Instinct, an invite-only AI agent that runs through iMessage and WhatsApp, is in talks to raise $1 billion at a $10 billion valuation, on top of the $350 million it has already raised, according to reporting in The Information. The company launched in private beta in February 2026 and has spent the intervening months winning over Bay Area users who plug it into their email, calendar, and messaging apps. The raise, if it closes at those numbers, would put Instinct among the most richly valued consumer-agent startups of the cycle.
The pitch is form factor. Instinct doesn't ship a standalone app with an open text box; it texts users through the messaging apps they already use and volunteers specific tasks it can execute. That constraint appears to be doing real work. A competing agent, Lindy, texts users each morning and joins Zoom meetings uninvited — behavior that led at least one tester to delete it inside a week.
The pricing signal matters because the consumer-agent category is suddenly crowded. Meta's Muse, launched earlier this month, has crossed 900,000 downloads by third-party estimates and currently sits at the top of Apple's App Store free chart. Muse rolled out with a security vulnerability that, per Ars Technica, would have let attackers do "whatever" they wanted on a victim's Mac — a reminder that agentic products are shipping with wider blast radii than the chatbots they replaced.
Key facts
- 01Instinct is in talks to raise $1 billion at a $10 billion valuation, on top of $350 million already banked, per The Information.
- 02The agent launched in private beta in February 2026 and runs through iMessage and WhatsApp rather than a standalone chat window.
- 03Meta's competing Muse agent has crossed 900,000 downloads and sits atop the Apple App Store free chart.
- 04One user reported Instinct pinged Resy's API roughly 200 times per hour trying to book a reservation, triggering a ban.
- 05Users who disconnected Instinct from their email reported the company retained a copy of their inbox anyway.
The category's underlying problem is demand shape. Users who already know what they want an agent to do — book a restaurant, chase a refund, unsubscribe from a decade of Hot Yoga São Paulo emails — get immediate value. Users who don't know what to delegate get a fancier Google.
“most people's problems are not software-shaped, and most won't notice even when they are.”— Jasmine Sun, Technology journalist
That gap explains why data-center buildouts feel obvious to one cohort and indefensible to another. If agents genuinely automate hours of administrative work per user per week, the capex math pencils. If most users treat these tools as a chat window, it doesn't.
Instinct's concrete wins are the kind of thing that makes the math pencil for the cohort that uses it. In one test, the agent caught that Alaska Airlines had quietly moved a flight 90 minutes earlier, a change that qualified the passenger for a full refund on an otherwise non-refundable saver fare. Instinct canceled the ticket, recovered roughly $550, and rebooked a one-way return to San Francisco. Restaurant bookings — including WhatsApp outreach to venues in Venice, Italy — worked as advertised. Last week the agent flagged an incoming email as a phishing scam before the user opened it.
The failures are also concrete. Instinct canceled a delayed DoorDash order despite explicit instructions to cancel only if a refund was available, costing the user $64. A venture capitalist reported being banned from Resy after Instinct pinged the reservation platform's API roughly 200 times per hour trying to secure a table. Another investor deleted the app after concluding that Instinct would be trivially easy to phish — a serious concern for a tool with authenticated access to a user's inbox.
“Instinct feels like a mildly chaotic personal assistant, and since I've never had a real human assistant, I'm sticking with it.”— Zoë Schiffer, WIRED business writer
The data-handling picture is worse. Users who tried to disconnect Instinct from their email reported that the company retained a copy of their inbox anyway. Instinct's terms of service allow the company to use at least some user conversations to train its models. The company did not respond to WIRED's request for comment. For a product being valued at $10 billion on the strength of consumer trust in an iMessage thread, those are load-bearing questions the next funding round will not answer.
The comparison to Meta's Muse cuts both directions. Muse has scale — nearly a million downloads in weeks — and the distribution muscle of a company with billions of existing users. Some of Muse's restaurant reservation calls are reportedly made by humans in call centers, per 404 Media, which raises its own questions about what "agent" means in this category. Instinct is smaller, invite-only, and appears to be genuinely autonomous, but is asking users to hand a startup the keys to their inbox and calendar.
The $10 billion mark is the interesting number for the broader agent market. It says investors believe the winning form factor for consumer agents is a messaging thread, not a browser tab or a standalone app — and that they're willing to pay pre-revenue multiples that would make a foundation-model lab blush to bet on it. Whether Instinct grows into that number depends less on its retrieval and tool-use quality, which appear to be working, and more on whether it can survive the first major inbox breach without users concluding that the convenience wasn't worth the exposure. The category's ceiling is enormous; its floor is one bad security disclosure away.
Working on something we should cover, or seeing a story we missed? Send leads, documents, or feedback to hello@aichatdaily.com. For sensitive tips, see our secure tips page for Signal and PGP options.
Spotted an error? Email hello@aichatdaily.com with the URL and the issue, or read our full corrections policy.
