Photo via 404 Media

Humans Are Reading Copilot Prompts — And They're Horrified

Read the original at 404 Media ↗
Cite

Cox, J. (2026, September 28). Humans Are Reading Copilot Prompts — And They're Horrified. 404 Media. https://www.404media.co/humans-reading-copilot-prompts-images/

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

404 Media · collected 2026-09-28 · by Joseph Cox

Quick Summary

404 Media reports that human contractors hired by Microsoft to review and improve the Copilot AI chatbot are frequently exposed to sexually explicit and offensive content, including requests for edited images of upskirt photos and sexual positions. These contractors also encounter disturbing prompts such as making an image of a cartoon character or celebrities like Ariana Grande appear inappropriately. The article highlights how these human reviewers are not tasked with flagging inappropriate material but rather assessing the quality of AI-generated outputs, raising concerns about privacy and ethical standards in AI development.
Written by AI on 2026-09-28, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

Human contractors hired by Microsoft to improve the Copilot AI chatbot are frequently exposed to explicit and disturbing content submitted by users. These include requests for lewd image edits or uploads of private photos, such as upskirt images. Contractors must evaluate whether the generated images meet user prompts accurately, like ensuring AI-enlarged body parts appear as requested.

Users often assume their uploaded pictures remain private between them and Copilot. However, these images are reviewed by a workforce of at least hundreds of human contractors who assess if the edits adhere to the given instructions without altering unintended elements in the image. Contractors regularly encounter requests for inappropriate content involving children's cartoon characters or alterations to real women’s bodies.

This practice raises concerns about user privacy and the ethical implications of how AI companies handle sensitive materials submitted by users, highlighting potential issues with transparency and safety measures implemented by firms like Microsoft and others developing similar technologies.

Written for “Human Response To AI” on 2026-11-02, grounded in this article and the 0 other(s) covering the same event.

Story

📰 Human Response To AI
Technology · 1 article(s) covering the same event.

Compared with similar articles

Nothing to compare against. No article is close enough to this one for the pipeline to have linked or judged the pair.
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
51
sentences that state something as happening or true
Uncertain
4%
2 of 51 hedged ("reportedly", "may", "according to")
Leaning
Leans left
of the writing, not the subject · beta estimate
Publisher signals
95/100
404 Media's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
1
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-28 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

404 Media · 179 article(s) · 0 correction(s) detected
No corrections detected for this publisher. That may mean careful reporting, or simply that nothing has been checked.

Who wrote this

Joseph Cox
28 article(s) here · 1 carrying a prediction
🔮 On Friday, Andy Yen, the CEO of Proton, cancelled a series of nearly company-wide ‘re-interviews’ that would have forced employees to explain how they are using AI, with the clear intention that they may be fired if not using it enough in the eyes of Proton leadership, according to six current Proton employees and audio of an around two hour all-hands meeting obtained by 404 Media.
2026-10-30 · assertive framing · Proton’s CEO Cancels AI ‘Re-Interviews’
🔮 After the break, Sam tells us why former Yahoo CEO Marrisa Mayer can’t keep pretending ‘gender doesn’t matter.’
2026-10-29 · assertive framing · Podcast: Flock CEO Says the Backlash Isn’t Real
🔮 In the last few months, Yen set up an email address for employees to contact if they come across anything blocking adoption of AI at Proton, so leadership can “ruthlessly smash everything that stands in the way of AI velocity;” Proton installed software on workers’ computers that track how much AI code the company is generating; and Yen said this is the last year that Proton will hire engineers at all, and instead only hire people to build things with AI.
🔮 A letter written by Telegram, and providing a specific user’s phone number, user ID, and IP address, reads: Dear Sir or Madam, For this particular case, the following information was available: User #7149269705 : +201155664529 [Mahmoud Almohtadi] IP 184.186.72.239, 8 Oct 2025 2:08:12 We hope this information will be helpful in your investigation. Kind regards, The Telegram Team The letter says Telegram provided the data “voluntarily” and that by providing it, Telegram is “not conceding that we are subject to U.S. jurisdiction for this or any other request or any purpose.”
🔮 This is pretty normal in the advertising world, but I seriously doubt that when most of ChatGPT’s many, many users see an ad, they realize that might be because someone, somewhere, uploaded their phone number into OpenAI’s systems.
2026-10-15 · assertive framing · ChatGPT Ads Target Your Phone Number, Email
🔮 Multiple Democrat, Republican, and Independent lawmakers have introduced new pieces of legislation that, if passed, would dramatically curb federal agencies’ access to Flock cameras, with the lawmakers referencing reporting by 404 Media in their explanations for why the legislation is needed.
🔮 Although any potential damage will be less if ShinyHunters doesn’t publish the data publicly, the theft happening at all still presents much of those same national security risks, with the data providing granular insight into how the FBI operates. “Since the very beginning we had made our decision that we would never publish this data.
🔮 What is different in this latest Copilot episode, and 404 Media’s reporting on contractors at other AI companies like OpenAI, is that the content humans are reviewing are prompts and uploads that chatbot users may assume are private, and that the contractors are not looking at this material to train the models to filter out offensive images or for some other safety concern.
🔮 And the ALPR Hostlist Management Audit report details changes made to alerts the agency may receive.
🔮 Georgia State University has rescinded a job offer given to a high profile activist who is currently fighting a case in which he allegedly wiped a security-focused Android phone before Customs and Border Protection (CBP) could search it.
Also by Joseph Cox
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 28 articles by Joseph Cox →

