An AI-powered vehicle scanner deployed by Sixt falsely attributed pre-existing damage to a rental customer, resulting in an erroneous $2,200 repair bill and weeks of automated collection threats.
A renter at Manchester Airport, England, reportedly received a £1,659 bill after Sixt's Car Gate AI scanner missed existing scratches at pickup but flagged them at return. Sixt pursued payment for eight weeks and threatened collections and legal action despite scans reportedly showing the damage predated the rental. The company canceled the damage entry and bill after an ombudsman intervened.
Risk classification
- Primary risk domain: 7 AI system safety, failures, & limitations
- Primary risk subdomain: 7.3 Lack of capability or robustness
The AI scanner failed to perform reliably by failing to detect pre-existing damage on the initial scan, exposing the customer to an erroneous financial claim.
Additional risk subdomains
- 5.1 Overreliance and unsafe use: Sixt over-relied on the automated scanner's output, bypassing human oversight and hounding the customer for payment despite clear evidence of a system error.
Causal factors
- Entity: AI
- Intent: Unintentional
- Timing: Post-deployment
The incident was caused by a failure of the deployed Car Gate AI scanner to correctly register pre-existing damage, leading to an unintended false accusation and billing error.
EU AI Act risk tier
- Risk tier: 4 Minimal or No Risk
Minimal or No Risk: The AI vehicle scanner is a commercial tool used for property inspection and does not fall under any high-risk categories like critical infrastructure, law enforcement, or employment.
AI system and alleged parties
- AI system: Sixt Car Gate AI scanner
- AI purpose: Image Verification; Automatic Fault Handling
- Behaviour type: Tool
- Alleged developer: AI vehicle inspection system developers
- Alleged deployer: Sixt, Car rental companies
- Alleged harmed parties: John Stachura, Epistemic integrity, Car rental customers
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Minor
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Psychological
Reported: The report describes the Stachuras spending significant time and energy defending themselves against persistent threats of collections and legal action.
Indirectly caused: The Stachuras experienced prolonged stress and anxiety over an eight-week period due to Sixt's automated demands and threats of legal action.
Inferred additional harm: It is highly likely that other customers falsely accused by these AI scanners experienced similar distress and anxiety while trying to resolve false claims.
People affected
- Occurrences reported: 1
- People reportedly harmed: 2
- People reportedly exposed: 2
Potential causes
Management
- Premature Tech Rollout: Management deployed the scanners while still in their learning phase.
- Prioritizing Automation Over Service: Management replaced human customer support with automated AI systems.
- Inadequate Risk Assessment: Management failed to assess risks of false damage claims on customers.
Technology
- AI Scanner False Negatives: Scanner failed to detect pre-existing damage during exit scan.
- Automated Customer Support Loops: AI customer service trapped user in loops, preventing human resolution.
- Premature System Deployment: Technology deployed in learning phase with high error rates.
Data Inputs
- Unregistered Exit Damage Data: System failed to register pre-existing damage during the initial scan.
Human Factors
- Lack of Attendant Verification: Rental counter staff did not disclose pre-existing damage to customer.
- Customer Reliance on Technology: Customer assumed the scanner was foolproof and did not report damage.
- Bypassed Human Oversight: Company agents failed to manually review the clear photographic evidence.
Process and Methods
- Automated Billing Trigger: System automatically sent a damage bill without manual verification.
- Flawed Dispute Resolution: Customer service process relied on automated loops rather than human agents.
- Inadequate Damage Verification: No process to reconcile exit and return scans before billing.
Regulatory Environment
- Lack of AI Consumer Protections: No specific regulations preventing automated unfair billing practices.
Information quality
- Classification confidence: High
- Reason for confidence: The report provides clear, firsthand details of the incident, including the specific billing amount, the timeline of events, and the mechanism of the AI scanner's failure. The role of the AI system is explicitly stated and documented with photographic evidence.
An AI-powered vehicle scanner deployed by a commercial car rental company falsely flagged pre-existing damage, leading to an erroneous billing dispute. This incident is purely a commercial and customer service issue with negligible national security implications.
- Overall national security impact: Negligible
- Scope: Single nation
- Primary target: United Kingdom
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. The incident represents a localized commercial dispute with no impending threat to national security.
- Autonomy: Human-supervised. The AI scanner automatically flagged damage and triggered billing, but the process remained subject to ultimate human intervention and correction.
- Novelty: Established threat. Automated billing errors and sensor failures are common, well-established issues in commercial technology deployments.
Impact by dimension
- Physical security: Negligible. The incident involves a commercial vehicle scanner failure with no impact on physical security, critical infrastructure, or human safety.
- Information security: Negligible. No intelligence capabilities, classified data, or information operations were affected by this commercial billing error.
- Sovereignty: Negligible. This was a private commercial dispute between a rental car company and a customer, posing no threat to state authority or government operations.
- Economic security: Negligible. The financial impact is limited to an individual commercial billing dispute of 2200 USD, presenting no threat to national economic or technological security.
- Societal stability: Negligible. While causing individual customer stress, this commercial automated billing error does not threaten societal stability, civil liberties, or population-scale privacy.