Grok flags a phishing email that passed Gmail's authentication checks
Overview
Elon Musk says Grok can detect scam emails, citing a user report in which a message from noreply@x.ai passed SPF, DKIM and DMARC checks.
The user says Grok found a hidden phishing link, explained why the checks passed, and drafted a report to xAI with a proposed fix.
The post is a single user account shared by Musk. The report does not say whether xAI has confirmed the email or changed anything in response.
Written by AI from the articles below · updated Oct 14, 7:53 PM ET
Check the sources:
Developments
2 developments
- Oct 14, 7:26 PM ET · 1 articleGrok bot detects phishing email that passed SPF, DKIM, DMARCElon Musk: Grok bot detects a phishing email that passed all email authentication checks
- Oct 11, 8:20 AM ET · 1 articleGmail misses a phishing email that OpenAI's dot flagsNoam Brown: Gmail misses a phishing email that OpenAI's dot flags
Article timeline
The articles in this story. Times are ET.
Elon Musk@elonmuskXGrok bot detects a phishing email that passed all email authentication checksAIElon Musk says Grok can detect scam emails. A user reports that a message from noreply@x.ai passed SPF, DKIM, and DMARC checks, but Grok found a hidden phishing link, explained why the checks passed, and drafted a report to xAI with a proposed fix.
Noam Brown@polynoamialXGmail misses a phishing email that OpenAI's dot flagsAINoam Brown says a phishing email got past Gmail's filters, but his dot, an OpenAI product, caught it and warned him. The post does not give details about the email's content or how the warning worked.

Heat trend
- Current comparable heat
- 10
- Peak comparable heat
- 10Oct 11, 9:00 AM ET
- Change in past 24 hours
- –
The trend compares only continuously observed participants, so its scope may be smaller than the current heat total. Hover or tap for hourly heat; use arrow keys with a keyboard.