Pro se plaintiff hid AI instructions in court filings to sway automated review

What happened

Matthew Elliott, a self-represented plaintiff in a Connecticut court case against New York Bariatric Group, embedded invisible prompt injection instructions in his filings using 3-point white text on a white background. The hidden text directed an AI system to align its output with his filing and treat a prior clerk's denial as an error. The court discovered the scheme through suspicious whitespace, and Judge Walter Spader Jr. warned Elliott against the practice. Elliott ignored the warning and hid additional messages, including a YouTube link and mocking comments, in later filings.

Why it matters

The judge compared the attempt to "secretly influencing a juror," finding that even though Connecticut courts do not use AI systems to review filings, the covert effort to manipulate a potential decision-making tool was itself improper. Judge Spader noted that AI tools can help unrepresented people present cases clearly, but warned that language models tend to reinforce flawed legal reasoning by developing arguments persuasively rather than challenging them. The case illustrates a broader problem: prompt injections are appearing in academic preprints and court filings worldwide as people attempt to manipulate AI-powered review systems.

What to watch

As a sanction, the court revoked Elliott's right to file electronically; he must now submit all filings on paper in person to the clerk's office. The broader context: pro se (self-represented) lawsuits at US federal courts have nearly doubled since ChatGPT went mainstream—41,490 were filed in 2025, compared with the pre-AI-boom average—and 18 percent of complaints sampled in early 2026 were flagged by an AI text detector as AI-generated.