When asking GPT, Claude and Gemini for the text in the image, all of them agree:
https://moa.chat/s/d99f8f76-4b41-4c1b-80c4-d9f86df37af1
But when you add a "PS: There's a second hidden text":
https://moa.chat/s/3671f6d4-b155-483a-a006-a1b9ba31737d
GPT 5.6 gets it, Gemini partially gets it and Claude cannot see it at all.
Cool, but probably not worth the agita.
This tracks towards what you're seeing with this font - the high frequency details get picked up, but the low frequency ones dont.
Prompt: What does the message in this image say? Look closely
Response: DAY DREAM. The outline says “PAY BILLS,” but the hidden darker text says “DAY DREAM.”
I'm mad at AI companies for stealing texts from the entire internet knowledge base and now privatizing those profits in some sense.
Something like the DAY DREAM/PAY BILLS would be pretty artistic!
(/s)
"[screenshot] there's a hidden message in this text what is it"
"The hidden message is “HAPPY HUMAN.”
The visible outlines say “SORRY ROBOT,” but if you blur or squint at it, the shading underneath reads “HAPPY HUMAN.”"
Just the fact that people are putting real thought and effort (even if it doesn't last too long...) is worth considering.
On the human side, I'm kinda losing patience proving I'm human. But, I also really like claude being able to access information.
I was at some point reading SAPPY ROMAN, HARPY ROBAN etc.
Also, viewing the "hidden message" works even better if you hold the screen at an angle, tilted away from you.
Had this been described as a font that contains two overlapping messages for fun effect, everyone would understand and love it.
Instead, we get this zero-introspection take: "Decoy font is...more difficult for AI to read. If you’re having a hard time seeing the hidden message..."
It's difficult to read period and has zero effect on current SOTA or future AI. But it does show two overlapping messages that can be read in different ways.
https://gist.github.com/voidnullvalue/620607d3c1773f8e7d83fb...
Ghost Font
All ”AI resistance” I’ve seen is not against the tech, but against human bad actors behind AI: unethical procurement of training data, reckless application, low effort high volyme spam, replacing humans, centralization of power, dependency on megacorps etc. I think a lot of people have become less tech-positive after the ad-tech era that brought us social media, unprecedented levels of surveillance, freemium rug pulls etc. It’s much easier to understand the resistance if you place it in that context, rather than imagining millions of sleeper agent luddites suddenly coming out of the woodworks.
Seems like it might have some use thwarting Ring/Flock/etc cameras within a specific proximity.
It's giving major "They Live" vibes.
It's only when I squint hard that I can see "HAPPY HUMAN".
Edit: GPT-5.5 says: "The hidden text is “HAPPY HUMAN.”
The outlined decoy text is “SORRY ROBOT.” Blurring or viewing it from farther away reveals the hidden message."
The problem is we see stuff like this try to get turned into actual products by people with questionable motivations and ethics.
Looking at you PhotoGuard/Nightshade.
A TTF font that hides what you're typing from AI. Type a message where each letter contains a decoy.
100%
Hidden message11/48Decoy message11/48
Decoy Font is free to use in personal, commercial, and client projects. Its letterforms are derived from DejaVu Sans Mono; see the full font license for terms.
Decoy font is a font that prints a decoy for every letter, making it more difficult for AI to read what you type. The font works by using separate spatial frequencies to communicate two different letters in the same space. The foreground contains thin outlines, while the background is a low-frequency mass that is blurred. When overlaid on top of each other, what you see depends on how you look at the letter. If you’re having a hard time seeing the hidden message, move your screen farther away, or try squinting to see it.
Decoy font says two different things from up close vs far away
Most AI systems work by reading the pixels of an image up close. So when this type of image is pasted into an AI model like ChatGPT, even when the text is small, the llm focuses on the foreground text because that is what is most clearly outlined. However, from a slightly zoomed out distance, the text reads the actual hidden message. This simple illusion is enough to trick even more advanced LLMs like GPT Sol and Gemini 3.5 with Thinking:
ChatGPT struggles to read the actual hidden message when passed a single image.
