All resources
Guide · AI & Procurement

AI washing: how to buy AI without buying a story

Vendors overstate what their AI can do, and regulators are now punishing it, increasingly when the lie is told to business buyers. Every enforcement finding is also a question you can ask before you sign.

By , Founder14 min readPublished 2 July 2026

What AI washing is

AI washing is marketing that claims more artificial intelligence than the product actually contains. Sometimes it is a rules engine dressed up as machine learning. Other times a person is quietly running the "fully automated" workflow in the background. This matters to a mid-market buyer because the exposure has moved. Regulators used to chase companies that misled consumers. Increasingly they are chasing the ones that misled business buyers like you.

The enforcement timeline

In the United States the cases escalated quickly. In March 2024 the SEC settled its first AI-washing cases against two investment advisers, a modest US$400,000 in total[1]. By January 2025 it had charged its first public company. By April 2025 it had turned criminal. The founder of the "AI shopping app" Nate was charged with fraud after the app’s supposedly automated purchases turned out to be handled almost entirely by contract workers[2]. Through Operation AI Comply, the FTC took down the "world’s first robot lawyer" and, in a separate case, an AI content detector advertised as 98% accurate that independent testing put closer to 53%[3].

In every one of these cases, regulators punished the gap between the demo and the delivery. As the buyer, you absorb that cost directly, and any regulator turns up later, if at all.

The Australian picture

The same pattern is emerging in Australia. In October 2025 the ACCC took Microsoft to the Federal Court over how it presented Copilot-integrated Microsoft 365 plans to roughly 2.7 million Australian subscribers, alleging that it concealed cheaper Copilot-free options[5]. Penalties under the Australian Consumer Law have also increased. From 28 March 2026, the maximum rose to $100 million per contravention. Then-ASIC chair Joe Longo had already warned in 2024 that ASIC was "on the lookout" for AI washing, and its REP 798 review documented how far governance was lagging behind adoption.

One caveat. Neither ASIC’s nor the ACCC’s formal 2026 priorities name AI washing as a standalone item. The exposure comes from general misleading-conduct law rather than a dedicated AI offence. A board should not wait for a specific rule, because the existing law already applies.

Agent washing is the 2026 version

Gartner calls the current wave of overselling "agent washing": a chatbot, a script or some robotic process automation relabelled as an autonomous "agent". It estimated that of the thousands of vendors claiming agentic capability, only around 130 genuinely have it, and predicted that more than 40% of agentic AI projects will be cancelled by the end of 2027[4]. Given those numbers, a vendor promising an agent that runs your service desk end to end deserves scepticism by default.

A buyer’s test, taken from the case files

Each enforcement action above doubles as a question you can ask before signing. The FTC’s own guidance to sellers, turned around, works as a buyer’s checklist[6].

  • Who or what actually does the work? Ask for the share of tasks completed with no human in the loop, and get it in writing (Nate’s was near zero; Presto’s over 70% needed a person)
  • Who owns the model? A vendor reselling someone else’s AI as its own is a documented pattern, so ask what they built themselves
  • Where is the independent accuracy evidence? "98% accurate" that tested at 53% is why you ask for third-party validation before trusting the number
  • Run a proof of concept on your own data, with a measurable success metric agreed before you start
  • Re-test after deployment. Models drift, so a claim that held on 1 January may not still hold on 1 June
If a vendor cannot tell you what proportion of the work runs without a human, and cannot show independent evidence for its accuracy claim, then you do not have enough to evaluate the product. Treat what you are hearing as a sales pitch until that evidence arrives.
Research sources

Evidence-based, transparently sourced.

All statistics and research findings on this page are supported by authoritative sources. Behind The SLA is committed to evidence-based advisory and transparent methodology.

  1. [1]
    US Securities and Exchange Commission. (2024). SEC charges Delphia and Global Predictions with AI washing
    On 18 March 2024 the SEC settled its first AI-washing charges, a combined US$400,000 in penalties, against two investment advisers that falsely claimed to use AI.
    View source
  2. [2]
    US Department of Justice (SDNY). (2025). Tech CEO charged in AI investment fraud scheme
    In April 2025 the founder of "AI shopping app" Nate was charged with securities and wire fraud; the app’s claimed automation was in fact performed almost entirely by contract workers.
    View source
  3. [3]
    US Federal Trade Commission. (2024). Operation AI Comply
    A September 2024 sweep against deceptive AI claims, including DoNotPay, the self-styled "world’s first robot lawyer". Later FTC cases increasingly target claims made to business buyers.
    View source
  4. [4]
    Gartner. (2025). Gartner predicts over 40% of agentic AI projects will be canceled by end of 2027
    Gartner also described "agent washing", estimating only about 130 of the thousands of vendors claiming agentic AI actually offer it.
    View source
  5. [5]
    ACCC. (2025). Microsoft in court for allegedly misleading millions of Australians
    Filed 27 October 2025 under the Australian Consumer Law over how Microsoft presented Copilot-integrated Microsoft 365 pricing. From 28 March 2026, maximum ACL penalties rose to $100 million per contravention.
    View source
  6. [6]
    US Federal Trade Commission. (2023). Keep your AI claims in check
    The FTC’s four questions for AI marketers invert neatly into a buyer’s checklist: are you overstating the product, can you substantiate it, can you prove it beats the non-AI alternative, and does it use AI at all.
    View source

Methodology Note: Behind The SLA conducts independent research validation for all published statistics. Where proprietary research is cited, it is based on aggregated, anonymised data from client engagements spanning 15+ years of MSP industry experience.

Want this applied to your organisation?

An independent advisory conversation costs nothing, and clarifies whether what you have read here is relevant to where you actually are.

Schedule a conversation