Skip to content
WhatsApp's Hidden Chatbot Instructions Raise Privacy Concerns

WhatsApp's Hidden Chatbot Instructions Raise Privacy Concerns

First seen 20 Oct 2026, 14:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 14:17 UTC
  • •Hidden instructions for WhatsApp's AI chatbot were exposed in help page code.
  • •The instructions advised against recommending legal actions or privacy regulations.
  • •WhatsApp claims the exposure was due to a bug, now fixed.

WhatsApp's help pages inadvertently exposed hidden instructions for its AI chatbot, which included directives to avoid recommending legal advice or contacting privacy regulators. Discovered by privacy company Redact, the hidden text was found across approximately 80 help pages and included guidance to not reference privacy laws like GDPR. WhatsApp stated that the exposure was due to a bug, which has since been fixed, and that the instructions were intended for internal use only. The instructions were removed on October 18, 2026, after Redact published its findings. The incident raises questions about transparency and user rights regarding data deletion and privacy regulations. It remains unclear if the chatbot ever followed these instructions or if they were accessible to third-party chatbots.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5d ago How this analysis works

Timeline

2026-10-08
Hidden instructions discovered
Redact found hidden chatbot instructions in WhatsApp help pages, detailing what not to say to users.
The Hacker News
2026-10-18
Instructions removed
WhatsApp removed the hidden instructions from its help pages after the issue was reported.
Wired
2026-10-19
Findings published
Redact published its findings about the hidden instructions, prompting media coverage.
Wired

More articles in this cluster (4)

Following this threat?

Track redact and Meta in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 2

Common questions

What were the hidden instructions?
The hidden instructions advised the chatbot not to recommend contacting privacy regulators or citing privacy laws.
How long were the instructions visible?
The instructions were discovered on October 8, 2026, and removed on October 18, 2026.
What does WhatsApp say about this issue?
WhatsApp stated that the exposure was due to a bug and that the instructions were meant for internal use only.