Provenance became a prompt setting: OpenAI's Russian cluster asked ChatGPT to hide its accent
The operators told the model to strip clues pointing to their Russian origin. The tells that survived came from the pages ChatGPT never wrote.
The Watch · Security desk
What happened
- The posts promoted the International Burke Institute, described on its own site as an expert community based in Israel.
- OpenAI found no evidence the institute's articles came from ChatGPT; many were copied academic work, some falsely attributed, some machine translated.
- The institute's seven-part sovereignty index places Russia fourth, behind the United States, China and Switzerland.
Why it matters
- What it limits constraint Language-derived provenance is now something the operator sets at generation time, so text-level attribution heuristics cannot carry the weight defenders have been putting on them.
- Who's exposed exposure The signals that actually identified this cluster are provider-side telemetry, which leaves outside researchers and platform trust teams working from the sanitised artifact and dependent on referrals.
- What it sets up precedent Removing accounts while the site, purported experts and index stay standing prices the consequence of being caught at the level of a replaceable subscription.
- What it costs cost The credibility the operation borrowed came from real academic authors, some of whom had work republished under someone else's name, and a model provider's ban does nothing for them.
Next story · Security · 5h ago
X attributes more than 13,000 suspended accounts to Iranian, Russian and Chinese influence operationsConfirmed2 publishers
Instructing a model to hide linguistic clues is one line of a prompt, and prompt lines are free. The operators of this cluster told ChatGPT to conceal anything indicating their Russian provenance, and most of what they published came out in English [6]. Defensive attribution of text still leans on the residue a first language leaves behind: dropped articles, calqued idiom, the flatness of a machine-translated paragraph. That residue does appear in this case. It does not appear in anything the model wrote.
By OpenAI's account, articles on ibi.institute were copied from academic writing, in some cases with false attribution, while others seem to have been drafted by a Slavic speaker and then machine translated into English, and there is no evidence any of them came from ChatGPT [8]. The generated material was the promotional layer, the posts and comments pushed onto Substack, Telegram, X, Facebook and LinkedIn [2]. The half written by hand carried its origin. The half written by the model had that removed on request.
So the case was not made on the language of the output. OpenAI says the investigation started from AI-generated social media posts and widened into the website, the index and the effort to disguise the operators' origins [4]. The identifying material sits on the account side: VPNs used to get around access restrictions [1], a profile picture generated for a Telegram channel called American Observer, and repeated requests for Russian-language summaries of that channel's activity [11]. None of that is legible to anyone outside the model provider. An outside researcher working from the artifacts gets the version the operator configured.
The authority prop repays a close read, because people built it. The Burke, or Sovereignty, Index sums seven components (political, economic, technological, information, cultural, cognitive and military), each scored against a maximum of 100, for a cumulative total between 100 and 700 [10]. Russia scores 601.4, which places it fourth, behind the United States at 650.9, China at 649.1 and Switzerland at 610.7 [14][16]. An index that OpenAI assesses was created to project Russia favourably and criticise Western countries [9] leaves Russia 49.5 points short of the United States [17], while the accompanying country report calls it one of three world powers with full digital and military nuclear sovereignty [15]. That is calibration for plausibility rather than for a win, which is the same instinct as the de-tell prompt.
The ban costs the cluster its accounts. It does not cost it the domain registered in February 2025 [7], the self-described expert community based in Israel [3], the republished papers or the index. OpenAI's own reading is that the significance lay in the infrastructure rather than the audience, which peaked at Telegram channels of roughly 10,000 to 20,000 followers each [12][5], and it describes the model here as a supporting tool inside a broader effort to manufacture authority and obscure where narratives come from [13]. Model access was the replaceable component.
What to watch
- Whether ibi.institute, its country reports and the index stay online now that the accounts promoting them are banned, and whether authors of the copied papers pursue the misattribution.
- Whether OpenAI's next threat report describes de-tell prompting as a recurring instruction across clusters, and explains how the promotional posts were spotted in the first place.
- Whether Substack, Telegram, X, Facebook and LinkedIn act against the accounts pointing at IBI without a referral from the model provider.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives40
- Confidence60
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
OpenAI said on Tuesday it banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation, using the tool to generate social media posts and comments.
- [2]
The generated posts and comments were shared on Substack, Telegram, X, Facebook and LinkedIn.
- [3]
OpenAI said the accounts were being used to promote the International Burke Institute (IBI), a self-described 'expert community' based in Israel.
- [4]
OpenAI said: 'What began as an investigation into AI-generated social media posts led us to a much broader influence operation, built around a website containing copied and misattributed academic work, a sovereignty index that cast Russia in a favourable light, and efforts to disguise the operators' Russian origins.'
- [5]
The campaign is assessed to have reached relatively small audiences, with Telegram channels amassing about 10-20,000 followers each.
- [6]
The majority of the generated content was in English, and the operators instructed ChatGPT to conceal any linguistic clues that could allude to their Russian provenance.
- [7]
The IBI brand is associated with the website ibi.institute, registered in February 2025.
- [8]
There is no evidence that articles published on the IBI site were created using ChatGPT; many appear copied from academic writings, in some cases with false attribution, while others were seemingly drafted by a Slavic speaker and then machine translated to English.
- [9]
OpenAI said the covert campaign is distinct from already documented Russia-linked influence operations, its notable aspect being a sovereignty index promoted by the purported think tank to project Russia favorably and criticize Western countries.
- [10]
The website says the Sovereignty Index, also called the Burke Index, is calculated from seven indicators covering political, economic, technological, information, cultural, cognitive and military sovereignty, each on a maximum score of 100, summing to a Cumulative Sovereignty Index in the range 100-700.
- [11]
One of the ChatGPT users created a profile picture for a Telegram channel named 'American Observer' and repeatedly asked for Russian-language summaries of the channel's activity.
- [12]
OpenAI said the significance of the operation lies less in the audience it reached than in the infrastructure it had built, with ChatGPT used only for isolated promotional posts pointing to an otherwise credible-appearing institution.
- [13]
OpenAI said the case illustrates how influence actors can use AI as a supporting tool within a broader effort to manufacture authority and obscure the source of favored narratives.
- [14]
On the index the U.S. leads with 650.9, followed by China at 649.1, Switzerland at 610.7 and Russia at 601.4.
- [15]
The site's report on Russia states the country has become one of the three world powers with full digital and military nuclear sovereignty.
- [16]
On its own index, Russia ranks fourth, behind the United States, China and Switzerland.
- [17]
Russia's index score is 49.5 points below the United States'.
Sources
2 independent publishers whose own reporting we read for this story.
- securityaffairs.comOpenAI banned Russian ChatGPT accounts backing covert influence operation
1 article · August 26, 2026
- thehackernews.comOpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation
1 article · August 26, 2026
Topics and entities
Topics
- AI platform abuse enforcement
- Russian information operations
- AI-enabled influence operations