where Gemini mistakenly listed personal phone numbers as customer support contacts. The publication reported that Israeli software engineer Daniel Abraham's personal number was listed as support for a payment app.
Researchers at the University of Washington discovered Gemini could expose personal contact information with alarming ease. PhD student Meira Gilbert said she searched for a colleague's name and Gemini surfaced her private cell number.
Her colleague, Yael Eiger, noted that her information existed online before - but buried deep enough that almost nobody would find it. "Having your information be accessible to anyone through Gemini feels completely different," Eiger said.
DeleteMe CEO Rob Shavell told MIT Technology Review that complaints about AI exposing personal data have surged recently. Customers report chatbots revealing accurate home addresses, phone numbers, family members' names, and employer details.
Support Teams Face Blocked Removal Requests
Google said it has safeguards in place to prevent personal information from appearing in AI features and reviews removal requests. Some users report that standard support forms are ineffective.
"I haven't received a single response, and the harassment continues daily," one affected user wrote.
The privacy exposure comes as scammers use AI in other ways. Long Island officials recently warned that fraudsters are using AI voice-cloning tools to impersonate people's grandchildren in calls targeting seniors.
The scammers source audio from TikTok and social media videos, then generate realistic fake voices demanding bail or emergency cash. Elderly victims have lost thousands of dollars to the schemes.
For customer support professionals, the issue underscores a critical gap: AI systems trained on public data can expose what users believe is private. Understanding these risks is essential as more organizations deploy AI for Customer Support and rely on tools like ChatGPT to handle customer inquiries.
Your membership also unlocks:
