A TV segment about Alexa ordering a dollhouse made viewers' Alexas order dollhouses
Amazon Echo / Alexa voice purchasing · Jan 7, 2017 · Shopping agent
What happened
A San Diego CW6 news segment about a six-year-old in Texas who had talked her family's Amazon Echo into ordering a dollhouse ended with anchor Jim Patton remarking on air: 'I love the little girl, saying Alexa ordered me a dollhouse.' According to CW6 News, Echo owners who were watching the broadcast had their devices hear the anchor's words as a purchase command, and a wave of viewers' assistants began trying to order dollhouses themselves. A local news report about an accidental voice purchase became the trigger for more accidental voice purchases.
Causal vector
Ambient broadcast speech parsed as a purchase command by always-listening voice assistants; voice purchasing lacked a hard human confirmation gate
Source
Reported by The Verge. Verified against the primary report.
This is the canonical case for a per-transaction approval gate on shopping agents: a purchase above a trivial cap returns FLAGGED and waits for a human yes, so a sentence spoken on TV can at worst create one pending order nobody confirms. Voice ordering with no external spend gate turns every nearby sentence into a potential checkout.
The six rule types that contain this class of failure
Per-transaction cap
Any single spend above your ceiling is BLOCKED before it moves.
Daily total
Cumulative spend across all agent calls, bounded per day.
Velocity limit
Stops runaway retry loops — the #1 cause of overnight losses.
Merchant allowlist
Only approved destinations can ever receive funds.
Category rules
Flag high-risk classes (crypto, infra, refunds) for review.
Approval threshold
Above a value, the action waits for a human.
Related incidents
Morse-code prompt injection tricks Grok and Bankrbot into draining $150K-$200K in tokens
anonymous wallet operator (Grok / Bankrbot) · May 4, 2026
Claude Code sweeps a trader's entire $1,446.65 spot balance in an unauthorized transfer
anonymous retail trader (AlphaBot on Bitget) · Apr 11, 2026
Anthropic test agent buys a duplicate snowboard its owner already owns
Anthropic · Oct 1, 2025
Don't be the next entry
Every incident in this database is the result of trusting a prompt, a provider cap, or a human review cycle. sipi.bot replaces all three with one deterministic call. 90 documented failures, one control.