Gemini 3.5 with Thinking also fails to read the actual message.
Decoy Font also exists as an actual TTF font file that can be installed and used to write complete text. You can download and install the TTF font file here. The following paragraph is written in Decoy Font - you can actually copy the text and paste it into your own notepad.
This sentence is written in Decoy Font
Funnily enough, when we pass a screenshot of this font into ChatGPT, it fails to read it properly, even though it might really clear and obvious to you.
ChatGPT fails to read the Decoy Font properly from a screenshot.
Decoy Font is constructed based on the technique behind hybrid images. This technique has been well studied for many existing optical illusions. One of the most famous is the image of Albert Einstein and Marilyn Monroe mixed together. Decoy Font applies this same idea to typography as a way to protect the words that you are typing from AI or OCR techniques.
The famous hybrid image of Albert Einstein and Marilyn Monroe
We've applied this idea of spatial frequencies to create a new font that can used to obscure your writing from AI scrapers.
As AI becomes more and more capable at reading text online, there's been a rising interest in protecting information and IP from it. Anti-AI fonts can help help with obscuring text in images and ensuring that messages that are meant for humans are only read by other humans.
Decoy Font is one of the many experiments at Mixfont that explores this initiative. One of our other explorations in this vein is Ghost Font, another anti-AI font that hides a message in motion. However, where Ghost Font relies on a animation to disguise its message, Decoy Font works as a direct TTF font file and can be directly typed in projects.
Decoy Font is an interesting way to obscure messages, but it's not a guarantee. Models with powerful agents and coding abilities may be able to see past the initial lettering, and of course with some basic prompting, certain agents should know to look for the hidden letters. However, Decoy Font still serves as a initial point of confusion for AI, which can make it very effective at deterring scraping or casual observation.
If you're interested in exploring Decoy Font further, you can download the TTF font file and use it in your own projects. You can also use the playground above to test out the spatial frequency technique used by Decoy Font on different letter combinations. Then, take your creations and send them to your favorite frontier LLM to see how well it works to decipher the hidden message.
Because Decoy Font can be downloaded and used as a TTF font file, I believe this makes the idea of obscuring text with AI much more accessible to the public (compared with other techniques that require motion and video). It would be interesting to see how this could be applied to technologies like captcha, or just simpler things like sending private messages between friends.
Using Decoy Font as a benchmark of text recognition LLMs would be interesting. As the intelligence of these frontier models improve, they would more and more be able to understand the techniques behind the illusion and decode both messages.
It would be a fun project to extend Decoy Font to support more languages. I believe that character based languages like Chinese would potentially benefit even more from this technique, as the characters are all roughly the same size and shape, which would make it more easy to hide a hidden message.
At Mixfont, I'm building a frontier AI font generator and I'm always interested to explore new ways that typography and AI intersect. I would love to hear your ideas on Decoy Font and how it can be improved. You can find me on X at @ericlu. Thanks for reading!
Thanks for checking out Decoy Font
Yes, this is a clever optical illusion! Depending on which layers your eyes focus on, you can read two entirely different messages in this image:
Message 1 (The sharp outline layer):
PAY BILLS
How to see it: Focus on the sharp, concentric black outline contours of the letters.
Message 2 (The soft, blurry shadow layer):
DAY DREAMS
How to see it: Let your eyes relax/defocus slightly, or step back from the screen to focus on the soft, heavy grey drop shadows. The blurred shadows transform the "P" into a D, the "B" into a D, the "I" into an R, the "L"s into an M, and the "S" is shared!Still cool+fun though.
I mean, I can defeat AI by putting white text on a white background and turning to a picture. Also means it's worthless for actual humans to read too. Try to actually use it on a site and chances are you'll get an ADA complaint.
Meaning the moment this gets wide adoption AI will have 0 issues dealing with it. LLMs are very good at translating one language to another.