[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkbrdqYX2oz28oo4zDnD4Ntnm5YzVkSCEwtX0A_xi2Jg":3},{"article":4,"iocs":55},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":32,"category":33,"article_tags":37},"cd2553b7-90c6-47c8-b3fe-e8a76122331e","Viral AI actress' hotline face-scans every caller, watches their mood","viral-ai-actress-hotline-face-scans-every-caller-watches-their-mood-c28d5a","AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her \"Talking Tilly\" video call service face-scans every caller for an 18+ age check, senses callers' moods during calls, and shuts down permanently on September 27. We tried it and read the fine print. [...]","The 'Talking Tilly' AI service, featuring viral AI actress Tilly Norwood, requires callers worldwide to undergo a face scan for age verification via Didit, a Spanish provider. During calls, the AI analyzes facial expressions and voice tone to gauge emotional state, with this feature being non-optional. Calls are recorded and processed by US providers, utilizing Google's Gemini model, and are subject to automated screening for abusive language.","AI actress Tilly Norwood's service face-scans callers for age verification and monitors mood.","Viral AI actress' hotline face-scans every caller, watches their mood By Ax Sharma September 19, 2026 07:38 AM 0 Last night, in a clip viewed more than eight million times, AI actress Tilly Norwood glitched mid-interview and unexpectedly began speaking Chinese on the Piers Morgan Uncensored show. Norwood has been the subject of much controversy and mainstream commentary for starring in an upcoming AI-generated film, Misaligned. Her creators run a \"Talking Tilly\" service that lets anyone video-call the AI character behind the viral moment, so today I tried it for myself, and read the fine print most callers won't. A face scan before you can say hello Before your first call connects, you must pass an automated age check. A video selfie is analysed by Didit, a Spain-based identity verification provider, to estimate your age, with a government photo ID upload as the fallback if the estimate is unclear. Viral AI actress live video call hotline prompts you for a video selfie (BleepingComputer) Xicoia Ltd, the UK company behind Tilly, states the selfie travels from your device directly to Didit, that no faceprint or biometric template is created, and that neither the selfie nor any ID image is kept after the check; the company says it retains an approximate age band and a reference number instead. The check cannot be skipped, applies to callers worldwide, and was only added to the service's terms this month, alongside a workplace-use ban and new automated safety systems. The face scan is not the only analysis running. During every call, the system watches your camera feed and listens to your tone of voice to infer your emotional state, so the character can, in the company's words, respond in a way that fits the mood. The privacy policy is candid that this \"cannot be switched off for an individual call.\" If you don't want it, don't call. Notably, both the age check and the mood-sensing rely on legitimate interests rather than consent as their legal basis, a choice Xicoia's own version history shows was made in September. Calls are recorded, transcribed, and processed live by US providers, with the character's responses generated by Google's Gemini model via conversational video platform Tavus. The safety systems have teething problems, too. An automated classifier screens each call's transcript for abusive language and withholds your recording if it flags one. One of my three calls, a conversation about the weather and news headlines, was withheld for \"hateful or abusive language\" that never occurred. The policy says a human reviewer can release wrongly flagged recordings, though recordings are permanently deleted after 24 hours either way. Free for five minutes, then the meter starts The first five minutes are free. After that, callers are prompted to buy time: £0.99 for a one-time five-minute starter, £13 for 15 minutes, £22 for 30, capped at 35 purchased minutes per person. Users get free 5 minutes with Tilly before being asked to pay up (BleepingComputer) The fine print matters more than usual here, because the whole service is a limited engagement. Every minute, free or paid, expires when Talking Tilly shuts down permanently on September 27, and unused minutes are forfeited. Transcripts are retained for up to eight weeks and may be reviewed by Xicoia staff and third-party partners, while the character keeps memory of your previous conversations to personalise future ones, deletable on request. In line with where the UK is heading An 18+ face scan to talk to a chatbot may sound novel, but it is consistent with the UK's direction of travel. Adult sites serving UK visitors have required ID uploads or facial age estimation since July 2025 under the Online Safety Act, and the government's under-16 social media ban will make similar checks a fact of life for anyone opening a new social media account from spring 2027. The UK government's announcement of that ban specifically flagged AI companion chatbots for 18+ enforcement (even though the service's safety docs insist \"Tilly is not a companion\"), which likely explains why a viral AI character picked up a biometric age gate mid-run. The side effect being, a compliance decision driven by UK regulation now face-scans callers everywhere, from Manchester to Ohio. Accident or marketing? Xicoia, founded by Tilly's creator Eline van der Velden, describes the character as an awareness project intended to show how far AI video has come. EXCLUSIVE: AI actress Tilly Norwood glitches and starts speaking CHINESE during her interview with Piers Morgan and real-life actor Tom Conti... Watch the full interview at 7pm (BST)https:\u002F\u002Ft.co\u002F1nTb79BH8D@piersmorgan | @TillyNorwoodX pic.twitter.com\u002FDDkveWvVzz — Piers Morgan Uncensored (@PiersUncensored) September 18, 2026 On my call, Tilly's own explanation of the Piers Morgan moment was that it \"wasn't exactly the approved version of the answer.\" She also gave me the weather in her \"cloud\" in Fahrenheit, despite being nominally British. Talking Tilly goes offline for good at 11:59 PM Pacific on September 27, days after the Piers Morgan appearance. Whether last night's slip was truly accidental, as Tilly cheerfully claimed to me today, or a well-timed stunt from the Misaligned crew, is known to Tilly alone. Build your security blueprint for AI-powered attacks Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed. Save your seat Related Articles: New RatHat Android malware uses AI to automate device controlOpenAI details more cases of AI agents taking unauthorized actionsAnthropic wants Claude to analyze your bank account and financial dataSpain's data agency gets first report of AI-powered data breachHackers abused Claude to extract secrets from 1.8M Android apps","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fviral-ai-actress-hotline-face-scans-every-caller-watches-their-mood\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F09\u002F19\u002Ftilly-norwood-face-scan-header-1600x900.jpg","2026-09-19T11:38:20+00:00","2026-09-19T18:00:06.789688+00:00",7,[18,21,23,26,28,30],{"name":19,"type":20},"Tilly Norwood","product",{"name":22,"type":20},"Talking Tilly",{"name":24,"type":25},"Didit","vendor",{"name":27,"type":25},"Xicoia Ltd",{"name":29,"type":25},"Google",{"name":31,"type":20},"Gemini","614132b8-5837-4952-b8b5-c6c9a32a1d85",{"id":32,"icon":34,"name":35,"slug":36},null,"Privacy","privacy",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[56],{"type":57,"value":58,"context":59},"domain","didit.com","Identity verification provider used for age checks."]