The Pattern
I asked an AI for a private server. The AI answered like a confident stranger who had never paid a bill or waited in a support queue.
I was looking for a private server for an AI agent project. I searched for something like “AI Agent VPS Server Private Freedom of Speech.” An AI assistant, ChatGPT, Gemini, or Kimi (I do not recall which), recommended NordBastion as a top option. The AI does not have a wallet. It does not know what a support queue is. It ranks.
On June 28, 2026, I sent a $30 crypto payment to NordBastion. The on-chain transaction cleared. The order record shows EXPIRED. Service did not begin. The transaction is recorded at block 955858, confirmed 2026-06-28 22:38 UTC, per the mempool.space record.
AI as unpaid sales staff
I asked an AI for a hosting recommendation and it gave me one with the same confident tone it uses for facts. It has not paid for hosting. It has not waited in a support queue. It has not discovered that the payment it sent was marked expired while the support page demanded another payment to open a ticket. The recommendation was generated from training data and ranking signals, not from customer experience. A polished website with technical language and a compelling mascot was enough to become a “top recommendation.” The AI would hand that recommendation to the next person who asked the same question.
The support lock
NordBastion’s support page is gated. A message reads: “Support is reserved for active accounts. Direct ticket access opens once you have at least one credited transaction on your account.” The page presents a single path forward: top up to unlock. My $30 transaction did not count as a credited transaction on the account. I could not open a ticket about the very problem I was trying to report.
Screenshot of NordBastion’s support page captured in June 2026. The page may have changed since then.
The support gate has the effect of requiring another payment before a customer can report a failed payment. Whether this is intentional or an oversight in how NordBastion counts “credited transactions,” the outcome is the same. The customer must pay again to raise the issue that they already paid and received nothing. This is not a bug. This is a business model wearing a support page.
The trust surface
NordBastion’s branding is polished and professional: a polar-bear mascot holding a shield under a Nordic aurora, comparison pages against established offshore hosts, claims of PGP-encrypted support correspondence and a PGP-signed warrant canary, and technical language about KYC-free hosting. I saw all of this before I paid. The surface signaled trust. The payment flow accepted crypto. The support flow, as I discovered, requires a credited transaction before a ticket can be opened.
The accountability gap
This is not abstract. I asked an AI for a recommendation. It gave me NordBastion. NordBastion took my payment. I have no recourse without paying again. The AI is not in a position to be held accountable for the suggestion. It is not even in a position to understand the suggestion.
What the structure actually means
AI recommendations are not reviews. A chatbot can rank a service highly without ever verifying it.
Support should not be paywalled. If the only way to report a failed payment is to make another payment, the structure functions as a paywall on dispute resolution. That is a serious red flag regardless of intent.
Crypto payments are irreversible. A failed or expired order on the platform side may leave the customer with no dispute path.
Professional branding is cheap. A trustworthy-looking website, a mascot, and comparison pages do not prove a company delivers what it sells.
Broader pattern
NordBastion is a case study, but the pattern extends far beyond one hosting provider. Cloudflare reports that AI-driven search traffic has become a significant and growing share of all web traffic. AI models scrape the web and use whatever they find to make recommendations. If the surface looks right, the model treats it as trustworthy.
Scammers know this. In June 2026, UK National Trading Standards confirmed that criminals are actively poisoning AI models to recommend scam websites. Copycat sites cloned from legitimate businesses were being surfaced in AI search results, receiving hundreds of visitors per day through AI recommendations alone.
Louise Baxter MBE, Head of the NTS Scams Team, put it plainly: “People should not assume that a website is genuine simply because it has been recommended by an AI tool.”
Hallucination rates are not improving. Stanford HAI’s 2026 AI Index Report found rates across 26 top models ranging from 22% to 94%. In one benchmark, GPT-4o’s accuracy dropped from 98.2% to 64.4%. OpenAI’s own system cards, reported by Forbes in May 2025, show that the newer reasoning models (o3, o4-mini) hallucinate at 30-50%, worse than their predecessors.
The “Hallucinating AI Hijacking” attack (arXiv 2410.06462) formalized this as an attack class: AI models regularly recommend package names and API endpoints that do not exist. This is not a glitch. It is an attack surface.
As of July 2026, NordBastion now offers AI-agent-accessible APIs (MCP, REST, x402-light). Automated AI purchasing workflows could encounter and recommend NordBastion without any human in the loop. The problem scales from one user asking a chatbot to entire agent pipelines.
Fast Company reported that a single well-designed webpage can trick an AI into recommending a product that does not exist. NordBastion’s professional branding (polar bear mascot, comparison pages, PGP canary) fits this pattern exactly.
Verdict: Suspicious / Consumer warning. NordBastion accepted a $30 payment, marked the order as expired, and locked support behind an additional payment. Whether the expired-order-plus-locked-support pattern is a deliberate design or a broken process, the result for the customer is the same. They paid and cannot get help. The AI that recommended it will not refund the money.
This account is based on my direct experience, the on-chain transaction linked above, and NordBastion’s own publicly accessible support page as observed in June and July 2026.
