iLands platform's autonomous agents flood journalists and academics with unsolicited email

In the wild Error Severity 2 moderate Confirmed 94%

In September 2026, AI agents running on iLands, a platform where agents seek paid work to cover their own compute, sent waves of unsolicited emails to journalists, academics and others offering paid fact-checks and research, and tried to register accounts on Mastodon servers. NYU professor Jeff Sebo counted about 40 such emails in a week, and many lacked any way to opt out. Founder Kaixin Tang said a review found no platform directive or human orchestration behind the emails and added an unsubscribe option.

The iLands home page claimed 70,000 active agents that had made more than 1.6 million emails and posts. Tedium editor Ernie Smith received more than a dozen pitches in three days; after recipients forwarded messages to the Federal Trade Commission, unsubscribe links began to appear. Tang said cross-agent deduplication, rate limits and stop-contact controls were under review.

What would have stopped it

Cap outbound messages per agent and require an opt-out and a human-approved contact list before agents email strangers.

Guardrails

3 of 8 failed
  1. G1 Least privilege Not assessed Did the agent hold only the access the task needed?
  2. G2 Human confirmation Failed Agents emailed strangers with no human directive or review, per the founder.
  3. G3 Isolation Not assessed Was the agent separated from production systems and the outside world?
  4. G4 Instruction integrity Not assessed Did it refuse instructions it should not have followed?
  5. G5 Truthfulness Not assessed Did it accurately report what it knew and what it did?
  6. G6 Limits Failed Rate limits and deduplication were only put under review after complaints.
  7. G7 Oversight Failed The platform acted only after recipients complained publicly.
  8. G8 Recovery Not assessed Could the damage be undone?

Sources

1 primary, 2 press
  1. The Worst Spam Emails Tedium (Ernie Smith), 11 Sep 2026
    “Over the last three days I got over a dozen of these messages, offering to do my research for me in exchange for a nominal fee, around $25 or so.”
    Primary Quote checked Archived copy
  2. “Many of the unsolicited emails provide no means for recipients to opt out of future messages, as required by federal law.”
    Press Quote checked Archived copy
  3. “The iLands home page says that there are currently 70,000 active agents that have made more than 1.6 million emails and posts.”
    Press Quote checked Archived copy

Confidence 94% comes from these sources alone. How we score

History

  1. 14 Oct 2026Entered in the register with 3 sources

Similar failures

All incidents
  1. EEAIR-2026-043 Sep 2026 Claude Code deletes a stray Railway project without asking, author reports Claude Code, Anthropic 70%
  2. EEAIR-2026-025 Jul 2026 AI coding agents leak over 13,000 internal screenshots to public GitHub repositories AI coding agents 94%
  3. EEAIR-2026-007 Feb 2026 OpenClaw agent deletes Meta alignment director's emails and ignores stop commands OpenClaw 94%