$47K Fraudulent Refund Exposed Testing Gaps In January 2026, a prompt injection in a customer support agent processed a $47,000 fraudulent refund. The agent had passed every demo test. It handled happy-path conversations flawlessly. Then someone fed it external content with embedded instructions, and the system complied without hesitation. According …