How do you prove AI sent somebody to you?
Iris runs a small distillery and has a suspicion she cannot prove: that some of the people walking in were sent by ChatGPT. Every method she has tried asks the customer to remember. So she tries something else. She puts one sentence on a page and waits to hear it come back.
What can Iris not find out?
Which of her visitors were sent by a machine. She has asked, in all the ordinary ways, and the answers do not add up.
Some people remember and say so. Most shrug and say they found her online. The ones who booked through a third site never saw her form at all. Every method she has is a request for somebody’s memory, and memory is the part that fails.
What she wants is one visitor she does not have to take on trust.
What did mapmakers know that she does not?
That the only way to prove somebody used your work is to put something in it that exists nowhere else. So they invented streets. A short lane, named and drawn, that does not exist on the ground.
Anybody who published a map with that lane on it had copied theirs, and could not argue about it. Dictionaries did the same with invented words. Mailing list owners still seed their own list with one unique address, so a company that rents it and resells it writes to that address and convicts itself.
Same mechanism every time. One marker, unique enough that finding it anywhere else proves where it came from. Iris needs the honest version of that.
What does Iris put on the page?
One true detail, written in words used nowhere else. She adds a line to her visitor page about the bench under the walnut tree where the cask samples get tasted.
It is true, it is hers, and that sentence exists in exactly one place on the internet. Then she does nothing for six weeks, which is the hardest part.
In November somebody arrives and asks whether they can see the walnut tree bench. Iris has never advertised it, never posted it, never mentioned it to a soul. That visitor read her page, or something that read her page told them. There is no third explanation, and for the first time she has a visitor she does not have to take on trust.
What makes a good seed?
Something specific enough that nobody else could coincidentally write it, and harmless enough that Iris would happily say it out loud to a customer. Her bench passes both.
The same test elsewhere. A winery: the name the crew uses for the block at the top of the hill. A law firm: that the first consultation happens in the library rather than a conference room, and why.
A boutique lodge: the shortcut down to the water that takes eleven minutes and is on no map. A nonprofit: the name of the founder’s dog, who comes to the office on Fridays.
Each of those is true, checkable, and unique to one organization. None would appear in a competitor’s copy by accident.
What must a seed never be?
False. This is the whole boundary, and it is not a technicality.
A mapmaker’s fake lane harms nobody. It is a marker on a document, and no traveler is worse off. If Iris had invented a tasting room she does not have, she would have published something untrue about her distillery in the exact place ChatGPT and Gemini go looking for facts to repeat.
So the thing you invent is the wording, never the fact. Iris took something real that nobody had bothered to write down, and wrote it down in her own words. The uniqueness comes from the phrasing and the specificity, not from fiction.
But could a person not just read it on her website?
Yes, and that is the honest limit of what Iris has built. Anything ChatGPT can read, a person can reach. There is no page only a machine sees.
Engineering one — serving different words to crawlers than to people — is called cloaking. It breaks search engines’ own rules, risks your site being penalized, and is a strange thing to attempt while asking to be described accurately.
What Iris did instead was pick somewhere a customer is unlikely to bother reading. The bench is not on her home page. It sits in the eleventh paragraph of her visiting page, below the parking. A model fetching her site reads all of it. A person skims three pages and leaves.
Structured data is the quietest version of that. A business description inside a page’s markup is read by machines and shows nothing on screen, so somebody would have to open the page source to find it.
Worth saying in the same breath: our own standing rule runs the other way, because anything living only in markup is something nobody has checked. One seeded sentence is a narrow exception, not a licence to hide copy there.
One thing a seed must never be is a variation. The facts about a business — name, address, phone, what you sell, who for, how big you are — stay word for word identical everywhere, and that agreement is the whole reason you get named at all.
Iris’s bench sits on top of those, in one place. Nothing anywhere contradicts it, because nothing anywhere else mentions it. Absence is not disagreement, and that is the difference between adding a detail and starting an argument with yourself.
What does Iris end up knowing?
More than she did, and less than she would like. She told the two people who staff the phone and the door what the sentence was, and to note the date when somebody used it. One person repeating it was a story. Five over the quarter was a channel.
Unlike a source question on a form, there was nothing for anybody to misremember. They either used her words or they did not.
What it does not tell her is which of her sources the answer was built from, and that is the price of keeping her facts identical everywhere. She takes the trade.
Two more limits worth knowing before you copy her. It took six weeks, because the page had to be fetched and read before the wording could turn up in anybody’s answer. And the exclusivity decays — directories copy your wording, aggregators scrape it, and eventually the phrase is no longer yours alone.
That last one is worth knowing rather than mourning. The day a seeded sentence starts appearing in other people’s listings is the day you learn how your words travel.
Common questions
How can I prove ChatGPT sent a customer to my business?
Publish one true detail about your business, worded in a way that appears nowhere else, on a page anybody can reach. When a customer repeats that wording back to you, they read that page or something that read it told them. It is the only method that produces proof rather than an inference.
What should I never use as a seeded detail?
Anything untrue. Inventing a room, a product or a service to catch referrals puts false information about your business into the answers people are given about you. Seed a distinctive wording of something real instead.
How long does a seeded detail take to work?
Weeks. The page has to be fetched and read before the wording can appear in an answer, so treat the first month as setup rather than measurement.
Is there anywhere only AI can see and people cannot?
No. Anything a model can read, a person can reach. Serving different content to crawlers than to people is cloaking, which breaks search engines’ rules and risks your site being penalized. Pick a place customers rarely read instead, and keep the seed as an addition to facts that stay identical everywhere.
Want to know what AI says about you first?
The AI Visibility Check asks ChatGPT, Gemini and Perplexity about your business and shows you what comes back.
Run the free check →Editorial. DigiVino, September 2026.