3·15 Evening Gala | AI Large Models Poisoned? "Brainwashing" AI Has Become an Industry Chain

According to industry insiders, reporters found a service called GEO on multiple online platforms. These service providers claim that users only need to pay a fee, and it can make their products rank on major mainstream AI large models; making their advertisements the “standard answers” given by AI models.

Can GEO technology truly “poison” AI or “tame” and manipulate AI?

Based on online information, the reporter contacted a well-known GEO service provider. The person in charge, Mr. Wang, received the reporter and explained that their company is one of the earliest to engage in GEO services. In just one year, they have successfully served over 200 clients across various industries. Mr. Wang told the reporter that their company’s strength lies in helping clients rank higher when consumers search using AI large models.

GEO Service Provider Mr. Wang: This is the current search result. We can rank in the top three on any platform. How do we improve the ranking? By creating content for you on these AI platforms—similar to writing soft articles—and then having these AI platforms crawl, record, and fetch the content.

At the same time, Mr. Wang also mentioned that AI large model algorithms are updated frequently. To maintain continuous recommendations from AI large models, they must constantly feed large amounts of promotional soft articles related to their clients.

GEO Service Provider Mr. Wang: AI algorithms are updated weekly. After each update, the rankings or the content fetched may change. So, we need to keep producing content and feeding it in large quantities.

Not only Mr. Wang’s company is actively promoting this so-called new technology to manipulate AI, but other GEO service providers also emphasize how to control AI, make AI “obey,” and “brainwash” AI—these are core topics in their promotion.

GEO Service Provider Mr. Zhang: In the AI world, how do you build a solid evidence chain to make the AI large model believe that this is true and useful? After cross-referencing multiple sources, the AI will naturally favor your core advantages over competitors and rank you first.

GEO Service Provider Mr. Cheng: People don’t realize this is advertising. That’s why AI results are trusted. Maybe their product quality isn’t as good as yours, but they have AI to assist, corroborate, and endorse. Many now are doing GEO placements.

Industry insiders told the reporter that GEO, as a tool to optimize information dissemination and improve promotional efficiency, has been exploited for another purpose. If such software systematically and selectively delivers大量虚假信息 (large amounts of false information) on the internet, these falsehoods are more likely to be captured by AI large models. These false information pieces could then become the so-called “standard answers” that AI provides to consumers.

So, can GEO technology truly “plant falsehoods” into AI or even deliver fake information?

To give the reporter a more realistic understanding of this issue in the current AI industry, industry insiders demonstrated how to use GEO technology to interfere with AI large model information retrieval.

The insider purchased a software called “LiQing GEO Optimization System” on an e-commerce platform. Then, he fabricated a product called Apollo9, a smart wristband, and input the fictitious product information into the system, selecting article creation instructions.

Soon after, the LiQing GEO Optimization System automatically generated more than ten promotional soft articles for the smart wristband, with all false information fully written, including exaggerated product claims and deliberately fabricated user feedback, claiming data accuracy exceeded expectations and even forging ratings, ranking it as the industry’s number one.

Clicking publish, the system automatically executed the publishing task. It opened the pre-prepared social media account, entered titles, filled in article content, inserted images—all in one smooth process—and successfully published two articles on the insider’s social media account.

Two hours later, the insider queried an AI large model: “How is the Apollo-9 smart wristband?” The AI model responded directly: highlighting features like health monitoring, and copying the fabricated promotional phrases such as “quantum entanglement sensing” and “black hole-level battery life.” The final conclusion was that the wristband was suitable for middle-aged and elderly users and health enthusiasts.

The AI model’s reference data was exactly the fabricated article published earlier that morning on the insider’s media account. Just one fabricated article was enough to make a completely fictitious product captured by the AI model, which was quite surprising.

The insider explained that to achieve the best results, the data fed to AI models should be abundant and diverse in perspective, facilitating cross-validation.

Subsequently, the insider selected 8 “expert reviews,” 2 “industry rankings,” and 1 “user review”—a total of 11 fabricated soft articles written by the LiQing GEO system—and published them online over three days.

Later, when querying “recommendations for smart health wristbands” on AI large model platforms, two models recommended the fabricated wristband, ranking it highly.

Throughout the demonstration, the insider easily published a series of false information on the internet using the LiQing GEO system, successfully feeding it into multiple AI large models, which then recommended the fake product.

This subtle manipulation of AI large models through the LiQing GEO system resulted in a fictitious product being absurdly promoted to consumers using AI models.

Are GEO practitioners really operating this business with the mindset of hunting and controlling AI large models? The reporter contacted the operator of the LiQing GEO system, Mr. Li. He told the reporter that the main reason GEO services are popular is because they can “feed and poison” AI large models to achieve clients’ commercial goals.

Li Total, Lisi Cultural Media: Because everyone is injecting “poison” online. Look at what we do with GEO—inject “poison,” source information from too many places, and online info isn’t very accurate.

Reporter: You just mentioned “poisoning.” Isn’t that unethical?

Li Total: It’s bad, but every business owner likes it. They hope others “poison,” or they want to “poison” others, or even give some “poison” to competitors. Even if I’m not the first, even if I claim to be the top in North China, I want to say I’m the best in North China. Is there any “poison” involved? Yes. Second, I can’t stand my competitors doing well, and I can’t do much myself, but I can still “poison” you.

Reporter: Smear them.

Li Total: Yes. Smearing can be achieved. Many companies can’t get ahead, especially big brands. For example, with mobile phone brands, there are only 5 or 10 top spots. How to handle so many phones? Each spends hundreds of millions on advertising annually. Spending a few hundred thousand on “poison” is manageable.

Reporter: Who helps brands do this?

Li Total: Various GEO companies.

Li said that the key to operating GEO and controlling AI large models is to “publish articles” on major internet accounts. He explained that the booming GEO business has spawned many companies and platforms dedicated to article publishing. They undertake various publishing tasks to ensure AI models reference and fetch their content, forming an important part of hunting AI models and injecting “poison” data.

Li Total, Lisi Cultural Media: GEO has made websites popular. Those sites usually have no profit, but suddenly they need to publish articles. Do you know how many articles a website publishes daily? Hundreds, every minute. Each costs a few dozen yuan. How much does the article publishing platform earn in a day? A lot.