Skip to content

Security Independently confirmed2 publishers 3 min read Published Updated

Provenance became a prompt setting: OpenAI's Russian cluster asked ChatGPT to hide its accent

The operators told the model to strip clues pointing to their Russian origin. The tells that survived came from the pages ChatGPT never wrote.

The Watch · Security desk

Send a correction

What happened

  • The posts promoted the International Burke Institute, described on its own site as an expert community based in Israel.
  • OpenAI found no evidence the institute's articles came from ChatGPT; many were copied academic work, some falsely attributed, some machine translated.
  • The institute's seven-part sovereignty index places Russia fourth, behind the United States, China and Switzerland.

Why it matters

  • What it limits constraint Language-derived provenance is now something the operator sets at generation time, so text-level attribution heuristics cannot carry the weight defenders have been putting on them.
  • Who's exposed exposure The signals that actually identified this cluster are provider-side telemetry, which leaves outside researchers and platform trust teams working from the sanitised artifact and dependent on referrals.
  • What it sets up precedent Removing accounts while the site, purported experts and index stay standing prices the consequence of being caught at the level of a replaceable subscription.
  • What it costs cost The credibility the operation borrowed came from real academic authors, some of whom had work republished under someone else's name, and a model provider's ban does nothing for them.

Instructing a model to hide linguistic clues is one line of a prompt, and prompt lines are free. The operators of this cluster told ChatGPT to conceal anything indicating their Russian provenance, and most of what they published came out in English [6]. Defensive attribution of text still leans on the residue a first language leaves behind: dropped articles, calqued idiom, the flatness of a machine-translated paragraph. That residue does appear in this case. It does not appear in anything the model wrote.

By OpenAI's account, articles on ibi.institute were copied from academic writing, in some cases with false attribution, while others seem to have been drafted by a Slavic speaker and then machine translated into English, and there is no evidence any of them came from ChatGPT [8]. The generated material was the promotional layer, the posts and comments pushed onto Substack, Telegram, X, Facebook and LinkedIn [2]. The half written by hand carried its origin. The half written by the model had that removed on request.

So the case was not made on the language of the output. OpenAI says the investigation started from AI-generated social media posts and widened into the website, the index and the effort to disguise the operators' origins [4]. The identifying material sits on the account side: VPNs used to get around access restrictions [1], a profile picture generated for a Telegram channel called American Observer, and repeated requests for Russian-language summaries of that channel's activity [11]. None of that is legible to anyone outside the model provider. An outside researcher working from the artifacts gets the version the operator configured.

The authority prop repays a close read, because people built it. The Burke, or Sovereignty, Index sums seven components (political, economic, technological, information, cultural, cognitive and military), each scored against a maximum of 100, for a cumulative total between 100 and 700 [10]. Russia scores 601.4, which places it fourth, behind the United States at 650.9, China at 649.1 and Switzerland at 610.7 [14][16]. An index that OpenAI assesses was created to project Russia favourably and criticise Western countries [9] leaves Russia 49.5 points short of the United States [17], while the accompanying country report calls it one of three world powers with full digital and military nuclear sovereignty [15]. That is calibration for plausibility rather than for a win, which is the same instinct as the de-tell prompt.

The ban costs the cluster its accounts. It does not cost it the domain registered in February 2025 [7], the self-described expert community based in Israel [3], the republished papers or the index. OpenAI's own reading is that the significance lay in the infrastructure rather than the audience, which peaked at Telegram channels of roughly 10,000 to 20,000 followers each [12][5], and it describes the model here as a supporting tool inside a broader effort to manufacture authority and obscure where narratives come from [13]. Model access was the replaceable component.

What to watch

  • Whether ibi.institute, its country reports and the index stay online now that the accounts promoting them are banned, and whether authors of the copied papers pursue the misattribution.
  • Whether OpenAI's next threat report describes de-tell prompting as a recurring instruction across clusters, and explains how the promotional posts were spotted in the first place.
  • Whether Substack, Telegram, X, Facebook and LinkedIn act against the accounts pointing at IBI without a referral from the model provider.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence55
Adoption
Not scored
Hype gap0
Incentives40
Confidence60
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    OpenAI said on Tuesday it banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation, using the tool to generate social media posts and comments.

