Uber Deployed Secret Program To Deny Local Authorities Rides

Uber developed a secret program "Greyball" which prevented known law enforcement officers in areas where its service violated regulations from receiving rides.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

Uber used the Greyball system to gain a commercial advantage over regulators and competitors by cheating, evading local laws, and performing targeted manipulation of the app's interface to deceive enforcement officers.

Additional risk subdomains

• 6.5 Governance failure: The incident represents a major clash with regulatory oversight where Uber actively bypassed and undermined local transport governance frameworks.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The risk was caused by the deliberate decision of Uber's management and legal team to deploy the Greyball tool to intentionally evade law enforcement after the app was deployed.

EU AI Act risk tier

• Risk tier: 1 Unacceptable

Unacceptable Risk: The report describes an AI-driven system used for systematic deception and behavioral manipulation to evade law enforcement and bypass public safety regulations, posing significant dangers to society and the rule of law.

AI system and alleged parties

• AI system: Greyball
• AI purpose: Target Identification; Behavioral Modeling
• Behaviour type: Autonomous
• Alleged developer: Uber
• Alleged deployer: Uber
• Alleged harmed parties: local law enforcement officers

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Minor
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Minor, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Substantial, indirect Substantial
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report mentions that law enforcement officials in some cities impounded vehicles or issued tickets to UberX drivers, with Uber picking up those costs, estimating thousands of dollars in lost revenue per impound.

Indirectly caused: Uber incurred indirect financial losses from legal defenses, potential fines, and brand damage following the exposure of the Greyball program, though specific figures for Greyball-related losses are not quantified.

Inferred additional harm: It is likely that Uber faced significant legal fees, regulatory fines, and lost revenue from potential bans in cities where Greyball was exposed, totaling millions of dollars globally.

Differential treatment

Reported: The report explicitly describes systematic differential treatment of individuals based on their professional identity as law enforcement or regulatory officers.

Directly caused: Uber used Greyball to tag specific users identified as city officials and served them a fake version of the app with ghost cars, denying them the service available to regular users.

Democracy

Reported: The report explicitly describes the erosion of democratic norms and the rule of law through systematic evasion of law enforcement.

Directly caused: Uber used the Greyball tool to systematically deceive and circumvent local law enforcement and regulatory authorities in multiple cities globally, undermining the rule of law.

Indirectly caused: The program thwarted the ability of local governments to protect the public and enforce municipal regulations, as noted by Portland's mayor.

Inferred additional harm: The widespread, covert use of technology by a major corporation to actively obstruct justice and bypass democratic regulatory processes sets a dangerous precedent for corporate accountability.

Privacy

Reported: The report explicitly describes privacy violations through the unauthorized use of personal data to track and profile individuals.

Directly caused: Uber used geolocation data, credit card information, social media accounts, and online profiles to identify and tag individuals suspected of working for city agencies without their consent.

Inferred additional harm: It is likely that thousands of users had their personal data, credit card details, and social media profiles scrutinized by Uber employees to determine if they were associated with law enforcement.

Epistemic

Reported: The report explicitly describes epistemic harm through the deliberate fabrication of digital reality to deceive users.

Directly caused: Uber served a fake version of its app populated with 'ghost cars' (miniature vehicles on the screen that did not represent actual vehicles) to deceive targeted officials.

People affected

• Occurrences reported: 1
• People reportedly harmed: 50
• People reportedly exposed: 100

Potential causes

Management

• Legal Team Approval: Uber legal team approved the use of Greyball to evade law.
• Aggressive Market Expansion: Prioritized rapid growth and market dominance over compliance.
• Executive Awareness: Top executives were aware of and supported the evasion program.

Technology

• Greyball Software Tool: Algorithmic tool created to identify and evade regulatory officials.
• Ghost Car Simulation: Served fake version of app with virtual cars to mislead users.
• Geofencing Algorithms: Monitored app usage near government offices to target officials.

Data Inputs

• User Geolocation Data: Tracked location data to identify users near government offices.
• Credit Card Information: Analyzed credit cards for links to police credit unions.
• Device Fingerprinting Data: Identified cheap mobile devices commonly used in sting operations.

Human Factors

• Driver Compliance with Cancellations: Drivers canceled rides on instruction to avoid sting operations.
• Employee Ethical Concerns Ignored: Staff voiced concerns about the tool but were overridden.

Process and Methods

• VTOS Target Identification Process: Systematic multi-step process used to flag and tag suspect users.
• Greyball Playbook Distribution: Engineers distributed tactics playbook to international managers.
• Social Media Profiling: Manual and automated online searches to confirm user identity.

Regulatory Environment

• Bans on UberX Service: Local regulations banned low-cost services, prompting evasion.
• Active Sting Operations: Law enforcement used undercover stings to impound Uber vehicles.

Information quality

• Classification confidence: High
• Reason for confidence: The reports from The New York Times and The Guardian provide highly detailed, consistent, and well-sourced accounts of the Greyball program, including internal documents, statements from Uber, and reactions from local officials. The operational mechanics of the tool are clearly explained, leaving little ambiguity about its purpose and impact.
• Ambiguities identified: The exact technical algorithms used to generate the 'ghost cars' and automate the tagging process are not fully detailed, but this does not affect the classification.
• Alternative interpretations: None. The evidence of intentional evasion of law enforcement is overwhelming and acknowledged by Uber's own statements defending the program.

Uber utilized its secret 'Greyball' program to systematically identify, profile, and deceive local law enforcement and regulatory officials globally. While the incident represents a significant, coordinated effort to bypass government regulatory authority and compromise the privacy of targeted officials, its national security implications remain minor as it did not threaten state-level sovereignty, critical infrastructure, or national economic stability.

• Overall national security impact: Minor
• Scope: Multiple nations
• Primary target: No clear primary
• Other affected: USA, France, Australia, China, South Korea, Italy
• Alleged perpetrator: Uber

Threat characteristics

• Imminence: Long-term. The incident is historical (2014-2017) and resolved, representing an ongoing strategic concern regarding corporate compliance rather than an active, immediate threat.
• Autonomy: Human-supervised. The Greyball system automatically identified targets and served fake app interfaces based on pre-programmed rules, operating under human-designed parameters and corporate oversight.
• Novelty: Evolved capability. Demonstrated a highly sophisticated, coordinated corporate application of data analytics, geofencing, and digital deception specifically optimized to systematically evade law enforcement.

Impact by dimension

• Physical security: Negligible. The incident involved software-based evasion of regulatory officials and did not target or impact physical systems, critical infrastructure, or human safety.
• Information security: Minor. Utilized systematic data harvesting, profiling, and digital deception ('ghost cars') to target and mislead government officials, though it lacked state-level intelligence warfare scale.
• Sovereignty: Minor. Systematically undermined and evaded local law enforcement and municipal regulatory authority across multiple countries, representing a minor but coordinated corporate bypass of government functions.
• Economic security: Negligible. The tool was used for corporate regulatory evasion and local market access rather than threatening national economic stability, critical supply chains, or strategic technological advantages.
• Societal stability: Minor. Involved targeted digital surveillance, profiling, and tracking of individuals based on their professional identity, raising minor privacy and civil liberties concerns but without population-scale impact.