The Era of Due Diligence: Searching for Truth in a World That Blurs It
We live in a time when information is abundant, credibility is harder to assess,…
Read Now
AI disinformation uses artificial intelligence to create or spread false or misleading information designed to influence how people think, respond, or make decisions. For organizations, that can include fabricated documents, synthetic images, fake employee credentials, deepfakes, and false narratives that appear credible enough to circulate widely before anyone verifies them.
In January 2026, DoorDash found itself at the center of an AI-driven hoax involving a supposed whistleblower, allegations of a secret “desperation score,” and supporting evidence that was later found to be likely AI-generated.
The claims were false, but the impact was not. The incident demonstrates how AI-generated evidence combined with publicly available information can give a false narrative enough credibility to spread before its claims can be verified.
What makes AI disinformation particularly concerning is how easily bad actors can create credible-looking evidence to support a false narrative. Generative AI can help someone build a story around information people already know, concerns they already have, and sources they are accustomed to trusting.
AI disinformation can create a serious threat to an organization without anyone gaining access to its systems or confidential information. Public information alone can give someone material to build a convincing false narrative about a company, its employees, executives, customers, or investors.
Credibility itself has become an attack surface, and the presence of the allegation causes damage in today’s lightning-fast information environment.
In the DoorDash example mentioned above, an anonymous Reddit user claimed to be a DoorDash whistleblower bound by a non-disclosure agreement. The poster alleged that DoorDash ranked drivers using a “desperation score,” dynamically suppressed wages, and misled customers through algorithmic pricing practices. The post quickly spread from Reddit to X, drawing attention from journalists, activists, and public figures.
The allegations landed on a subject that already carried public sensitivity: how gig-economy companies use algorithms to manage workers and determine compensation.
The story had several elements that made it appear credible:
Each element gave social media users another reason to share the story before its underlying claims had been verified.
A Business Insider investigation found that the supporting materials, including a confidential-looking PDF and employee badge, were likely generated using AI tools. When verification was requested, the supposed whistleblower stopped communicating and deleted the post.
This was targeted narrative construction. The campaign combined open-source information, existing grievances, a familiar whistleblower story, social-platform amplification, and apparent AI-generated supporting materials. No systems were breached and no data was stolen. The attack relied on a convincing false narrative supported by what appeared to be credible evidence.
A fabricated document or credential only needs to appear credible long enough for people to share it, discuss it, report on it, or demand a response. By the time questions about authenticity catch up, an organization may already be dealing with reputational, operational, legal, or financial consequences.
As they say, perception is everything.
The DoorDash hoax worked because the allegations mirrored existing grievances.
The creator could draw from information already available online and assemble it into a narrative that sounded plausible.
This is a classic influence technique. The attacker starts with publicly available information, such as:
Then they use AI to package it all up into a fabricated narrative that feels believable.
Plausibility gives disinformation momentum because people tend to evaluate new claims through what they already know. The hoax did not invent new fears. It recombined existing open-source information into a cohesive and emotionally resonant narrative. The closer an organization’s practices align with public suspicion, the easier it becomes to weaponize perception.
Generative AI has made it easier and less expensive to create convincing false evidence. Someone with little technical skill can produce confidential-looking documents, employee credentials, and other supporting materials, then use publicly available information to make a fabricated story more believable.
Determining whether that evidence is authentic can be much harder. In the DoorDash case, AI-detection tools produced mixed results when analyzing the supporting materials. This meant investigators still had to consider the source, provenance, metadata, context, and activity across platforms to assess whether the evidence could be trusted.
As AI makes fabricated evidence easier to produce, verifying what is and is not authentic becomes increasingly important. Using AI for investigations can support that process by helping investigators analyze information and identify connections, but human judgment is still necessary to evaluate what those findings mean.
Organizations can reduce their exposure to AI disinformation by understanding where they may be vulnerable, establishing processes for evaluating suspicious content, and treating digital vulnerability as an enterprise risk. These four strategies can help organizations prepare for potential threats and respond before false narratives gain traction.
Predictive risk monitoring looks for earlier signs that a narrative is beginning to develop. That can include conversations in fringe communities, activity on lower-visibility platforms, and changes in sentiment or language around an organization.
The goal is to understand how narratives form and gain traction so organizations can identify potential threats earlier and determine whether they require further investigation.
Organizations must understand how they appear across open sources, including media coverage, social platforms, forums, and employee review sites. That information can change over time, creating new opportunities for it to be taken out of context or used to support a false narrative. This type of open-source information also plays a role in due diligence investigations, where it can reveal associations and other potential areas of risk.
Organizations need structured processes to assess the credibility of documents, claims, and sources. This includes provenance analysis, metadata review, cross-platform correlation, and AI artifact assessment. Speed is important, but accuracy is more important.
Digital vulnerability intersects with legal, compliance, communications, cybersecurity, and executive leadership. It should be measured, briefed, and governed as an enterprise risk, not handled ad hoc during a crisis.
The DoorDash hoax was dangerous because it did not need to be true to cause harm.
As AI makes fabricated content easier to produce, the value of rigorous open-source intelligence increases. Verification, contextual analysis, and understanding how narratives form across platforms are now core components of organizational resilience.
Organizations also need to understand how publicly available information can be used to influence what people believe. Identifying those digital vulnerabilities and preparing for potential misuse can help organizations respond more effectively when false narratives emerge.
Source
Parmar, Tekendra. “‘DoorDash’ Deep Throat exposed: A whistleblower’s post about delivery apps screwing over drivers went viral. Turns out it was an AI hoax.” Business Insider, January 7, 2026.