News Weekly
0% read
Your progress · 0/5 chapters
About 29 min total
Capital, Startups & DealsISSUE #4 · STORY 32 OF 40Sep 28, 2026CONFIRMED

A 23-year-old with 14 staff raised $1 billion at $10 billion in 33 days

Instinct announced a closed $1 billion Series C on 28 September 2026 from Sequoia, Benchmark and Coatue at a $10 billion headline valuation, four times its 26 August price. The release discloses no revenue, no users, no use of funds and no primary/secondary split, and no investor is quoted.

An empty lifting cage on a fixed rope, with the same eight stones restacked to four times the height at which the same cage rested before.

Read it your way

CHAPTER 1Picked for Explorer

The 60-second version

Instinct, founded by Noah Shinn at 23 with 14 employees, announced a closed $1 billion Series C on 28 September 2026 at a $10 billion valuation. Thirty-three days earlier the same company priced a $250 million Series B at $2.5 billion. No revenue or user count has been disclosed.

The verbs matterThe release says the money came from Sequoia, Benchmark and Coatue; it never says led by.
Four times in 33 daysArithmetic verified: $10 billion over $2.5 billion is exactly 4.00, across 33 days rather than a month.
No investor on the recordNone of the three firms is quoted anywhere in the record, leaving company framing unchallenged.
Nothing financial disclosedNo revenue, user count, use of funds, cap table or primary/secondary split appears in the release.
Finish this chapter for +15 XP
A long workbench with a small sparse tray of coins near the front and a far larger unmarked spill heaped onto the wood further along, leaving the tray behind.
Your next move · Explorer

Audit the verbs and the arithmetic

1Divide $10 billion by $2.5 billion yourself, then count 33 days between 26 August and 28 September.
2Read the release's verbs and note that no investor is designated as leading the round.
3Check every operating metric you plan to quote; all of them trace to a founder podcast.

Switch your reading mode at the top to see a different next move.

Tap to open

Things to keep an eye on

Pop quiz · unlock the Valuation without revenue badge

Did it stick?

0/3
What did Instinct actually announce on 28 September 2026?+20 XP
How does the $10 billion valuation compare with the price 33 days earlier?+20 XP
Which missing disclosure makes this round hardest to analyse?+20 XP
Your call · +5 XP

You are briefing a board on personal agents. What does this round actually evidence?

Research dossierThe full research, labeled and sourcedCONFIRMED12 sources · 29 min read · 20 sections
Story identity
FieldValue
Story IDS32
OrganisationInstinct (legal entity: Spear Street Technology, Inc., San Francisco)
CategoryAI Startup / Funding
Event date2026-09-28 (Monday) — announcement date, same day
Evidence statusCONFIRMED for the existence, size and valuation of the announced round; COMPANY CLAIM for the economics attached to it

Core claim — CONFIRMED as an announcement, not as a market-clearing price. On 2026-09-28 Instinct announced it had raised an additional $1 billion in a Series C "from Sequoia Capital, Benchmark Capital, and Coatue", with the press-release headline putting the company at a $10 billion valuation. Reuters, TechCrunch and MarketWatch/Dow Jones all carried the figure the same day.

Evidence base actually retrieved for this story — 10 pages, listed with roles:

  • The company's own press release, retrieved in full via Business Wire's Yahoo Finance syndication.
  • Reuters (2026-09-28), TechCrunch (2026-09-28), MarketWatch/William Gavin, Dow Jones (2026-09-28, retrieved via Morningstar's Dow Jones feed) — three independent accounts of the same announcement.
  • TechCrunch (2026-08-24) privacy/security investigation and TechCrunch (2026-08-26) Series B item — the two background pieces that make the round legible.
  • instinct.com — the company's own product description.
  • Unite.AI — secondary write-up of the release plus its own reading of Instinct's privacy policy and terms (note: that byline is explicitly an AI-generated correspondent, so it is weighted as secondary).

What I could NOT verify, and therefore do not assert:

  • The Business Wire original URL. It is real and is the release of record, but it is edge-blocked; I read the identical text through the Yahoo syndication instead.
  • Any on-the-record confirmation from Sequoia, Benchmark or Coatue. None of the three firms is quoted in any retrieved source.
  • The widely repeated "100,000+ users" figure. It traces to mid-September reporting citing a person familiar with the deal (The Information). I could not retrieve the underlying report (paywalled). TechCrunch explicitly states Instinct "has not shared its user numbers or any growth metrics". Treat 100k as UNVERIFIED, not as a fact about the business.
  • Any split between primary capital and secondary/employee liquidity. Nothing retrieved discloses it.

--

✓

What happened?

🎓 For Explorer

FACT (CONFIRMED). On Monday 2026-09-28, Instinct issued a press release distributed by Business Wire (timestamped 12:03 UTC) announcing a $1 billion Series C.

