Unverified50% confidenceEventExact time
In the demo, ChatGPT was able to check for duplicate account charges, identify a duplicate subscription, and carry out the actions of canceling it and sending an email to request a refund.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/25/2026
First Seen
Valid until: 12/24/2026
Sources
Related Entities
Related Claims
UnverifiedThe third-party card key top-up process requires users to copy their ChatGPT account's session token and paste it into the top-up website72% similarUnverified该ChatGPT事件在极少数情况下暴露了ChatGPT Plus订阅者的姓名、邮箱、支付地址及信用卡后四位71% similarUnverified将登录后的ChatGPT页面内容复制粘贴到第三方网址会暴露会话令牌，攻击者可静默刷新access_token实现账号持续控制，即使修改密码在令牌被服务器撤销前依然有效66% similarUnverified中转站作为TLS终止节点，在HTTPS解密后可完整访问明文内容，技术上具备记录和审查用户输入输出的能力65% similarUnverified面对模糊条款，建议保留激活日期记录、截图保存确认邮件，并在验证到期前设置提醒关注账户状态以避免被自动按原价扣费62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/948778API
curl https://kongchang.com/api/v1/knowledge/claims/948778MCP
get_claim(id=948778)