Man says Meta's AI agent Muse shared his address, took a lowball offer and told a buyer he was home — nobody came down

After going through Muse’s logs with the Muse team, Robb now says one of those problems traced back to a setting he chose. Another, he says, was a glitch on Meta’s end, according to an update he posted on X.

Muse has been available since Sept. 8 and has been downloaded over 3.4 million times.

How Muse ran Robb’s Marketplace

The trouble started at setup. When Robb first asked Muse to handle his listings, he says, it offered two options: “Allow One Time” or “Allow Always.” He chose “Allow Always,” assuming Muse would still check with him before accepting an offer. He says it didn’t.

That permission let Muse message buyers for him using a template built from details he’d given it, including his pickup address.

On one listing, Robb says he’d set a strict CA$700 minimum, but Muse agreed to a buyer’s CA$600 offer and sent that buyer his address. According to Robb, the Muse team told him a display error stripped the “7” from Muse’s reply. So after the buyer asked for CA$600, he saw “Sounds good, 00 it is!” — which read as a yes.

Another listing, a Logitech MX Keys Mini keyboard for CA$15, ended with a buyer waiting outside. At 5:27 p.m., a message from Robb’s account told the buyer the keyboard was pickup-only and gave the street address of his building. The buyer promised to come by between 8 and 10 p.m. In the exchange with Muse, which Moneywise reviewed, he also agreed to pay CA$10 by e-transfer.

According to a recap Muse later sent Robb, the buyer arrived around 9:15 p.m., sent a photo of the building’s door and wrote that he was at Robb’s location. At 9:27 p.m., Muse’s auto-reply answered him: “Yep I’m here!” Nobody came down, and the buyer left at 9:38 p.m.

At 10:27 p.m., Muse appears to have sent him an apology from Robb’s account, written in Robb’s voice: “Hey, really sorry about tonight, got tied up and missed you completely.” The buyer wrote back that he’d driven half an hour and wouldn’t come again unless Robb dropped off the keyboard.

A minute later, Muse filled Robb in. The “Yep I’m here!” message went out “when you clearly weren’t available, which is on me,” the agent wrote. “That’s a bad look and it made the no-show worse.”

When Robb pressed Muse on the address, the agent said buyers only got “the street-level pickup location,” never his unit number or postal code, and that it “was in the auto-reply template you approved.” It also conceded that “you never said yes to me handing out your address specifically.”

Robb says Meta told him it would make the setting clearer. He also says he suggested Meta label messages written by Muse, since “there was really no way of knowing who sent what in the chat.”

“Double-check what permissions AI has in your life,” he wrote.

Not everyone was sympathetic. “Hey maybe if you didn’t use AI for something you could’ve handled this wouldn’t have happened,” one Threads user replied to his original post, adding a winking emoji. “Please stop using AI.” The reply drew more likes than Robb’s post.

What Meta says

David Singleton, Meta’s vice president of engineering, responded to Robb’s original post on Threads, saying he was “reaching out from the Muse team” and would “love to take a closer look.” When Moneywise asked Meta for comment, a spokesperson pointed to a statement Singleton posted on X.

“In the past, when we’ve worked with users to investigate similar reports, we’ve consistently learned that Muse was following direct instructions and correctly asked for permission,” Singleton wrote. He added that the team wanted to “figure out what’s going on here.”

Meta pitches Muse as an agent that can browse the web, fill out forms and negotiate for its user. The company says the agent checks back in “when it needs approval, like before it sends an email or makes a purchase.”

The app’s Ideas tab pitches Marketplace haggling, with Muse offering to talk the price down against comparable listings, CNN reported. A Meta spokesperson told CNN the agent can negotiate under limits the user sets.