Samsung Electronics' introduction of Open AI's 'ChatGPT Enterprise' and 'Codex' for domestic and overseas employees is a very unusual and strategic decision within the global AI ecosystem. This contract goes beyond simply borrowing external tools and is seen as a signal for an enterprise-wide AI transformation (AX) that will implant generative AI across Samsung's core business processes, including manufacturing, marketing, and software development. In particular, from the Open AI perspective, this contract is one of the largest corporate service cases ever, and by securing Samsung Electronics, the world's leading manufacturing powerhouse, as a partner, we have clearly taken the lead in the corporate AI market in Korea. The two companies have already been closely cooperating in the field of memory semiconductors for next-generation AI infrastructure, and through the introduction of this software, they have developed into a strong alliance with the three pillars of hardware, infrastructure, and business innovation.

However, in contrast to the festive atmosphere of technological leap forward, an absurd security incident surrounding the Open AI service occurred among general consumers, sparking great controversy. Recently, about 800 domestic card users suffered the loss of paying a high ChatGPT subscription fee of 299,000 won without their knowledge. As a result of the investigation, it was revealed that this was a 'card testing' crime in which criminals indiscriminately entered personal card information stolen through the dark web, etc. into the ChatGPT payment system. In this process, the weak authentication system of overseas affiliated stores was clearly exposed, and the system where payment is approved immediately without identity verification by simply entering the card number, expiration date, and CVC code has become an extremely attractive prey for criminals.

This incident is also linked to systemic loopholes that occurred in the process of passing through NICE Information and Communication, a domestic payment agency (PG). It was difficult for the victims to immediately recognize that this was a fraudulent payment related to ChatGPT, as the affiliated store name on the card statement was only indicated as 'Nice Information & Communication'. The lack of transparency in payment details led to delays in reporting damage, which resulted in the card company's Abnormal Transaction Detection System (FDS) being unable to block fraudulent payments in real time. Despite domestic financial regulations mandating real-name verification, the fundamental cause of this controversy is that there is a 'regulatory blind spot' in the case of overseas payment services where these domestic security standards are not applied.

When the situation arose, Open AI and Nice Information and Communication began to prepare countermeasures, such as hurriedly canceling and refunding payments and revising the name of the affiliated store to be clearly indicated. Furthermore, they announced that they have begun technological development to strengthen the identity authentication process in the future, but many point out that this is not enough to restore consumer trust that has already been damaged. Security experts advise that in order to prevent such incidents from recurring, users should take active measures to protect themselves, such as lowering their overseas payment limits or using simple payment services that require secondary authentication. Ultimately, now that the huge wave of AI is flooding into our daily lives, we are at a crossroads where we must not blindly trust only the convenience of technology, but also build a strong security awareness and institutional safety measures to match it.