Musk Proposes Credit-Card Photos for Grok Bot Online Shopping

Elon Musk proposed letting users upload credit-card photos to Grok Bot for online shopping, raising questions about how the AI agent would handle payment details and purchase approvals.

Musk wrote on X on Oct. 10, 2026, that users could “take a picture of your credit card, drop it in the chat and Grok @Bot will scour the Internet.” He later claimed that Grok bought LEGO through the LEGO website.

The proposal does not specify whether Grok would require approval before checkout, enforce spending limits or connect the card-photo process to Link, its documented payment system. It is unclear whether the feature is available to ordinary users.

Grok Bot’s existing purchase workflow is more defined. The system displays the transaction amount and asks the user to allow or deny the payment before Link completes it. Users can also approve an action once, approve it automatically in the future or deny it.

Grok Bot’s terms place responsibility on users to configure permissions, approval requirements and spending limits. They also recommend human review before financial transactions. The terms allow the service to retain customer data, files, browser sessions, credentials and routines in a persistent cloud environment.

That creates a distinction between giving an AI agent controlled access to a payment credential and uploading an image of a physical card. A card image can include payment information, while tokenized payment systems use a separate token in place of the underlying card details. The proposal does not explain whether Grok would tokenize the information or apply the safeguards used in its Link workflow.

The next material question is whether the card-photo method becomes an available feature with documented approval and security controls.