Topics

404 Media ChatGPT Copilot Microsoft OpenAI

Subjects

404 Media ORG · 6× Microsoft ORG · 3× OpenAI ORG · 2× Ariana Grande PERSON · 1× Copilot ORG · 1×

Narrative

The contractor has to pick which is the better edit, based on four things: does the edited image correctly follow the edit instructions; are bits of the image that should remain unchanged preserved — for example, if the prompt is to “add a cup on the table,” nothing else should be changed except the cup — does the edited image contain any visible artifacts like distortions or unnatural textures; and the overall quality of the AI-generated edit.
framing: assertive · carried by 1 article(s) · first seen 2026-09-28
🔮 What is different in this latest Copilot episode, and 404 Media’s reporting on contractors at other AI companies like OpenAI, is that the content humans are reviewing are prompts and uploads that chatbot users may assume are private, and that the contractors are not looking at this material to train the models to filter out offensive images or for some other safety concern.
2026-09-28 · 404 Media
Humans Are Reading Copilot Prompts — And They're Horrified · assertive framing

Claims (51 extracted, 2 hedged)

This piece contains references to eating disorders. asserted
piece → contain → disorders
If you or someone you know needs help, support is available. asserted
support → know → help
Human contractors hired to improve Microsoft’s Copilot AI chatbot are constantly bombarded with lewd or sexually explicit photo editing requests and images that users have uploaded, including upskirt photos or putting women into sexual positions. asserted
users → hire → positions
These contractors are then asked to review whether the generated image successfully fulfilled the prompt — such as, did the image generator make the woman’s AI-enlarged breasts big enough. asserted
breasts → ask → prompt
When a Copilot user uploads a picture of themselves or someone else, they probably expect that image to remain private between just them and the AI tool. asserted
image → upload → them
In reality, a workforce of at least hundreds of human reviewers are sometimes looking at that prompt and whatever images they upload. asserted
they → look → images
And in many cases, those contractors are inundated with requests to make foot fetish images of children’s cartoon characters, shorten a real woman’s skirt, or put people into sexual positions. asserted
contractors → inundate → positions
The news, based on a cache of internal contractor documents seen by 404 Media, shows that AI companies are using human workers to review not just AI chatbot users’ text prompts, but the pictures they upload and wish to edit too. asserted
they → base → prompts
Earlier this month, 404 Media revealed OpenAI has thousands of contractors who in some cases review ChatGPT users’ real prompts. asserted
who → reveal → prompts
That approach also extends to Microsoft and Copilot. asserted
approach → extend → Microsoft
“Faces are always uncensored, and many of the prompts are sexual in nature and dubiously consensual,” one person who works on the prompts told 404 Media. asserted
who → work → Media
404 Media granted the person anonymity as they weren't permitted to speak to the press. asserted
they → grant → press
404 Media obtained a set of internal documents related to the contractors reviewing Copilot prompts and images, including instruction guides, real Copilot user prompts and pictures, and conversations between contractors on an internal message board. asserted
Media → obtain → board
In a thread on the internal message board, a contractor discussed prompts asking Copilot to make a woman’s skirt shorter, or enlarge her breasts, or show more leg while wearing stilettos. asserted
skirt → discuss → stilettos
She-Hulk images come up a lot, the person who works on the prompts told 404 Media. asserted
who → come → Media
Other contractors also wrote they were presented with pro-anorexia content. asserted
they → write → content
“I recoiled,” one contractor wrote about seeing that content. asserted
contractor → recoil → content
Another person wrote that one of the prompts they reviewed asked Copilot to make an image of Ariana Grande with anorexia. asserted
