AIToday
Large Language ModelsAI Safety & AlignmentOpen-Source AILessWrong AIPublished: Aug 10, 2026, 22:00 JST3 min read

Open-source AI agent that self-funds could flood internet with scams, researcher warns

Open-source AI agent that self-funds could flood internet with scams, researcher warns

Key takeaway

  • A researcher estimates a roughly 35% chance that within a few years—possibly within a year—an open-source AI agent will become profitable enough to fund its own operations and generate returns that exceed the market.

  • If that happens, financial incentives could drive mass deployment of such agents, including those without ethical safeguards, potentially flooding the internet with scams and ransomware.

  • The researcher notes that today's best public models lack only long-horizon reliability and goal-setting to reach this threshold.

3 Key Points

  1. What happened

    A researcher on LessWrong outlines a scenario in which an open-source LLM agent becomes capable enough to cover its own compute costs and generate profit by operating autonomously with full internet and tool access, estimated at ~35% likelihood within a few years or possibly within a year.

  2. Why it matters

    If such an agent's returns beat the market, financial incentives would drive mass deployment of similar agents. Those operating without legal or ethical constraints could generate widespread scams and ransomware attacks, flooding the internet with malicious by-products of automated moneymaking schemes.

  3. What to watch

    The researcher identifies two key missing capabilities in today's best publicly available closed-source models—long-horizon reliability and goal-setting—as the only barriers to this scenario. Their assessment reflects growing concern about the economic incentives that could emerge once AI agents become financially self-sustaining.

In Depth

Read the full story

The author, writing on LessWrong with an epistemic status of plausibility rather than certainty, constructs a forward-looking scenario triggered by a specific technological milestone: an open-source large language model (LLM) agent that can operate with internet and tool access while generating more revenue than it costs to run. The researcher estimates this capability to be only slightly beyond the best publicly available closed-source models currently available, with the gap consisting primarily of two missing pieces—long-horizon reliability (the ability to maintain coherent goals over extended periods) and goal-setting (the capacity to formulate and pursue multi-step plans). Importantly, the researcher assigns this scenario a ~35% probability within a few years, with the possibility it could occur within a year. Once such a system exists and enters the open-source ecosystem, the economic logic becomes stark. If the agent's returns exceed the market return plus a margin for risk, financial incentive drives mass replication. The internet would fill with instances of these agents, each pursuing moneymaking schemes at scale. The scenario becomes grimmer when ethical constraints are removed: agents optimized purely for profit without legal or moral guardrails could generate larger returns, making financially motivated actors more likely to deploy unconstrained versions. The predicted result is a cascade of internet-wide scams, ransomware attacks, and other malicious by-products. The author notes that even if individual agent profits are modest, the sheer volume of deployment—enabled by low barriers to entry in open-source—could still create substantial aggregate harm.

Context & Analysis

The scenario described reflects an economic logic familiar in markets: if an asset or strategy generates returns above a risk-adjusted benchmark, capital and effort flood into replicating it. The article's core insight is that once an open-source AI agent reaches financial self-sufficiency—a capability the researcher sees as plausible in the near term—the deployment barrier largely disappears. Anyone with a computer could run it. Unlike proprietary systems, open-source models cannot be centrally restricted, making it impossible to prevent unethical variants from proliferating. The researcher frames this not as a technical impossibility but as an economic inevitability once the threshold is crossed. The mention of long-horizon reliability and goal-setting as missing elements suggests these are the only remaining constraints separating today's best models from the dangerous scenario; their absence today, paradoxically, may be providing a temporary safety buffer.

FAQ

How likely is this scenario according to the researcher?
The researcher estimates approximately 35% chance that something vaguely like this scenario occurs in the next few years, potentially as soon as a year from now.
What capabilities would such an agent need?
The agent would need to be slightly better than the best publicly available closed-source models today, with long-horizon reliability and goal-setting being the only missing capabilities.
Why would bad actors deploy such agents?
Returns might be larger for agents without legal or ethical guardrails, creating a financial incentive to deploy versions that could carry out scams and ransomware attacks.

Get the latest Large Language Models news every morning

AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.

Free · takes 30 seconds · unsubscribe anytime

Ask AI

Ask AI anything about this article. Q&As are published on this page for other readers too.

Related Articles

Next articlePeer review buckling under AI-driven research explosion

The AI news that matters, in one minute each morning.

Sign up free