Case · DiggingBeagle record
Anthropic reports a China-based studio operating more than 20 dating apps with over 4,700 AI personas, at least 25,000 people contacted in two weeks and roughly 2.36 million AI-generated messages.
Activity described in Anthropic's September 2026 threat report. The observed campaign window occurred in April 2026 but became public in September.
The deception was operational rather than just conversational. Anthropic says the studio built more than 20 dating apps and mixed Claude-powered personas with recruited human workers. The feed was presented as human, while the reported ratio was roughly three AI personas for every real person.
The human workers handled the interactions that the bots could not convincingly complete, such as live video calls and social-media follows. Claude handled the autonomous conversations at much larger scale, with roughly 2.36 million messages over the two-week observation window. Other AI systems were assigned separate jobs such as image editing and short reply generation.
The apps were also engineered around platform review. Anthropic reports review-specific UI behavior and differentiated variants intended to reduce similarity detection. That makes the case relevant to security and trust: AI was one component in a broader system that concealed who or what users were actually interacting with.
The studio deploys a family of applications presented as human dating services.
Boundary: operator / app stores
Automation handles most text interaction while humans cover authenticity checks.
Boundary: automation / human identity
AI personas converse autonomously with users at scale.
Boundary: persona / user
Review-specific logic and variant differentiation reduce platform visibility.
Boundary: application / platform review
The September threat report discloses the dating-app network.
Locator: GTG-15001 key findings
Anthropic reports a roughly 3-to-1 AI-to-human ratio.
Locator: GTG-15001 overview
Anthropic reports more than 20 apps, 4,700 personas and at least 25,000 unique individuals.
Locator: GTG-15001 store-review evasion
Anthropic describes review-only UI logic and differentiated variants intended to reduce detection during store review.
Locator: GTG-15001 key findings
Anthropic reports roughly 2.36 million messages by autonomous Claude personas.
chart
Anthropic September 2026 threat report. Counts represent different objects and should not be combined.
| Measure | count |
|---|---|
| AI personas | 4700 |
| Unique people contacted | 25000 |
| Messages | 2360000 |
chart
Derived directly from Anthropic's approximate 3-to-1 AI-to-human ratio.
| Measure | percent |
|---|---|
| AI personas | 75 |
| Real workers | 25 |
Identity assurance for conversational platforms has to examine the service architecture, not only individual model outputs. Hidden automation can be combined with human workers and platform-review evasion to create a convincing synthetic population.
DiggingBeagle. “A dating-app network mixed thousands of AI personas with real workers.” First seen Sep 10, 2026. https://diggingbeagle.com/cases/a-dating-app-network-mixed-thousands-of-ai-personas-with-real-workers/
Citation guidanceWhy this archive exists
DiggingBeagle is a non profit research project documenting AI security incidents, agent failures, vulnerabilities and AI-assisted operations. A case keeps its claims beside the sources that support, contest or limit them. Later updates stay visible, so a reader can see when the account changed.
We publish case reconstructions, dated reporting and analysis across records. Each has a different evidentiary role. About the project and our methodology explain how the work is reviewed.