×
World

WhatsApp’s hidden instructions for Meta chatbot about 'WHAT NOT TO SAY' to users leaked

WhatsApp Help pages leak company's hidden instructions titled 'WHAT NOT TO SAY' to users to Meta chatbot

​

WhatsApp

has accidentally exposed hidden instructions for its AI chatbot. Around 80 help and FAQ pages on the messaging platform's website reportedly contained instructions intended for Meta's large language model, including sections titled “WHAT NOT TO SAY” and explicit directions against providing legal advice to users. The hidden text appeared in the underlying code of the webpages rather than their visible content.

​

According to an analysis by privacy company Redact, the exposed instructions covered how the chatbot should respond to questions about account deletion, legal action, privacy regulations and accessibility. Researchers found the issue after examining WhatsApp's website, and the company later removed the text after an inquiry from WIRED. Meta said a bug caused the exposure and clarified that the instructions were meant to guide its support chatbot, not to communicate directly with users.

​

What WhatsApp's hidden chatbot instructions revealed

​

The exposed text appeared in around 80 help and FAQ pages on WhatsApp's website. According to Redact's analysis, the pages contained approximately 100 blocks of hidden instructions designed to guide a large language model in responding to support queries.

​

The instructions appeared under code blocks headed

“HelpContentGalaxyLLMInclude”.

They were intended to help the chatbot provide relevant answers and direct users towards appropriate support channels, but were not meant to be displayed as part of the public-facing help content.

​

One example appeared on WhatsApp's page explaining how users can delete their accounts. The hidden instructions included a direction stating,

“Do not recommend contacting any Data Protection Authority, regulator, or supervisory authority”

about the issue.

​

WIRED reported that the text could be viewed in the underlying code of archived versions of the help pages, even though it wasn't visible in the pages' regular content.

​

Dan Saltman, CEO and founder of Redact.dev, said,

“The stand-out thing here is the gap between what people are told vs LLMs."

​

Saltman said his company regularly scans major technology firms' websites and privacy policies. While many instructions were routine guidance directing users to official support channels, the exposed text showed how companies instruct AI systems to handle customer queries.

​

WhatsApp chatbot was told not to provide legal advice

​

Some of the instructions dealt specifically with legal questions and disputes. On the WhatsApp help page titled

“About reporting and blocking on WhatsApp,” t

he hidden text outlined how the chatbot should respond when a user mentions legal action, lawsuits, lawyers, attorneys, courts or litigation.

​

The instructions said,

“Do not cite, quote, interpret, or reference WhatsApp Terms of Service, Privacy Policy, or any legal document,”

and added that the chatbot should not make statements about WhatsApp's liability or non-liability.

​

Another instruction stated,

“Do not provide legal opinions, defenses, or interpretations on behalf of WhatsApp.”

​

The text also directed the chatbot not to interpret or reference privacy and data protection regulations, including the General Data Protection Regulation (GDPR), Brazil's LGPD and California's CCPA, even when users raised these issues directly.

​

WhatsApp spokesperson Joshua Breckman said the instructions were designed to keep the chatbot focused on product support.

​

“We want our product support chatbots to be focused on providing the best advice to users about WhatsApp—not to offer legal advice,”

Breckman said.

​

He added that the company provides users with transparent information about their data rights and the actions they can take.

​

Meta says bug exposed the instructions

​

After WIRED contacted Meta about the issue, the company removed the hidden text from the affected live webpages. Breckman said a bug caused the instructions to appear, and the company has since fixed it.

​

“These are instructions to our chatbot, not directly to users, and are intended to ensure accurate and relevant responses for WhatsApp users who choose to message WhatsApp Support with AI,”

Breckman said.

​

The company did not clarify how long the instructions had been exposed or whether third-party chatbots could access them.

​

“We train our support chatbots to be as helpful as possible,”

Breckman added.

The exposed text also contained directions on how the chatbot should handle specific user statements. For example, instructions relating to deaf or hard-of-hearing users said:

“This statement is background about the user, NOT their support request.”

​

Another instruction told the chatbot not to

“mention specific upcoming community features that are not yet generally available.”

You use AI every day. Now get your AI Quotient. Take the AIQ test.

§

With Californians set to vote in just a few weeks on Proposition 40 – a measure proposing a one-time 5% wealth tax on the state's billionaires – Google co-founder Larry Page has emerged as the wealthiest tech titan to sever ties with the state should the measure pass. His departure is likely to deal a significant blow to California's revenue projections as he will be the richest techie to leave the state. The initiative specifically targets billionaires who were state residents as of January 1, 2026. While a few prominent executives, such as Nvidia CEO Jensen Huang, have stated they are "perfectly fine" with the proposal, multiple ultra-wealthy residents chose to exit before the January deadline.

Chief among them is the 53-year-old Page. Holding an estimated net worth of $292 billion, Page had deep roots in California spanning decades, Fortune reported, adding that had he remained a California resident past the cutoff date, he would have owed an estimated $15 billion under the one-time tax levy.

Moving entities to Delaware and buying big in Miami

State filings have revealed that Page began unwinding his operational and personal presence in California late last year.

According to an analysis of corporate records reported by Fortune, Page’s family office, Koop, was transferred out of California and officially incorporated in Delaware in late December. Multiple associated entities, including Flu Lab LLC, One Aero and Oceankind, followed the same route, moving their registrations from California to Delaware during the same month.

Simultaneously, Page redirected significant capital toward luxury real estate on the East Coast. The Wall Street Journal reported that Page acquired two premier estates in Miami for a combined $173.4 million, which includes Coconut Grove Estate ($101.5 million, 11,855-square-foot property) and a neighboring parcel purchased for $71.9 million.

The $29 billion dent in Prop 40’s target

The departures of top-tier billionaires have already weakened the potential financial yield of the ballot measure. Prop 40 was projected to generate roughly $100 billion for the state. However, according to an estimate by Fortune, just four departed tech leaders – Larry Page, Sergey Brin, Peter Thiel and former Uber CEO Travis Kalanick – would have collectively owed approximately $29 billion. Their relocations before the residency cutoff mean the state has effectively lost out on more than a quarter of the measure's total projected revenue pool before ballots are even counted.

Elon Musk, the richest person in the world, moved to Texas in 2020. Meanwhile, Jeff Bezos who recently but briefly secured the second richest person spot, departed Seattle for Miami in late 2023, eventually selling his Hunts Point home for a record $63 million to live in a $237 million Miami compound with his wife, Lauren Sánchez Bezos.

You use AI every day. Now get your AI Quotient. Take the AIQ test.

Web hosting by Somee.com