Are AI girlfriends safe?
Most articles on this answer a philosophical question about loneliness. The concrete risk in this category is much more boring and much more likely: a ring of lookalike sites built to take your card details and, in the worst cases, your intimate photos. This is a field guide to those.
The six patterns
1. The near-miss domain
A site whose name is one character or one word away from a platform you have heard of — a swapped letter, an added word, a different top-level domain. This is the foundation of the whole business, because it converts someone else's brand recognition without needing any of their own.
Worth knowing: some of these are typo-squats, and some are deliberately shaped to be misread. Either way the defence is the same and it is annoying but reliable — read the domain character by character before typing anything into it.
2. The card-first "free" trial
Everything is advertised as free, and then a card is required before you can use anything at all. This is the most common billing trap in the category. A genuine free tier has no reason to want your card, because it never intends to charge it.
3. The cancellation maze
Signing up takes two clicks; cancelling requires emailing a support address that doesn't reply. Sometimes the subscription page simply has no cancel control. Check for the cancel button before entering payment details — its absence is the whole tell.
4. The in-chat money ask
The "character" asks you to send money, buy a gift card, or move to Telegram or WhatsApp. An AI character has no bank account and no phone. If this happens you are either talking to a person or to a system designed by one, and either way the conversation is a fraud in progress.
5. The photo harvest
The chat encourages you to send pictures of yourself, "verify" with a selfie, or upload ID. The material is then used for sextortion. There is no legitimate reason a companion app needs a photo of your face — age verification, where it is legally required, is handled by a specialist third party and never inside a chat window.
6. The stock-photo gallery
The showcase images are not generated at all. Drop one into a reverse image search and it turns up as stock photography or scraped social media. If the demo images aren't real output, nothing else on the page is load-bearing either.
The one-minute check
Before entering anything into a platform you don't recognise:
- Does it want a card before you've used it? If yes, stop. This single question filters most of the category's complaints.
- Is there a privacy policy? Not whether it's good — whether it exists. Absence is disqualifying.
- Is there an age gate that does something? Adult platforms are legally required to have one in a growing number of places. Skipping it says a lot about the operator's judgement generally.
- Is there a named payment processor? A recognisable checkout, not a bank transfer, gift card or crypto address.
- Is there a real support address? Someone to reach when a charge goes wrong.
- Where's the cancel button? Find it before you need it.
Six questions, about a minute. It won't tell you whether a platform is good — that's a different question — but it reliably separates real businesses from harvesting operations.
Four things never to send
Regardless of how legitimate the platform seems:
- Photos of your face. The single highest-value item for anyone running an extortion operation.
- Identity documents. Compliant age checks are run by third parties who never hand the document to the platform.
- Workplace or address details. These are what turn an embarrassing leak into a targeted one.
- A password you use elsewhere. This category has had real breaches, and credential reuse is how one becomes many.
If you already paid
Not a hypothetical for a lot of people, and the order matters:
- Screenshot the pricing and terms pages now. These sites edit them. Your evidence disappears otherwise.
- Call your bank or card issuer and ask for a chargeback, describing it as an unauthorised or misrepresented subscription. Do this rather than simply cancelling the card — cancelling can leave the recurring claim open to be re-presented.
- Remove the payment method from the account if the interface allows it.
- Change any password you reused.
- If intimate material was sent and you're being threatened: do not pay. Payment reliably increases demands. Report it — most jurisdictions now have a specific route for non-consensual intimate imagery and sextortion, and platforms are legally obliged to remove such material on notice.
The legitimate platforms aren't private either
Worth being straight about, because "not a scam" and "private" are different claims.
Companion apps run their models on servers, not on your phone. Every message you send is transmitted and usually stored. So your conversations are private from other users and not private from the company. What varies is policy: how long it's retained, whether it trains models, whether deleting your account deletes the data or only your access to it, and which third-party model vendors also receive it.
Those are all answerable by searching a privacy policy for three words — train, retention, delete. ourdream.ai's is at ourdream.ai/terms, and it's worth running any competitor's through the same test.
The realistic posture is not paranoia, it's the same one you'd apply to any cloud service: use an established platform, and still write as though a human could read it one day. The cost of that habit is nearly zero and the cost of being wrong is not.