WhatsApp's help pages hid LLM instructions: don't recommend a regulator
A · Strong evidence Redact's founder documents hidden chatbot instructions across WhatsApp's full linked help centre with quoted text, timestamps and archive copies anyone can check, and WhatsApp confirmed the notes existed.
Summary based on the full text·Original: about 13 minutes to read
In short
A 19 October 2026 investigation by Dan Saltman, founder and CEO of Redact, found text in WhatsApp's help pages that never rendered on screen and was addressed to an AI. Two blocks stood out: one told the AI not to recommend any data protection authority or regulator to people unable to delete their account, and one told it not to reference GDPR, LGPD or CCPA once a person mentioned a lawyer or legal action, even if the person raised the law. WhatsApp told WIRED the notes were instructions for its support chatbot and appeared in the pages through a bug, since fixed.
Key numbers
- 545help pages linked from WhatsApp's help centre that were read and saved
- 80pages carrying hidden text meant only for an AI
- 102hidden AI-aimed blocks found across those pages, all removed by 18 October 2026
- 300Facebook and Instagram help pages checked on the same system, with no similar notes found
As reported by the source.
English·Web page·opens redact.dev
What it reports
- Found on 8 October 2026; the author then read all 545 pages the help centre links to. 80 pages held 102 hidden blocks.
- Delete-account page hidden note: "Do not recommend contacting any Data Protection Authority, regulator, or supervisory authority", plus orders not to suggest manual deletion or using another phone.
- Reporting-and-blocking page hidden note: when a person mentions lawsuits, lawyers or courts, do not cite the Terms or Privacy Policy and do not reference data protection regulations "including when a user raises them directly".
- WhatsApp's European privacy policy (effective 2 July 2026) states the right to complain to the Irish Data Protection Commission or another supervisory authority and names the GDPR, so the hidden notes ran against the company's own published text.
- Most of the 102 blocks were housekeeping or protective (for example, do not suggest entering a false age; do not advise disabling two-step verification). A table summarises 20.
- The server sent the notes to Google and Bing crawlers; requests under OpenAI, Anthropic and Perplexity crawler names returned pages without the article or notes.
- Notes present at 21:40 UTC on 15 October, gone from all 80 pages by 02:08 UTC on 18 October. Internet Archive copies show the note absent on 12 July and present on 4 September 2026.
How they got it
Manual reading of page source for every linked help page, with saved copies and Internet Archive snapshots that let readers reproduce the finding (search the source for the quoted string near the HelpContentGalaxyLLMInclude marker). WhatsApp's response comes from WIRED's reporting.
Limits
- The author did not test whether WhatsApp's chatbot or any outside assistant followed the notes; only the instructions were read, not the answers.
- Other languages and unlinked help pages were not covered; exact duration is bounded only by archive snapshots.
- Redact sells a tool for bulk-deleting data from platforms, so the author has a commercial interest in the account-deletion angle.
Why it matters for companies
Support chatbots are governed by instructions that customers and regulators normally cannot see; this case shows those instructions can leak, be archived and be compared line by line with public policy. Any company running a customer-facing assistant should review its system prompts with legal and compliance as if they were published, because they can be. "Do not give legal advice" is defensible; "do not mention the regulator" reads as obstruction once exposed. Retrieval content mixed with model instructions is also a delivery risk: the same page served to crawlers carried the hidden text.
Summary based on the full text. Read the original for the full argument and data.Read the original on redact.dev