Hidden PDF text can smuggle instructions to AI models reading bank statements

The developer of the Damasqo Capture bank-statement extractor showed that a PDF's hidden text layer (white text, tiny fonts, covered amounts) can carry instructions for language models that read statements. His model-free engine rejected tampered amounts and hidden transactions but passed a hidden command in a payment description as SUCCESS.

• A 50,00 amount covered with 5,00 and a hidden 400,00 transaction were rejected on balance mismatch
• A hidden instruction inside a payment description passed as SUCCESS with two soft warnings
• Two of ten real statements on disk carried 36 white characters on page one
• WhatsApp help pages had hidden text on 80 of 545 pages; Meta called it a fixed bug