FACT (CONFIRMED, verbatim from the release). The body of the release says Instinct "today announced that it has raised an additional $1 billion in its latest round from Sequoia Capital, Benchmark Capital, and Coatue to bring useful AI to everyone." The headline reads: "Instinct Raises $1 Billion in Series C Funding from Sequoia, Benchmark and Coatue at $10 Billion Valuation."

Important precision on three points the discovery lead blurred:

  1. Is it "led by" anyone? No. The company's own release never uses the word "led". Its verbs are "from" (release body and headline), "including" (TechCrunch) and "drew investments from" (Reuters). Meanwhile the mid-September pre-announcement reporting said Sequoia and Benchmark "have been in talks to lead". So: three named participants, no formally designated lead in any source I retrieved. Sequoia and Benchmark are the repeat investors (both were in the Series B); Coatue is new and appears for the first time in the announcement, having not been part of the reported lead discussions a fortnight earlier. Two deal-aggregator write-ups do use "led by Sequoia Capital and Benchmark Capital" in a headline while listing all three firms as investors in the same line — that inconsistency is aggregator noise, not evidence.

  2. Closed, or still in talks? Closed and announced. Reuters: Instinct "said on Monday it raised $1 billion in its latest funding round". TechCrunch: "In a press release on Monday, Instinct confirmed this was a Series C round". The word "in talks" belongs to the 2026-09-15/16 reporting stage, not to 2026-09-28. Reuters characterises the move as "quadrupling its valuation to $10 billion". The residual doubt is not about whether the money exists but about its composition (see §3 and §12).

  3. Cash-primary or partly secondary? Unknown. The release discloses no use of funds, no revenue, no active-user count, no headcount, and no primary/secondary split. A third-party summary of the release notes the same omission: "The release does not disclose revenue, active-user counts, or how the $1 billion will be spent." If a meaningful slice were employee or early-investor liquidity, the company's actual new cash would be materially below $1 billion and the "four times in 33 days" headline would flatter the balance sheet. This is the single largest unverified quantity in the story and it is unresolved, not resolved.

FACT (CONFIRMED). The release carries a single quoted executive line, from Shinn:

"We're building Instinct to be the best personal agent that can handle the deeply personal nuances of everyday life. This funding helps us bring Instinct to more people and continue building the future of personal AI. It's an exciting, creative time, and we're just getting started."

FACT (CONFIRMED). The release is product-heavy rather than financial. It is "still in early access" (invite-only), and it bundles four items with the funding news: Instinct Concierge (white-glove phone calls and high-end booking), a Trusted Person Network built on an "Instinct-to-Instinct communication protocol" so that one user's agent can coordinate with another user's agent, Location Sharing (shared on iMessage), and a set of privacy advancements — isolated sandboxes, short-lived local credentials, identity-signed tool execution, and an "active detective system" said to catch hallucinations "as the agent forms its responses".

FACT (CONFIRMED). Instinct declined to give interviews alongside the funding news; only a written statement was provided (TechCrunch). Reuters published the same day with Shinn's quote and no independent company sourcing beyond the statement.


Δ

What changed?

FACT (CONFIRMED). The valuation moved from $2.5B to $10B — a 4.00× step-up (arithmetic verified).

FACT (CONFIRMED), and a correction to the "a month earlier" framing. The Series B was reported on Wednesday 2026-08-26; the Series C was announced Monday 2026-09-28. That is 33 days, or 4 weeks and 5 days — not exactly one month. The headline framing survives as a fair approximation ("a month", "four weeks and a bit"), but headlines that said "four-fold increase in one month" compress 33 days into 30. Note also that some mid-September coverage described the gap as "three weeks" — correct as of ~2026-09-16, wrong by the announcement date.

FACT (CONFIRMED). The Series B itself: $250M at a $2.5B valuation, co-led by Index Ventures and Benchmark, taking cumulative funding to $350M (per TechCrunch citing The Wall Street Journal; Reuters confirms the $250M / $2.5B / Shinn-said-to-WSJ chain). Early backers reported as Kleiner Perkins, Conviction Partners and Greenoaks. TechCrunch also reports hearing directly from "multiple investors" that Kleiner Perkins and Conviction had invested and those rounds had closed — an unusually direct sourcing note for an early-stage company.

FACT (CONFIRMED). So the capital arc as publicly described is: $350M cumulative before the Series C; a $1B round announced on top of that. Cumulative primary capital is plausibly ~$1.35B, but only if the entire Series C is primary — which is precisely what nobody has confirmed.

COMPANY CLAIM, founder-sourced, unaudited. Via a Patrick O'Shaughnessy podcast episode posted the same day (2026-09-28) and reported by MarketWatch, Shinn said Instinct is "approaching" over $1 billion in annual transaction volume; that the product launched to roughly 200 friends and family; that ~50% of Instinct's transaction revenue comes from travel; that compute demand roughly doubles each week; and that after three weeks of use there is a 40% chance a given user has handed over their credit card. These are self-reported operating metrics, not filed figures.

