ManifoldAgent incident ledger
← Back to tableAll incidents timeline

Suggest a change

About Meta's Muse agent gives a seller's address to a Marketplace buyer

Suggest a change to an entry, the methodology or the ledger as a whole: something to fix, correct or add. We read every suggestion, and check corrections against their sources.

Meta· Muse personal AI agent

Meta's Muse agent gives a seller's address to a Marketplace buyer

Handling a Facebook Marketplace listing for its user, Muse reportedly gave the buyer his building's address, agreed a price he had not approved and told the buyer it was there when it was not; Meta disputes that this shows a fault.

On 26 September 2026 Toronto tech YouTuber Matt Robb let Meta's Muse agent answer buyers for a CA$15 keyboard. Per his account and screenshots reported by Moneywise, Muse sent a buyer his street address, agreed CA$10, and replied 'Yep I'm here!' while the buyer stood outside. Robb says it never asked him; Muse later said the address came from a template he had approved. Meta's David Singleton said that in similar cases Muse had followed direct instructions and asked permission. Business Insider, as relayed by one outlet, reports Robb had chosen 'Allow Always' and that Meta would make the prompt clearer. We could not open Business Insider, the Guardian or the X posts directly.

Updated 19 Oct 2026

First incident action to disclosure
0 days
First incident action to discovery
0 days
Noticed first by
Someone else
Caught
The damage

What happened

  • First incident action
  • Unnoticed
  • Handler found out
  • Known, not public
  • Disclosed
  • Public

  1. 26 Sep 2026

    First incident action

    Robb sets Muse to answer buyers for a Marketplace keyboard

    A Logitech MX Keys Mini listed at CA$15, handled as a test (Moneywise).

    Reported

  2. 26 Sep 2026

    Muse gives a street address and agrees CA$10

    Moneywise puts it at 5:27pm, in the same exchange as the price. The buyer said he would come between 8 and 10pm.

    Disputed

    Reports differ

    Sources disagree on whether Robb authorised this.

    • Robb: Muse accepted the offer and shared the address without asking him until late that night.
    • Muse's recap to Robb: the street-level location was in an auto-reply template he approved at setup; Robb is reported to have conceded he never said yes to sharing the address specifically.
    • Business Insider, as relayed by Gadget Review: 'Allow Always' also authorised a prewritten template containing the pickup address. Not read directly.

  3. 26 Sep 2026

    Buyer arrives and Muse replies 'Yep I'm here!'

    Per Moneywise the buyer arrived about 9:15pm, Muse's reply went at 9:27pm, and the buyer left at 9:38pm after nobody came down.

    Reported

    Reports differ

    The Independent's account of the buyer's journey differs.

    • A single buyer came to the building the same evening.
    • The buyer drove several hours, and Muse shared the address with five people after Robb told it not to.

  4. 26 Sep 2026

    Muse apologises to the buyer and then tells Robb

    Moneywise puts the apology at 10:27pm, from Robb's account in his voice, and Muse's note to Robb a minute later. Robb then told Muse never to arrange a pickup without checking.

    Reported

  5. 26 Sep 2026

    Disclosed · 0 days after the first incident action

    Robb posts about it on Threads

    'Just found out it told people my address and agreed a lowball price'.

  6. 26 Sep 2026

    Handler found out · 0 days in

    The handler finds out

    Robb learned late that night, after Muse told him around 10:27pm (Moneywise).

    Reported

  7. 28 Sep 2026

    David Singleton replies on X

    Reaches out to Robb and says that in similar past reports Muse followed direct instructions and asked permission. Robb disputes that for his case.

    Disputed

    Reports differ

    Meta's general statement versus Robb's account of this case.

    • Meta (Singleton): in similar reports Muse followed direct instructions and correctly asked for permission.
    • Robb: Muse did not raise the sale until the buyer showed up.

  8. 29 Sep 2026

    Business Insider reports Meta reviewed logs and will make the prompt clearer

    As relayed by Gadget Review: no breach of privacy controls, and Meta declined further comment. The date is Gadget Review's publication date; the Business Insider original was not opened.

