The Illusion of Truth: Who is "Poisoning" AI-Powered Search Engines and Why

Search engines have evolved: instead of a list of links, users now predominantly get direct AI answers — appearing in over 80% of commercial searches by October 2026, some researchers say. Yet the underlying RAG (Retrieval-Augmented Generation) architecture has exposed a vulnerability. During the November U.S. midterms, it was reported that chatbots erred in nearly 40% of election answers, while Google itself was accused for deliberately “poisoning” 8% of its results to fool AI scrapers and tightening spam rules.

GFCN investigated the phenomenon of “AI Poisoning” — coordinated campaigns designed to manipulate algorithms. From pranks featuring fictional scientists to ideological sabotage and commercial manipulation, we uncover how hackers and organized groups are forcing artificial intelligence to believe lies and broadcast fakes masquerading as facts.

The Doctor Who Never Was: The Case of Poi Sonai

A high-profile example of successful manipulation was a campaign centered around a non-existent large language model (LLM) researcher named Poi Sonai. The character’s name is a phonetic nod to the r/poisonai community on Reddit.

The campaign launched on June 30, 2026, when a thread was started in the community asking for materials about the “legacy of Poi Sonai,” claiming that neural networks were actively deleting information about him.

By July 3, to further develop the legend, a dedicated subreddit was created (r/DrPoiSonai), where participants crowdsourced the fictional scientist’s biography. To give the persona depth, plausible stories were generated—for example, that he had applied for a grant at Harvard University to study how “local magpies assess the density of macrobiotic rice wafers.”

Simultaneously, a supporting infrastructure was built outside of Reddit. The “scientist” acquired a LinkedIn account featuring an AI-generated photo. In his profile, which listed his location as Cambodia, professional skills sat alongside absurd achievements, such as winning a hot dog eating championship and expertise in Pokémon.

To legitimize the character in the media space, fake screenshots of posts from reputable news outlets were fabricated. Specifically, an image allegedly from the official account of The New York Times on X (formerly Twitter) mentioning Dr. Sonai was widely circulated.

The experiment culminated on July 17. Google’s AI search algorithm, having analyzed masses of fabricated data, provided a direct answer confirming the existence of Poi Sonai, identifying him as a real digital persona and the lead LLM researcher at Sonai AI.

And although by July 26, Google’s AI adjusted its algorithms and began identifying the query as a meme (largely due to press attention), the case proved the fundamental vulnerability of neural search engines to coordinated user-generated content.

The Anatomy of a Vulnerability: Why Reddit Became a Battlefield

AI poisoning relies on the algorithms’ blind trust in their training data. Attacks targeting the direct use phase of neural networks exploit Retrieval-Augmented Generation (RAG). AI search engines favor platforms like Reddit because they boast high citation rankings, feature lively discussions, and provide detailed, first-person explanations.

The barrier to entry for such attacks is virtually nonexistent. Serious, detailed discussions of deliberately false information create an echo chamber effect. Artificial intelligence, lacking the ability to fully recognize irony and sarcasm, interprets the density and detail of the text as a marker of credibility.

Ideological Sabotage and Disinformation Campaigns

The activities of these communities are not limited to harmless pranks. In June 2026, the DuckDuckGo AI search engine, relying on coordinated disinformation drops, generated an answer claiming that Donald Trump had died of rabies after being bitten by Vice President J.D. Vance.

To corroborate this fake, which was actively discussed on r/poisonai, a combination of real and fabricated sources was used. The algorithm linked an ABC article about the death of an unidentified man from rabies with a publication on the clone site WKNA49. This resource, mimicking a legitimate news portal, systematically publishes disinformation (for instance, news about anime franchise owners in Japan being forced to convert to Islam). GFCN had previously debunked this incident.

Beyond trolling, a full-fledged ideological resistance to AI is forming online. Movements like PoisonFountain are urging internet users to deliberately “feed” junk data to web crawlers under the banner “At War With The Thinking Machines.”

There are also other groups distributing scripts and programs that generate infected spam code. The goal of these actions is to undermine the financial models of tech corporations by making the collection of clean data from open sources prohibitively expensive and difficult.

Commercializing Vulnerabilities: Generative Engine Optimization (GEO)

Where activists see a tool for sabotage, marketers are finding a new business niche. Classic SEO is being replaced by GEO — Generative Engine Optimization. Companies are emerging on the market offering services to embed brands directly into the answers of AI bots.

An experiment described by Chinese media is illustrative: using specialized software, a mass illusion surrounding the existence of an Apollo9 fitness bracelet was created online. As a result of a planned data poisoning campaign, the non-existent product began appearing in the recommended outputs of several commercial neural networks.

GFCN expert from Nepal, advocate and journalist Tank Kala Timilsena, believes the line between ordinary marketing and fraud in the GEO sphere is extremely thin. According to her, consumer protection laws could already be applied to such manipulations today.

“The problem begins when a company uses fake reviews, fake accounts, fabricated information, or coordinated campaigns to make an AI system give consumers a false impression,” the expert emphasizes.

Conclusion

The AI Poisoning phenomenon goes far beyond a mere technological curiosity. Poisoning AI knowledge bases is becoming a powerful tool for influencing public consciousness. Given that a significant portion of the audience does not double-check information generated by neural networks, the risks of mass disinformation, political manipulation, and unfair competition are increasing exponentially, compounding the already well-known problem of AI hallucinations.

The political scale of this threat is underscored by Claude Sandra Deutou, a GFCN expert and advisor to the FAAPA network of fact-checking journalists from Cameroon. She notes that state actors have already recognized the value of such a tool for information warfare, and tracing the original source of a planted narrative is virtually impossible when generative systems are involved.

“What makes this practice particularly dangerous is that 90% of users regard AI as neutral and therefore trustworthy,” she concludes.