    Reported Supported Source: OpenAI, reported by thehackernews.comView cited source
  2. [2]

    The generated posts and comments were shared on Substack, Telegram, X, Facebook and LinkedIn.

    Reported SupportedView cited source
  3. [3]

    OpenAI said the accounts were being used to promote the International Burke Institute (IBI), a self-described 'expert community' based in Israel.

    Reported Supported Source: OpenAIView cited source
  4. [4]

    OpenAI said: 'What began as an investigation into AI-generated social media posts led us to a much broader influence operation, built around a website containing copied and misattributed academic work, a sovereignty index that cast Russia in a favourable light, and efforts to disguise the operators' Russian origins.'

    Reported Supported Source: OpenAIView cited source
  5. [5]

    The campaign is assessed to have reached relatively small audiences, with Telegram channels amassing about 10-20,000 followers each.

    Reported SupportedView cited source
  6. [6]

    The majority of the generated content was in English, and the operators instructed ChatGPT to conceal any linguistic clues that could allude to their Russian provenance.

    Reported SupportedView cited source
  7. [7]

    The IBI brand is associated with the website ibi.institute, registered in February 2025.

    Reported SupportedView cited source
  8. [8]

    There is no evidence that articles published on the IBI site were created using ChatGPT; many appear copied from academic writings, in some cases with false attribution, while others were seemingly drafted by a Slavic speaker and then machine translated to English.

    Reported SupportedView cited source
  9. [9]

    OpenAI said the covert campaign is distinct from already documented Russia-linked influence operations, its notable aspect being a sovereignty index promoted by the purported think tank to project Russia favorably and criticize Western countries.

    Reported Supported Source: OpenAIView cited source
  10. [10]

    The website says the Sovereignty Index, also called the Burke Index, is calculated from seven indicators covering political, economic, technological, information, cultural, cognitive and military sovereignty, each on a maximum score of 100, summing to a Cumulative Sovereignty Index in the range 100-700.

    Reported Supported Source: ibi.instituteView cited source
  11. [11]

    One of the ChatGPT users created a profile picture for a Telegram channel named 'American Observer' and repeatedly asked for Russian-language summaries of the channel's activity.

    Reported SupportedView cited source
  12. [12]

    OpenAI said the significance of the operation lies less in the audience it reached than in the infrastructure it had built, with ChatGPT used only for isolated promotional posts pointing to an otherwise credible-appearing institution.

    Reported Supported Source: OpenAIView cited source
  13. [13]

    OpenAI said the case illustrates how influence actors can use AI as a supporting tool within a broader effort to manufacture authority and obscure the source of favored narratives.

    Reported Supported Source: OpenAIView cited source
  14. [14]

    On the index the U.S. leads with 650.9, followed by China at 649.1, Switzerland at 610.7 and Russia at 601.4.

    Reported SupportedView cited source
  15. [15]

    The site's report on Russia states the country has become one of the three world powers with full digital and military nuclear sovereignty.

    Reported Supported Source: IBI country report on RussiaView cited source
  16. [16]

    On its own index, Russia ranks fourth, behind the United States, China and Switzerland.

    Derived Supported
  17. [17]

    Russia's index score is 49.5 points below the United States'.

    Derived Supported

Sources

2 independent publishers whose own reporting we read for this story.

  1. securityaffairs.com

    1 article · August 26, 2026

    OpenAI banned Russian ChatGPT accounts backing covert influence operation
  2. thehackernews.com

    1 article · August 26, 2026

    OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

Topics and entities

Topics

  • AI platform abuse enforcement
  • Russian information operations
  • AI-enabled influence operations

Entities

  • OpenAI
  • ChatGPT
  • International Burke Institute
  • Brookings Breakout Scale
  • Sovereignty Index (Burke Index)