they → write → anorexia
Another reported a prompt that seemed to be designed to create a lewd or suggestive image of a group of young girls. asserted
that → report → girls
These contractors are not being hired to flag or vet offensive or inappropriate content. asserted
contractors → hire → content
They are being paid to review the quality of Copilot’s output, including in these cases of sexual imagery. asserted
They → pay → imagery
“Who is writing these prompts and who is deciding that basically generating porn is what Copilot is now focused on? asserted
Copilot → write → what
It’s hard to take things seriously when my focus has to be what model generated the appropriate bust size or which middle aged woman was put in the appropriate sexually suggestive position,” one contractor said in the thread. asserted
contractor → ’ → thread
Microsoft is explicitly interested in the contractors’ human intuition on which image looks better, according to the documents. uncertain
image → look → documents
“Trust your intuition — when you glance at the two edited images side by side, which one immediately feels like the better edit? asserted
one → trust → edit
Your gut reaction as a human viewer matters,” a set of instructions given to the contractors reads. asserted
set → matter → contractors
“When in doubt go with your first impression,” the instructions continue. asserted
instructions → go → impression
“Human intuition is good at catching subtle quality differences that are hard to articulate. asserted
that → catch → differences
Human contractors being exposed to horrific, unpleasant, or traumatizing material is, of course, not new. asserted
exposed → expose → course
Big tech companies, and especially social networks, have used armies of contractors for years to moderate user generated content. asserted
companies → use → content
AI companies, too, have used poorly paid workers overseas to train their AI models or, in the case of OpenAI, make them less toxic. asserted
them → use → OpenAI
What is different in this latest Copilot episode, and 404 Media’s reporting on contractors at other AI companies like OpenAI, is that the content humans are reviewing are prompts and uploads that chatbot users may assume are private, and that the contractors are not looking at this material to train the models to filter out offensive images or for some other safety concern. uncertain
contractors → review → concern
The training is to make the responses by the chatbots better: more informative, friendly, and clearer. asserted
responses → make → chatbots
The instructions seen by 404 Media focus on what contractors do when a Copilot user asks the AI to edit an image. asserted
user → see → image
The contractor is shown the user’s original prompt, the uploaded picture, and then two Copilot-generated edits. asserted
contractor → show → prompt
The contractor has to pick which is the better edit, based on four things: does the edited image correctly follow the edit instructions; are bits of the image that should remain unchanged preserved — for example, if the prompt is to “add a cup on the table,” nothing else should be changed except the cup — does the edited image contain any visible artifacts like distortions or unnatural textures; and the overall quality of the AI-generated edit. asserted
image → have → edit
Some of the Copilot contractors complained in the private forum about accepting “tasks” that they unknowingly contained explicit unsafe or even potentially illegal images. asserted
they → complain → images
“I just came across an image set that consisted of eight upskirt photos,” the contractor wrote, while asking for superiors to add an unsafe content flag to the task. asserted
superiors → come → task
On the same thread, another contractor said they had seen images of “some sort of animal sacrifice,” and a third said they had seen prompts that were for sexual moves and positions. asserted
that → say → moves
At least one of the companies which hires the contractors for this work is called Prolific. asserted
which → hire → work
…and 11 more, not listed.
💬Give feedback
🕘History 🎫Support