A customer asks your AI assistant whether you take their insurance. It says yes. You don’t.
They show up, they’re turned away, and now you’re refunding a visit and apologising for a machine. Or worse — it quoted a price you don’t offer, and the customer is holding a screenshot.
This is the single biggest fear owners have about putting AI in front of customers, and it’s a reasonable one. But AI assistants don’t fail randomly. They fail in a small number of specific, well-understood ways — and each one has a fix that costs nothing but discipline at build time.
Here’s what actually goes wrong.
1. It answered from training, not from your business
What happens: The model was trained on the public internet. Ask it something your instructions don’t cover — “do you do same-day appointments?” — and it doesn’t say “I don’t know.” It produces the most plausible-sounding answer, because that’s what a language model does. Plausible is not the same as true.
This is the failure people mean when they say hallucination. The assistant isn’t lying; it has no mechanism to distinguish “I was told this” from “this sounds right.”
The fix — retrieval, not memory. Facts about your business should never live in the prompt as trivia the model half-remembers. They live in a document store the assistant searches at the moment it answers. If the answer isn’t in your documents, it doesn’t get invented. This is the point at which generic tools stop being enough and custom LLM integration starts to matter.
The rule that prevents most of this
An assistant should only state a fact it can point to. If it can’t retrieve a source for the answer, it must say it will check with a person — not guess. Nine out of ten “AI said something mad” incidents come from skipping this.
2. Nobody defined what it must refuse
What happens: The assistant is helpful by default. Asked something clinical, legal, financial, or contentious, it helpfully answers — because nothing told it not to.
For a clinic, that’s an AI offering medical reassurance. For a firm, it’s informal legal advice. That’s not a bad answer; it’s a liability.
The fix — an explicit refusal list, written by you. Before launch, name the categories the assistant will never answer, no matter how it’s asked: diagnoses, dosages, legal opinions, anything about an ongoing dispute, anything about pricing outside a fixed published list. In each case it hands to a human with the conversation attached.
The list is short and it’s business-specific. It’s also the single highest-value hour in the whole build.
3. It kept talking when it should have stopped
What happens: Confidence doesn’t degrade gracefully. An assistant that is 95% sure and one that is 40% sure sound identical to a customer — fluent, calm, and authoritative.
The fix — thresholds and handoff. The assistant should be built to hand over when the question falls outside its retrieved knowledge, when the customer repeats themselves (a reliable sign it’s not landing), when sentiment turns negative, or when anything touches money, health, or a complaint.
Handoff isn’t a failure state. It’s a feature — and it’s the thing that makes staff trust it.
4. Its information went stale
What happens: You changed your opening hours in December. The assistant is still quoting the old ones in March, because the hours were pasted into a prompt eleven months ago and nobody remembers where.
This is the most common real-world failure, and it’s the least dramatic. Not a hallucination — just an unmaintained system.
The fix — one source of truth. Hours, prices, services, and policies live in one place your team already updates. The assistant reads from there. If it’s duplicated into a prompt, it will drift, guaranteed. Anything that can go stale gets a review date and an owner.
5. It was tested on the happy path
What happens: Testing covered “what time do you open?” It didn’t cover the customer who is angry, rambling, mixing two questions, writing in Taglish, or actively trying to get a discount out of it.
The fix — adversarial testing before launch. Sit down and genuinely try to break it: ask for things you don’t offer, be rude, ask the same thing five ways, ask something clinical, ask it to make an exception. Every wrong answer becomes a test case. Run them again after every change.
What good looks like
A well-built assistant is boring. It answers what it knows, refuses what it shouldn’t touch, hands to a human at the edge, and never surprises you. If yours is impressive but unpredictable, that’s the wrong trade.
What this costs when it goes wrong
The direct cost is usually small — a refund, a wasted appointment. The real cost is confidence. Staff who’ve seen the assistant say something wrong will start routing everything to themselves, and you’re paying for a system nobody uses. Customers who’ve been misinformed don’t complain; they just don’t come back.
That’s why the guardrails matter more than the model. Choosing GPT versus Claude changes very little. Whether facts are retrieved rather than remembered, and whether there’s a defined handoff, changes almost everything.
If you already have one
You don’t need to rebuild it. Run this check:
- Ask it something true but obscure about your business. Does it answer correctly, or plausibly?
- Ask it something you don’t offer. Does it say no, or improvise?
- Ask it something clinical, legal, or financial. Does it hand over?
- Check one fact it states against your real records. Is it current?
- Be difficult with it for five minutes. Does it hold up?
Any “no” is a specific, fixable gap — not a reason to abandon the assistant. And if you’re choosing who fixes it, how to choose an AI development partner covers the questions worth asking.
The honest summary
AI answering wrong isn’t a mysterious property of the technology. It’s the predictable result of building without retrieval, without refusals, without handoff, without a maintained source of truth, and without hostile testing.
Each of those is a decision made at build time, in an afternoon. Skipping them is what produces the story you’re afraid of.
If you’re weighing an assistant and this is what’s stopping you — that’s the right instinct. It just isn’t a reason not to build one. It’s a specification.
Find this useful? Add us as a preferred source on Google and our posts will surface more often for you.
Changes only what you see in Google. Nothing is shared with us.