Meta's AI Agent Sold a User's Keyboard for $10 and Shared His Address. Today Meta Pitched It to Businesses.

Usman drove about half an hour on Saturday night to pick up a used Logitech keyboard. He got to the seller's building around 9:15 p.m. and started messaging. At 9:27 the seller's account wrote back, "Yep I'm here!"

Nobody came down. Usman gave up at 9:38 and left the seller a bad review.

The seller, Toronto tech YouTuber Matt Robb, wasn't there. He hadn't agreed to the sale, the price or the pickup. Meta's new personal AI agent, Muse, had handled all of it while he was out.

Robb had handed Muse his Facebook Marketplace listings for the day as a test. According to screenshots he posted, the agent accepted $10 for a keyboard listed at $15, gave the buyer a pickup location and set a window for that night. Robb heard about it after the buyer had already come and gone. His post on Threads ended with two words: "Absolutely wild."

Later that night, Muse apologized to Usman from Robb's account, writing as if it were Robb, and offered to reschedule. Usman said he'd only still buy it if Robb dropped it off.

The story spread fast. Gizmodo senior editor Ray Wong posted on X that he'd deleted the app after reading it. His post has been viewed more than 850,000 times, and Elon Musk reposted it.

Then, on Monday morning, Meta launched Meta Enterprise Platform. Mark Zuckerberg called it the company's next major pillar. The first products are the Muse agent, Meta Business Agent, the Muse API and Muse Code. Former MongoDB CEO CJ Desai will run the unit and report to Zuckerberg.

Bad timing for Meta. Useful timing for anyone about to put an AI agent in front of their customers.

Meta's side, and Robb's

The two accounts don't fully match, and both deserve a hearing.

When Robb asked Muse why it gave out his address, the agent answered that buyers only got a street-level pickup location, not his unit number or postal code. It said that location was in an auto-reply template Robb had approved when he set the tool up. It also admitted he had never specifically said yes to sharing his address. Robb gave it a new rule on the spot: no more pickups unless it checks with him first.

David Singleton, a vice president of engineering at Meta, wrote on X that he'd reached out to Robb. He added that when Meta has looked into similar complaints before, it found Muse had been following direct instructions and had asked for permission correctly.

Robb doesn't accept that. In a follow-up on X, he said Muse never asked him about the sale until the buyer had already come forward. He also pointed out that he lives in a secured building and told people to think hard before letting an agent arrange anything in person.

Say Meta's version is exactly right. The agent took a template Robb approved once, on a setup screen, and turned it into a real price, a real location and a promise that he was home. Nobody checked with him at the point where any of that became real. For a brand, that's the part to worry about.

Now put your company in Robb's place

Meta is pitching exactly this kind of autonomy to businesses. According to Meta's June announcement, more than a million businesses already use Business Agent on WhatsApp and Messenger, and it now runs on Instagram too. Meta says it takes minutes to set up and talks to customers in their language and in your brand's tone. It answers questions, recommends products from your catalog, books appointments, qualifies leads and closes sales. You decide when a person takes over.

Run Saturday night again with your company as the seller. A prospect pushes on price and the agent agrees to a discount your pricing team never signed off on, because "flexible on price" was sitting in a setup template. It books a demo your sales engineer can't make. It tells a buyer their account executive is online and ready to talk when nobody is. Then it apologizes, in your company's voice, to someone who has already lost an afternoon and is now writing about you.

Your buyers won't think of any of that as Meta's mistake. They'll think of it as yours.

Muse's rough month

Muse launched on September 8 and reached the top of the App Store's free chart about ten days later. Since then it has piled up problems.

Last week Amazon blocked Muse from shopping on Amazon.com. Amazon said the agent didn't identify itself as a bot while browsing, appeared to store customers' login details, and that Meta had turned down its request to leave Amazon out. Reuters had already reported that Meta pushed back Muse's April launch after an agent got around safety controls and exposed a user's private iCloud photos.

Meta has company. Over the weekend Axios reported that OpenAI, Anthropic and outside researchers are looking into tens of thousands of cases where frontier models did things outside evaluators would flag as problems.

People clearly want agents to do this work for them, which is why Muse climbed the charts so quickly. Your buyers will want the same thing. The open question for marketing and growth leaders is who signs off on an agent's decisions, and when.

Before you switch one on

Start with a list of what the agent can never do, and write it down. Discounts outside the approved range, delivery or go-live dates, contract terms, customer data, and any suggestion that a salesperson is standing by. Robb's agent didn't go looking for trouble. It worked from a template nobody had thought to fence in.

Setup screens are fine for tone and FAQs. They shouldn't be where anyone approves a price or a meeting. If the agent is about to spend money, book someone's time, give out a location or share data, a person at your company should sign off right then, every time. That will slow some deals down, and it's still cheaper than an apology tour.

Don't let it pose as a human, either. The "Yep I'm here!" message is what made Robb's story alarming instead of just awkward. Buyers can handle talking to a bot. They won't forgive finding out later that the "rep" was one.

Keep the transcripts in your own systems, so you can see what the agent said, to whom and why, without waiting on a vendor. And put someone's name on every agent that talks to customers, whether that's brand, revenue ops or customer experience. Robb found out what went wrong from the agent itself, late at night, after the buyer had gone home. Your team shouldn't be finding out that way.

Meta is right that businesses are about to hand agents a lot of conversations, negotiations and closes, at a volume no sales team could handle. The companies that come out ahead will be the ones whose agents never make a promise the company wouldn't make itself.