Elon Musk says sending Grok Bot a screenshot of a credit card is the easiest way to let it shop, and that his team makes about 20 improvements a day
This works well. Screenshot of credit card is the easiest way, unless you want to fill out the secure vault data. Seems a bit silly to hand your credit card to people you don’t know at a restaurant, but not to Grok Bot.
Context
Encouraging people to share card images with an agent is a security choice, and Grok Bot's own documentation describes a more guarded way to handle payments.
This is promotion by Musk, whose company makes Grok Bot, in quote posts of user accounts. Grok Bot's documentation says the bot should hand control back to the user for payment confirmations and that its secure secret requests keep values out of the transcript, and it does not mention card screenshots.
- Teslaconomics on X: Grok Bot ordered the DribbleUp silent ball
- Elon Musk on X: Our team makes around 20 improvements per day to Grok Bot
- Elon Musk on X: Sure, quoting a call for a Grok Bot class
- SpaceXSI Docs: Grok Bot approvals, security, and privacy
- Advance Intelligence: Users say Grok Bot ordered a toy and audits a credit card
Deep dive
On the evening of October 17, Elon Musk quoted a post from Teslaconomics and wrote: This works well. Screenshot of credit card is the easiest way, unless you want to fill out the secure vault data. He added that it seems a bit silly to hand your credit card to people you don't know at a restaurant, but not to Grok Bot.
Teslaconomics had posted that he sent his Grok Bot one text asking it to order the DribbleUp silent ball at the best price, and that it compared prices, checked out with his card and placed the order for $32.91 with free shipping. His screenshots show the bot saying DribbleUp's own site had the best price at $29.99, an order confirmation and a receipt. The receipt also lists a DribbleUp Membership whose charges start when a free trial ends.
Minutes later, Musk quoted Mark Kretschmann's post praising how much Grok Bot has improved and wrote that his team makes around 20 improvements per day to Grok Bot. He also replied Sure to Texas Twins Dad, who wrote that he should probably start a Grok Bot class because many people still don't understand what it can do. That post passed 7 million views.
Grok Bot's documentation says the bot should hand users control for passwords, codes and payment confirmations, warns against sending passwords in ordinary chat, and says its secure secret requests mask values from the transcript and the model.
What to expect next
Watch whether xAI adds a dedicated payment feature, as the secure vault Musk mentioned suggests, and how it protects card data that users send as images.
Also watch for reports of unwanted charges, such as trial memberships added at checkout, as more people let agents shop. Retailers' policies on agent purchases and the pace of the 20 daily improvements Musk described will shape how reliable the shopping feature becomes.