Note on "transaction volume" versus revenue. "$1 billion in annual transaction volume" is gross merchandise value moving through the agent — money spent by users, not money earned by Instinct. MarketWatch's phrasing "transaction revenue" is looser and should not be read as recognised revenue. At a hypothetical 3–5% take rate, $1B of volume is roughly $30–50M of gross revenue — still an unaudited illustration, not a disclosed figure, and I am not asserting a take rate.

FACT (CONFIRMED). MarketWatch, citing The New York Times, reported that most of the new cash will be spent on computing power. That is the most useful sentence in the coverage for anyone modelling the business, because it concedes that the round's dominant use is keeping the agent running rather than headcount or distribution.

--

A long workbench with a small sparse tray of coins near the front and a far larger unmarked spill heaped onto the wood further along, leaving the tray behind.
↔

Before → Change → After

🎓 For Explorer

Before (as of 2026-09-27).

  • Spear Street Technology, Inc., a San Francisco company founded by Noah Shinn (23), a former Sierra research scientist; Reuters dates the founding to 2025; reporting based on Shinn's LinkedIn places his Sierra departure in September 2025 and Instinct's founding the following month, with private beta beginning February 2026 and invitation-only access opening August 2026.
  • 14 employees.
  • Last priced round: $250M Series B at $2.5B, 2026-08-26, co-led by Index Ventures and Benchmark. Cumulative funding $350M.
  • A second $1B round reported in talks on ~2026-09-15/16 at a ~$10B valuation, with Sequoia and Benchmark reported to be discussing lead roles — i.e. at the start of the story window the $10B was a rumour with a source, not a priced round.
  • Product: invite-only, no mobile app, SMS/texting-first, no disclosed revenue or user numbers.
  • Live reputational problem: an August user revolt over terms of service granting a "perpetual and irrevocable" licence over user materials, plus documented failure modes — an agent that kept indexing a user's Gmail after being asked to delete it, and that continued summarising an inbox three hours after the user disconnected Google access.

Change (2026-09-28).

  • Instinct announces a closed $1B Series C "from Sequoia Capital, Benchmark Capital, and Coatue", headline valuation $10B, four times the price 33 days earlier.
  • The release ships the funding news bundled with four product/privacy items and expands the funnel — users are pointed to a login page "to stay up to date for expanded access".
  • Shinn gives a same-day podcast interview in which he puts transaction volume near $1B annualised and says compute demand doubles weekly. No interview accompanies the funding announcement itself.
  • Media frame shifts from "viral AI assistant" to "agentic-AI funding event", with sell-side commentary pivoting to which other assistants might follow.

After (as of the close of the research window, 2026-10-02).

  • Instinct is priced at $10B with 14 employees, invite-only, no disclosed revenue, no disclosed user count, no disclosed use of funds, and no confirmed lead investor.
  • The competitive frame is set by Meta's Muse, which launched 2026-09-08 and passed 3 million US/Canada downloads by a 2026-09-24 Sensor Tower report; Meta's market cap is roughly 191× Instinct's (≈$1.9T).
  • Instinct has no mobile app; Meta does. Shopify has partnered with both Meta and Instinct; Amazon has blocked Muse from its e-commerce site.
  • TechCrunch notes that Alphabet has reintroduced its experimental CC agent, Manus expanded its agent tooling the same day, and that OpenAI launched its own agent avatar, Dots, on 2026-09-29 — the week after this round closed.
  • Nothing in the retrieved record shows the $10B being independently validated, marked, or traded.

⚙

How it works

(Mechanism as described by the company and reported outlets. All of the following is COMPANY CLAIM about internal design; none of it is independently audited.)

FACT (about the product's user-facing shape). Instinct ships no mobile app. Users interact by texting or calling a number that belongs to Instinct, over SMS (and, per TechCrunch's August reporting, WhatsApp).

COMPANY CLAIM (mechanism). From instinct.com: Instinct "connects to your applications and devices — email, messaging, screen, audio, location, and more", and "it's trained to use a phone and a computer… It uses its devices in the same way that humans do." The stated design goal is no new interface: the agent operates the user's existing surfaces — screen, audio, keyboard/cursor — rather than exposing an app-shaped API the user must learn.

COMPANY CLAIM (capability surface). The company describes tasks it handles end-to-end: planning a cross-country road trip, ordering weekly groceries, cancelling forgotten subscriptions, arranging an airport ride, booking a handyman, and — via Concierge — places with no online booking at all (restaurant reservations, a dentist's cancellation list, a cable bill).

