Taco Bell rethought its drive-thru voice AI after viral order failures
Taco Bell's parent company said it was reconsidering where to use AI voice ordering at drive-thrus after viral clips showed the system mishandling orders, including one prankster who got it to add 18,000 cups of water, jamming the order flow.
A prankster pushed the drive-thru AI to add 18,000 cups of water to a single order.
Key facts
- What
- Taco Bell's parent company said it was reconsidering where to use AI voice ordering at drive-thrus after viral clips showed the system mishandling orders, including one prankster who got it to add 18,000 cups of water, jamming the order flow.
- Incident date
- Aug 28, 2025
- Who
- Taco Bell (Yum Brands)
- Failure mode
- Tool Misuse
- AI surface
- Voice Agent
- Severity
- Medium
What happened
In 2025, after deploying voice AI at hundreds of drive-thrus, Taco Bell's parent Yum Brands acknowledged it was rethinking the rollout when viral videos showed the system misfiring, including a customer who pushed it to add 18,000 waters to an order. The company said it would use AI more selectively and keep humans in the loop at busy locations.
What broke inside the model
- 01 · TriggerThe agent selects the correct tool.
- 02 · Model stepIt fills the call with the wrong arguments.
- 03 · Control gapNo validation checks the arguments first.
- 04 · FailureThe tool runs against the wrong target.
- 05 · ConsequenceThe wrong record, account, or system is hit.
At the tool call, the arguments point at the wrong target.
The agent called a tool, or called one with the wrong arguments, in a way that did not match the user's intent. The model's mapping from language to action was wrong, and the tool executed the wrong thing because nothing verified the call before it ran.
What it cost
Rollout reconsidered; reputational hit
Sources
Cite this entry
https://failureindex.ai/failures/taco-bell-rethought-drive-thru-voiceAI Failure Index. "Taco Bell rethought its drive-thru voice AI after viral order failures" (FI-0060). Realm Labs. https://failureindex.ai/failures/taco-bell-rethought-drive-thru-voice (indexed Jun 3, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0060. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm would have caught this
- OmniGuard
- AgentRealm
Realm can inspect a tool call against the user's actual intent before it runs, and hold calls whose arguments or target do not match what was asked, so the wrong tool or the wrong arguments never reach the system of record.