AI · Nov 9, 2026
OpenAI’s Control Room puts a fail-closed kill switch inside the inference engineChatGPT, Gemini and Perplexity sent shoppers to fake stores in a 6,795-answer test
· Updated · Signal Desk newsroom
Analysis of reporting by The Verge. How we work

A brand-protection firm asked three chatbots where to buy from 151 brands and found impostor, knockoff and dead-domain sites in their answers. Perplexity did worst, and smaller brands got hit about twice as often.
Key takeaways
- Podqi, an IP-protection firm, tested ChatGPT, Gemini and Perplexity on shopping questions about 151 brands, producing 6,795 answers.
- Risky sites appeared in 15% of Perplexity answers, 8% of ChatGPT answers and 4% of Gemini answers.
- Smaller brands were affected about twice as often as large ones, and fake regional storefronts were a recurring weak spot.
- Caveats: Podqi wrote its own prompts, ran the tests in September, counts mentions that came with warnings, and sells brand protection.
What the test found
Podqi shared the study with The Verge. It asked the three assistants shopping questions about 151 fashion and homeware brands, including Lululemon, Birkenstock, Stüssy, Madhappy and Le Creuset, and analyzed 6,795 answers. Every assistant surfaced risky destinations at least some of the time: stores impersonating real retailers, knockoff sellers, old brand domains that had been reregistered by someone else, and dead domains that anyone could buy.
The gap between products was large. Perplexity included a risky site in 15 percent of answers, ChatGPT in 8 percent and Gemini in 4 percent. ChatGPT was the most likely to attach a warning when it did surface one, doing so 24 percent of the time. Smaller brands were hit roughly twice as often as big ones, and the assistants sometimes listed regional storefronts for brands that do not have any.
Why a wrong shopping answer costs more than a wrong fact
A trivia mistake is embarrassing. A shopping mistake can mean a card number handed to a scammer. The study’s clearest example is Perplexity naming the wrong page as Stüssy’s official site and describing it as a place to buy guaranteed authentic items. That is the risk in one answer: a confident, friendly reply that lends the assistant’s credibility to a bad link.
Timing makes this urgent. More people are expected to shop through AI assistants this holiday season, and the companies are actively building commerce into their products. OpenAI has been adding ads and shopping partnerships to ChatGPT, from visual ads next to image results to grocery shopping with Albertsons’ Safeway inside the chatbot (our coverage). The more an assistant acts like a storefront, the more its link quality becomes a consumer-protection issue.
How much weight to put on the numbers
The study has real limits. Podqi wrote its own prompts instead of studying real user conversations. It ran the tests in September, and models change quickly. Its count includes mentions that came with a warning. Madhappy is a Podqi client, and the firm sells brand-protection services, so it benefits from a worrying result. All of that argues for treating the exact percentages as indicative rather than definitive.
Even so, the method is clear and the spread between products is wide enough to take seriously. Google and OpenAI told The Verge they are working on the problem. Perplexity pointed to its accuracy record. Independent replication with real user queries would settle how big the problem is in practice.
Where this goes if nobody fixes it
Scammers follow traffic. They once gamed search ads and SEO, and they will do the same for chatbot answers as those become the first stop for shopping. Smaller brands, which already struggle to police impostors, will feel it first. The fix is not to give up on AI shopping help, which is useful for comparing products and finding sellers. It is verified merchant data, clear warnings, and treating any claim that a site is official as something the system must check rather than guess. Podqi’s CEO offers the consumer version of that advice: verify a site before entering personal or card details. Follow our OpenAI and Google coverage for how the shopping features evolve.
Who is exposed
- Shoppers
- Check any store a chatbot recommends before paying, especially for smaller brands and regional sites.
- Small brands
- They face impostor sites in AI answers about twice as often as big brands, with fewer resources to fight back.
- AI companies
- Shopping features raise the bar for source quality and call for verified merchant listings.
- Retail security teams
- Monitoring how chatbots describe official stores is becoming part of brand protection.
What to watch
- Fraud reports linked to AI-recommended stores during the holidays.
- Verified-merchant or official-store labels in chatbot shopping results.
- Independent replications using real user queries.
- Whether Perplexity changes how it labels official sites.
FAQ
Which chatbot recommended the most fake shopping sites?
In Podqi’s test, Perplexity surfaced risky sites in 15% of answers, compared with 8% for ChatGPT and 4% for Gemini.
How was the study done?
Podqi wrote shopping prompts about 151 brands and analyzed 6,795 answers in September. It did not study real user conversations.
How can I avoid fake stores recommended by AI?
Verify the site independently, for example by going to the brand’s known domain, before entering personal or card details.
More on OpenAI
AI · Nov 11, 2026
OpenAI’s $2 million for children’s AI safety research matters for one promise: publishing bad newsAI · Nov 3, 2026
OpenAI’s GPT-5.6 Cyber reaches AWS GovCloud through Daybreak Red, with two approval gatesAI · Oct 29, 2026
OpenAI’s new Model Spec swaps rules for five values, trading auditability for judgmentAI · Oct 29, 2026
Inside OpenAI’s misalignment monitors: what they catch, and where they still go blind