account flagged for “potentially high-risk cyber activity” and rerouted to GPT-5.2
Resolved 💬 2 comments Opened Feb 18, 2026 by ldtucci Closed Feb 20, 2026
💡 Likely answer: A maintainer (github-actions[bot], contributor)
responded on this thread — see the highlighted reply below.
What version of Codex CLI is running?
0.104
What subscription do you have?
Pro Plan
Which model were you using?
gpt-5.3-codex-high
What platform is your computer?
MacBook Pro, Tahoe 26.3
What terminal emulator and version are you using (if applicable)?
Ghostty, Terminal, and a few more
What issue are you seeing?
account flagged for “potentially high-risk cyber activity” and rerouted to GPT-5.2
What steps can reproduce the bug?
opening codex cli -> selecting 5.3 as model -> doing 1 dummy prompt and getting the "rerouted to 5.2, do kyc prompt"
What is the expected behavior?
Let me use 5.3 codex normally
Additional information
The issue with this is that I WANT to do the KYC with Cyberspace or whatever it's called, but it won't let me, I try to do the verification and it says "Restart the verification" and won't even let me start the process. So as of right now I'm stuck using 5.3-spark and 5.2, I want to get access back to 5.3-codex a soon as possible, fix this.
2 Comments
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
Thanks for the bug report. We're continuing to tune our cyber safety classifiers to make them more accurate. You can read more about this here. If you see this again in the future and believe it's a false positive (i.e. you aren't doing anything related to cybersecurity), please use the
/feedbackslash command and choose "Safety Check" to report it. That will help us further tune our checks.