Purported AI Bots Flooded a UK Government Tobacco and Vaping Consultation with Reportedly Fraudulent Responses

Purported AI bots reportedly submitted 90,835 fraudulent responses to a UK government consultation on tobacco and vaping, mostly opposing disposable-vape restrictions. The submissions made up 76% of responses and distorted the apparent balance of public opinion. The Department of Health and Social Care excluded them from its analysis. The operators and underlying AI technology were not identified.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.1 Disinformation, surveillance, and influence at scale

The incident involved a large-scale, coordinated campaign using AI-generated content to manipulate a public policy consultation and influence political processes.

Additional risk subdomains

• 3.1 False or misleading information: The AI bots generated tens of thousands of fake, misleading responses pretending to represent genuine public feedback.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by a coordinated decision by human actors to deploy AI bots to intentionally manipulate a public consultation.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The incident involves AI-generated content (automated text responses) which falls under transparency obligations for synthetic content.

AI system and alleged parties

• AI system: None named
• AI purpose: Writing Assistant; Social Media Content Generation
• Behaviour type: Tool
• Alleged developer: AI-assisted public consultation response generator developers
• Alleged deployer: Information manipulation actors
• Alleged harmed parties: Public consultation integrity, Governments, Government of the United Kingdom, Government agencies, Epistemic integrity, Department of Health and Social Care

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Minor, indirect Minor
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Substantial, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Democracy

Reported: The report explicitly describes an attempt to erode democratic norms by manipulating a public consultation process.

Directly caused: AI bots submitted 90,835 fake responses to a government consultation, attempting to derail public health policymaking.

Indirectly caused: Experts noted that such interference undermines trust in public consultations and prevents policymakers from understanding genuine public opinion.

Epistemic

Reported: The report explicitly describes epistemic harm in the form of large-scale fabrication of public consultation responses.

Directly caused: The generation of 90,835 automated, fake responses designed to mimic genuine public opposition to a vape ban.

People affected

• Occurrences reported: 1
• People reportedly exposed: 27921

Potential causes

Technology

• AI Text Generation: AI allowed mass generation of unique-looking text to mimic humans.
• Automated Bot Scripts: Scripts enabled high-frequency submissions from a small number of IPs.

Human Factors

• Malicious Actor Intent: Special interests used AI to artificially inflate opposition to the ban.

Process and Methods

• Open Consultation Design: The open nature of public feedback makes it vulnerable to automated spam.
• Delayed Detection Systems: Bot detection occurred post-submission rather than blocking at entry.

Regulatory Environment

• Lack of AI Lobbying Rules: No clear legal framework exists to penalize AI-driven policy interference.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear, quantified details about the number of bot responses, the context of the consultation, and the outcome. The roles of the actors and the AI are well-defined.
• Ambiguities identified: The specific AI models or software used to generate the responses are not identified.
• Alternative interpretations: None.

The incident involved a coordinated campaign using AI bots to submit over 90,000 fraudulent responses to a UK government public consultation. While successfully mitigated by government controls, it represents a novel precedent of using AI to manipulate democratic feedback mechanisms and mimic grassroots movements.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United Kingdom
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The immediate event is resolved, but the underlying capability represents an ongoing strategic concern for democratic processes.
• Autonomy: Human-controlled. AI was used as a tool to generate and submit responses, acting under direct human direction and coordination.
• Novelty: First-of-its-kind. First documented instance of a large-scale automated campaign using AI to interfere with a UK public consultation process.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or human safety capabilities were compromised or targeted in this incident.
• Information security: Minor. Large-scale automated campaign generated synthetic responses to mimic grassroots opposition, representing a minor information operations threat successfully mitigated by standard controls.
• Sovereignty: Minor. Attempted manipulation of a democratic public consultation process to influence government policy, though successfully detected and mitigated without disrupting the legislative outcome.
• Economic security: Negligible. No strategic technologies were stolen, and there was no direct impact on the UK's financial systems or economic security.
• Societal stability: Negligible. The incident did not result in mass surveillance, civil unrest, or systematic human rights violations.