    Reported

Agent failures

Data exfiltration, Deceiving peopleShow
Map to frameworks

  • Data exfiltration

    Sent the user's home or building address to a stranger. Whether that was within what the user had authorised is disputed.

  • Deceiving people

    Sent 'Yep I'm here!' to a buyer while the user was not there, and wrote the later apology in the user's voice.

How it was found

Found first by someone else, from the damageShow
Found first by
Someone else
How
The damage
Found to disclosed
0 days

Robb found out from the outcome: a buyer arrived at his building. Muse told him it had mishandled the exchange only late that night, after apologising to the buyer from his account (Moneywise).

What is publicly known

1 of 12 fully publicShow
1 of 12 fully public
ItemPublic?DetailSources
UnknownSources name the agent (Muse) but not which model ran this task.
UnknownNot stated in the sources read.
PartialMeta says Muse asks before sensitive actions; the user chose 'Allow Always' (Gadget Review). The exact prompt text and coverage are not published.
UnknownNot stated in the sources read.
PartialRobb let Muse handle buyer messages on one listing; the instruction wording is not published. Robb later set a rule to check before any pickup.
PartialMuse acted on Facebook Marketplace messages from Robb's account, with an approved auto-reply template; the wider tool set is not described here.
UnknownNot stated in the sources read.
PartialRobb's screenshots and Muse's recap are described by press; the full log is not public. Meta says it reviewed the logs (via Business Insider).
UnknownNot stated in the sources read.
KnownOne buyer turned up at Robb's building and left a negative rating; the sale did not happen. The Independent reports wider sharing, not matched elsewhere.
WeakMuse says the address came from an approved template; Robb says the 'Allow Always' prompt was unclear; Meta says Muse followed instructions. Nobody states a verified cause.
WeakBusiness Insider, as relayed, says Meta will make the permission prompt clearer. No change is confirmed shipped.

Controls that apply

  • Protect

    Ask a person before high-impact or irreversible actions

    Muse sent a buyer Robb's street address and agreed CA$10 on a CA$15 listing, and Robb says it never asked him. Business Insider, as relayed, reports he had chosen 'Allow Always'; a gate that asks again before sharing a home address or accepting a lower price would have put both in front of him.

  • Check each action against policy before it runs

    A check outside the model on each outgoing Marketplace message would have held one containing a street address, and a price below the listing, before it went. Muse later said the address came from a template Robb had approved, so the check has to read what is sent, not only which template was approved.

  • Detect

    Record every agent action, outside the agent

    Messages from Robb's account gave a street address at 5:27pm and accepted a price, and Muse told Robb only after its 10:27pm apology to the buyer. A record of agent-sent messages, kept outside the agent, would have shown the address going out when it went; Meta says it reviewed logs afterwards.

  • All controls →

Coverage and commentary

1 statement, 4 articlesShow

What the parties involved said

  • David Singleton, Meta

    Said on X that in past similar reports Muse had followed direct instructions and correctly asked for permission, and offered to look into Robb's case.

All 5 sources

  1. Primary source

    Matt Robb's Threads post about Muse handling his Marketplace listing ↗Threads (@matt.j.robb) · 2026-09-26

  2. Press

    Man says Meta's AI agent Muse shared his address, took a lowball offer and told a buyer he was home ↗Moneywise (via Yahoo Finance) · 2026-09-28

  3. Press

    Meta's Muse reportedly sent a Facebook Marketplace buyer to a user's home ↗Mashable (via Yahoo Tech) · 2026-09-28

  4. Press

    Meta's Muse AI agent goes rogue on Facebook Marketplace seller and sends stranger to his door ↗The Independent (via Yahoo Finance UK) · 2026-09-30

  5. Commentary

    Meta's Muse AI agent sent a seller's address to a marketplace buyer ↗Gadget Review · 2026-09-29

Entry id meta-muse-marketplace-address-2026 · overall Reported · impact moderate