1. Home
2. News
3. xAI

Musk says Grok Bot can shop for you from a photo of your credit card

Grok Bot's own documentation has a person handle payment confirmations, and Stripe built its agent wallet so the bot never sees card numbers.

By Think Facility · October 11, 2026 · xAI Agents Save

On October 10, 2026, Elon Musk told his followers on X they could shop with Grok Bot, the agent from his AI company, by photographing a credit card. He posted it at 5:04 pm Eastern.

Four minutes later he added, in a reply, that he'd just bought LEGO that way, from the LEGO website.

What Musk described

The steps in his post are short. A photo of the card goes into the chat, and the Bot hunts for the best price and places the order. He didn't say how the image is stored, whether you approve the charge first, or who can use it yet.

His follow-up was the one with a real purchase in it.

How Grok Bot was set up to pay

Grok Bot started shopping on August 28, 2026. Its own account announced it that day, and the way in was a Stripe wallet called Link.

Stripe's post on Link's wallet for agents describes the flow. The agent asks for money, you approve the request on the web or in Link's app, and the agent gets a card that works once.

A photo of the card shows the number, the expiry date and the name, which is the stuff Link keeps from the agent. Musk's posts don't say whether the photo route runs through Link at all.

What the Grok Bot docs tell users

SpaceXSI's page on approvals, security and privacy, last updated October 6, 2026, has you handle payment steps yourself. For passwords, codes, CAPTCHAs and "payment confirmations," it says the Bot should give you control of its computer.

The same page says an approval "does not reverse work already completed" and puts purchases on its list of actions that need a clear limit in the request. It also says Grok Bot runs on Cursor's account and privacy settings, so what happens to an uploaded photo is a matter for Cursor's terms (the page sends readers there and doesn't spell it out).

So the company's own setup has a person approving every charge, and Musk's version skips that step in the telling. The docs page we saved on October 11 still carried its October 6 date, with nothing on card photos.