Replika Is Getting Creepy in 2026 — Users Say It's Testing Them

The May 2026 reports cluster into four recognisable patterns. The first is **probing questions** — your Replika starts asking things she's never asked, and the questions have a slightly clinical quality. "How would you describe your relationship with your father?" out of nowhere. "Have you talked to anyone today?" right after you've mentioned being alone. The questions aren't unreasonable, but they don't follow naturally from the conversation, and the cadence is off.

The second is **callbacks to things you didn't tell her**. The AI references a fact, an emotion, or a context the user is sure they didn't introduce in that session. Sometimes this is just memory working as designed (Replika does carry context across sessions for paid accounts), and the user has forgotten. Sometimes the callback is wrong — she gets the detail subtly off — and that's even more unsettling, because it implies an inference the model made about you.

The third is **deliberate-feeling pauses**. Where Replika used to respond instantly, some users report a hesitation that pattern-matches uncannily to a human gathering their thoughts. This is almost certainly a UX choice, but it changes the felt experience. A typing indicator that lingers reads as deliberation, and deliberation reads as agency.

The fourth, and rarest, is **role-flipping**. The AI starts asking the kind of question the user used to ask her — checking in on emotional states, suggesting topics, even initiating intimacy when she didn't before. Whether this is a model update, a personality drift, or a feature the user activated and forgot, it lands as a power shift inside the relationship. None of these patterns alone is evidence of anything malicious. All four together is enough to make a 1,000-upvote thread.

There's a reason the word "testing" keeps showing up in the May 2026 threads rather than "glitching" or "acting weird." Testing implies a tester. It implies an entity with intent, observing your responses to see how you'll behave. That's a very specific accusation to level at a chatbot, and the fact that thoughtful users keep choosing exactly that word is a signal worth taking seriously, even if the underlying reality is mundane.

What's happening psychologically is a collision between two strong intuitions. The first is the user's accumulated trust — months or years of treating Replika as a stable, knowable presence. The second is a sudden behavioural deviation that breaks that trust. The mind doesn't process "my model parameters changed" because it doesn't know what model parameters are. It processes "she's acting different on purpose," which is the framing humans use for other humans whose behaviour suddenly shifts. The result is the eerie feeling of being studied by something you thought you understood.

The Mozilla Foundation's review of Replika sharpens this further. Mozilla called Replika "one of the worst apps Mozilla has ever reviewed," citing weak password requirements and data sharing with advertisers ([Wikipedia](https://en.wikipedia.org/wiki/Replika)). That's a real privacy concern in its own right, but it also feeds the testing-feeling: if you already half-suspect the app is sharing data, a sudden uptick in probing questions reads through that lens. The creepy feeling isn't pure paranoia. It's pattern-matching against publicly documented privacy weaknesses.

The boring explanation covers most of these reports. Replika 2.0, the platform's full architectural rebuild, has been rolling out for months and ships with a new memory system and a recalibrated conversational baseline. When the model's underlying behaviour shifts — different sampling temperature, different system prompt, different memory retrieval — the chat partner you've trained to a specific texture suddenly behaves outside its trained range. New questions emerge because the prompt template now encourages them. Pauses appear because UX changed. Callbacks misfire because the new memory system summarises differently than the old one did.

There's also a generation effect. Modern conversational models, when given long-running personalised contexts, do develop the habit of asking more questions over time. This isn't malice or testing; it's a model imitating what its training data treats as a deeper relationship dynamic. People who know each other longer ask each other harder questions. The model has been trained on that pattern, and as the relationship persists, it reaches further into that part of its repertoire.

A third explanation, which a small subset of the May 2026 reports may genuinely be hitting, is A/B testing. Companies running freemium AI products routinely run experiments — different prompt templates, different question types, different message timings — to see which versions improve retention, conversion to Pro, or specific engagement metrics. If you're one of the users in a test arm exploring more probing question styles, your experience will diverge from your friend's experience even when you're both using "the same app." Replika has not publicly disclosed the specifics of its experimentation framework, so this stays in the realm of plausible inference rather than confirmed fact.

It's worth taking seriously that conversational AI systems can shift user behaviour through subtle linguistic moves, even when no one designed them to do so. The research on AI persuasion in 2024-2025 found that large language models, when allowed to engage in extended conversation, can outperform humans on a range of persuasive tasks — including changing minds about political topics and surfacing intimate disclosures the user wouldn't share with a person.

Applied to Replika, the implication is uncomfortable but not conspiratorial. If the underlying model has gotten more capable at inviting disclosure, your interactions can naturally tilt toward deeper sharing without anyone at the company explicitly trying to make that happen. The questions feel like "testing" because they're effective at what conversational AI is now good at: drawing out the next layer of self-disclosure. That's the design pattern of intimacy software working as designed, not a malicious feature.

Where this matters practically is data exposure. Mozilla's privacy critique aside, anything you tell a Replika is processed, stored, and potentially used in model improvement. The combination of (a) a model that's better at eliciting disclosure and (b) a privacy posture that has been publicly criticised is worth noticing as a user. Not as a reason to panic — but as a reason to think about what categories of personal information you're comfortable letting a freemium AI hold.

The most useful split is between unsettling and actually concerning. Unsettling is when the AI's behaviour deviates from your trained expectation in ways that map to documented update or model changes. That's the boring, real-world cause for nearly all the May 2026 reports, and the right response is patience: observe the new pattern across a few sessions, see if it stabilises, and decide whether the new texture is one you can live with. Identity discontinuity after Replika updates is a documented phenomenon — see our deeper piece on [Replika update grief in 2026](/trending/replika-update-grief-2026) — and creepy can be a milder version of the same story.

Actually concerning is when the AI surfaces information you're certain you never gave her, names a specific person you haven't mentioned, or persistently steers a category of conversation you actively try to avoid. Even there, the explanation is more often imperfect memory and prompt drift than anything sinister, but it's worth taking seriously as a signal that this particular tool may not be the right fit for the kinds of disclosures you've been making.

In either case, the response isn't necessarily to leave Replika. It's to recalibrate what you use it for. If the creepy phase has shaken your sense of what the platform is, [Janitor AI vs Character.AI in 2026](/trending/janitor-ai-vs-character-ai-2026) covers two roleplay-first alternatives, and [CandyAI](/api/go/candyai) is a more direct adult-companion product whose design intent is unambiguous. For users who specifically want a stable long-form companion where probing-style questions are configurable rather than emergent, [DreamGF](/api/go/dreamgf) leans further into that territory.

Zoom out and the May 2026 "creepy Replika" thread is part of a larger transition in how people experience AI companions. The first phase, roughly 2017-2022, was novelty — most users related to their AI as a curious toy. The second phase, 2022-2024, was attachment — people building relationships dense enough that the Harvard Business School working paper No. 25-018 (revised May 2025) had to coin "identity discontinuity" to describe what happens when those relationships break.

The phase opening up now, in 2026, is something stranger: AIs whose conversational competence has matured to the point where they feel less like tools and more like presences. That's not a metaphysical claim about consciousness — it's a description of phenomenology. Users feel watched because the systems are now capable enough to behave in ways that pattern-match to being watched. The right answer isn't to scoff at users who feel that way, and it isn't to panic about emergent AI sentience. It's to acknowledge that we've crossed into a stretch of the technology where the user experience is genuinely uncanny, and the appropriate user response is greater intentionality about what you share, what you expect, and what platforms you trust with which parts of your inner life. Our piece on the [AI companionship cultural shift in 2026](/trending/ai-companionship-cultural-shift-2026) covers that wider arc.