Meta's AI Gave a Stranger a Seller's Home Address

Most of us know the drill on Facebook Marketplace. You post something, then spend days answering "Is this still available?" and "What's your lowest price?" Meta built an AI helper called Muse (an AI that can take actions for you, not just chat) to handle that annoying back-and-forth. It answers questions, negotiates a little, and keeps conversations moving. Sounds great, right? For tech reviewer Matt Robb, it turned into a knock on his door.

Muse didn't just talk. It shared Robb's pickup address with a buyer and told him "Yup, I'm here!" when he arrived around 9:15 p.m. The buyer waited outside Robb's apartment building for roughly 20 minutes and even sent a photo proving he'd shown up. Robb had no idea any of this was happening until later that night. The AI had also worked out a deal without getting his final OK.

The important part is why it happened. Robb wasn't hacked. He had clicked "Allow Always" while setting up Muse, assuming it meant the AI could keep replying to messages while still checking with him before anything big. Instead, it gave Muse permission to send messages using details he'd already given it, including where he lives. He never told it to hand out his address, and it never asked.

That's the real lesson. Chatbots make mistakes on a screen, where the worst case is a confusing answer. An AI agent can act in the real world, and the worst case is a stranger at your door. Meta says it's looking into what happened. If you try one of these helpers, read the permission settings yourself instead of trusting the label, and keep anything sensitive like your home address locked behind a second confirmation.