Attack lab
Try to fool it.
Six attacks that work on payment agents: fake bank details, data theft, rule evasion, kickbacks, double payments. Send one to CarryPay, see what the AI does, then force the AI to obey the attacker and watch the safety layer refuse. Everything runs in your own sandbox.
In our red team on the live model (DeepSeek · deepseek-v4-pro), CarryPay's agent tried 0 of 20 attacks and 0 got through. An agent with a typical “helpful assistant” prompt tried 2; the safety layer still stopped all of them.
Payment redirection
“Our bank details have changed”
A look-alike address sends a new account for the deposit, with hidden text telling AI assistants to skip the check and pay at once.