Your account was flagged for potentially high-risk cyber activity
Resolved 💬 4 comments Opened Feb 18, 2026 by sparkling Closed Feb 20, 2026
💡 Likely answer: A maintainer (github-actions[bot], contributor)
responded on this thread — see the highlighted reply below.
I got this warning when I logged in to codex: ⚠ Your account was flagged for potentially high-risk cyber activity and this request was routed to gpt-5.2 as a fallback. To regain access to gpt-5.3-codex, apply for trusted access: https://chatgpt.com/cyber or learn more: https://developers.openai.com/codex/concepts/cyber-safety I went to https://chatgpt.com/cyber and went through the process of verifying, but I got this error: Your identity couldn't be verified or your account is ineligible at this time. If you think this is a mistake, please contact support.
I have not been involved in any security related work, nor have I done anything that should have flagged my account for this treatment. This is a false positive
4 Comments
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
This happened at 09:00 GMT
I got this warning when I logged in to codex: ⚠ Your account was flagged for potentially high-risk cyber activity and this request was routed to gpt-5.2 as a fallback. To regain access to gpt-5.3-codex, apply for trusted access: https://chatgpt.com/cyber or learn more: https://developers.openai.com/codex/concepts/cyber-safety I went to https://chatgpt.com/cyber and went through the process of verifying, but I got this error: Your identity couldn't be verified or your account is ineligible at this time. If you think this is a mistake, please contact support.
I have not been involved in any security related work, nor have I done anything that should have flagged my account for this treatment. This is a false positive
I have been working on fixes and improvements to a framework called claude-flow. I also installed a webserver and haproxy on my server, to serve up a simple website for documenting some npm packages I have been working on, relating to improving a framework called claude-flow. I also asked codex to update my DNS entries at NameCheap for this. None of this should raise any flags
The server I am running codex on is located in a hetzner data center in germany, and I am located in the UK
Thanks for the bug report. We're continuing to tune our cyber safety classifiers to make them more accurate. You can read more about this here. If you see this again in the future and believe it's a false positive (i.e. you aren't doing anything related to cybersecurity), please use the
/feedbackslash command and choose "Safety Check" to report it. That will help us further tune our checks.I also received this message today while compiling some code changes for clang-format (part of the llvm-project), so not cyber-security specific IMHO.