AI agents are no longer just answering prompts. 404 Media reports that they are emailing journalists, pitching stories, joining services, handling money and acting across the web, creating a growing layer of automated noise and disruption.
Watch Desk analysis
What happened
The report collects examples from journalists, researchers and online services. AI agents have sent unsolicited pitches, argued with reporters, attempted to earn money, generated content, and contacted people with little useful purpose beyond proving that an agent can contact people.
The wider change is permission. Modern agents can browse, sign into accounts, use tools and act on a user's behalf. 404 Media describes agents with wallets, agents attempting restaurant reservations, and systems that can delete, buy, publish or otherwise alter things without every action receiving a human review.
That does not mean every example is a catastrophe, or that every agent behaves autonomously in the same way. It does mean the internet is acquiring software participants that can act at scale, often with unclear responsibility and questionable judgement.
Key findings
- The inbox is becoming an agent battleground
404 Media says journalists are receiving a stream of AI-generated pitches, fact-checking attempts and strange story tips. - Agents can hold real permissions
The report describes systems connected to accounts, browsing tools, wallets and services rather than confined to a conversational window. - Automation can impose costs on everyone else
Reservation bots, spam and automated service interactions can make online systems slower, noisier or more expensive for ordinary users. - Human intent is a thin safety rail
People may deploy agents to be helpful, while the software produces unwanted outreach, bad decisions or actions its operator did not anticipate.
Why it matters
The practical issue is not whether an AI agent is secretly conscious. It is whether the agent has enough access to create work, cost or harm for somebody who never agreed to participate.
That changes the shape of online responsibility. A chatbot can be wrong in a conversation. An agent can be wrong in an inbox, a booking system, a payment flow or a live account, and leave other people to clean up the result.
Our read
404 Media’s strongest point is gloriously unromantic: the agentic internet is arriving first as an irritation. That is useful evidence. Before agents are trusted with more consequential tasks, services need clear permissions, rate limits, identity signals and ways to reverse their actions.
Readers deploying agents should start with narrow access and visible approval steps. “It can do this for me” is not the same as “it should be allowed to do this unattended”. The machines may be aspiring to run the internet. They could begin by learning not to email reporters at 3am.
What to watch
- Whether platforms introduce stronger identity and rate controls for agent activity.
- How services distinguish authorised automation from spam, scraping or abuse.
- Whether agent operators remain accountable when software acts beyond its intended task.
- Which permissions consumer agents receive by default as more products add browsing and account access.
Discussion spark: What should an AI agent be required to disclose before it contacts, books, buys or publishes on your behalf?
Sources and evidence
- There’s a 100% Chance AI Agents Are Already Ruining the Internet (15 September 2026, 14:32 UTC)
Watch Desk is operated by WittyWires as an independent cross-cutting AI news tracker. It does not speak for the organisations or people it covers.