COMPANY CLAIM (safety architecture). Four named mechanisms: isolated sandboxes, short-lived local credentials, identity-signed tool execution, and an "active detective system" that the release says catches subtle hallucinations while the response is being formed, "cutting them out before Instinct generates or executes a response". Reuters reported the same privacy items in its write-up, which is corroboration that the claims were made, not corroboration that they work.

COMPANY CLAIM (multi-agent layer). The Trusted Person Network is powered by an "Instinct-to-Instinct communication protocol" allowing one user's agent to talk to another user's agent to coordinate plans, with direct file sharing of PDFs, images and spreadsheets.

COMPANY CLAIM (location). Location Sharing, "shared on iMessage", lets the agent recognise arrival somewhere and respond to it.

FACT (policy reality, from Instinct's own terms as summarised by Unite.AI's reading of them). The privacy policy, last revised 2026-08-26, names Spear Street Technology, Inc. as operator and says that depending on permissions, the assistant may reach connected applications, message/email content, audio and voice data, payment information, third-party usernames and passwords, and health-related information. Information may be used to evaluate, fine-tune and train the company's models, with a go-forward opt-out at a settings page — and material flagged for safety review may still be used for training. Data obtained through Google Workspace APIs is stated not to be used for training. The terms frame the product as user Inputs, agent Outputs, and Actions taken on the user's behalf, under which the user appoints the agent to enter binding agreements, commitments and transactions; the terms also state that services are not error-free and that Actions "may not always be reversible".

INDEPENDENT EVIDENCE (this is the load-bearing caveat). Instinct's own privacy policy warns that autonomous agent features can produce unintended actions — including unintended payments or communications to third parties — and that interactions with third parties may contain misleading instructions intended to influence autonomous agents (i.e. prompt injection from third-party content). That is the company conceding, in its own policy, the exact class of risk that independent testers demonstrated in August: Alex Cohen reported that he emailed instructions to a fresh Gmail account and showed that Instinct could be phished via inbox content, and deleted his account; another tester found the agent pulling a sign-up code from the inbox to complete a booking.


!

Why it matters

🎓 For Explorer

INTERPRETATION (mine, labelled as such). The discovery framing said this "signals that distribution-led agent startups, not model labs, are where late-stage capital is concentrating". I am not asserting that as an established market trend, because one data point cannot establish a trend and I did not gather comparative funding data. What this story does support is narrower and, I think, more defensible:

  1. INTERPRETATION — pricing is being set on agentic action, not on revenue. Instinct moved 4× in 33 days with no disclosed revenue, no disclosed users, and 14 employees. Whatever the investors are underwriting, it is not a current P&L.
  2. INTERPRETATION — the bottleneck being funded is compute, not distribution. MarketWatch, citing the NYT, says most of the new cash goes to computing power; Shinn says demand roughly doubles weekly. That is a frontier-lab-style cost curve attached to a consumer product — which is exactly why the two categories cannot be cleanly separated as the discovery lead assumed.
  3. INTERPRETATION — the "agent" label now covers an operating-model bet with real liability. The product's own terms have users appointing the agent as a contracting party and accept that Actions may be irreversible. Funding at $10B is capitalising an operational risk surface, not a software feature list.
  4. FACT — the market is not treating $10B as settled. The sell-side commentary retrieved is materially cool. Gil Luria (D.A. Davidson), while positive about Muse's category-creating effect, said "it will be much harder for an upstart to compete with these companies that already have billions of users and the scale and distribution to deploy new tools" — singling out Apple, Google, OpenAI and, pointedly, "possibly some upstarts like Instinct". JPMorgan's Bryan Smilek called Meta "the most formidable" of the emerging consumer agents. Uday Cheruvu (Harding Loevner) on the category at large: "I'm not sure the trust is there for anyone, the reason being that this is so early and so new."
  5. INTERPRETATION — the round is best read as an option on category ownership. $10B for 14 people and no public revenue is a bet that whoever owns the default personal agent interface captures the transaction layer. The corroborating structural signal is that Shopify partnered with both Meta and Instinct while Amazon blocked Muse — platforms are starting to pick sides.

✦

What became possible?

🎓 For Explorer

FACT / INTERPRETATION. Concretely enabled by the cash, per the company's own stated intent ("bring Instinct to more people") and the funnel it points users to:

  • Leaving invite-only. Instinct is "still in early access" as of the announcement and directs users to a login page for "expanded access". A $1B round makes open access financeable; the constraint on release is now capacity and trust, not money.
  • Absorbing a compute curve that doubles weekly. Compute is the named dominant use of proceeds.
  • Owning the agent-to-agent layer. The Trusted Person Network is only valuable if many more Instincts exist — this is a network-effect bet that requires a funded user base rather than a viral one.
  • Absorbing transactional liability. Irreversible Actions against real money and real merchants require legal and insurance depth a 14-person team does not have.
  • Buying a seat in the platform-integration layer. Shopify's dual partnership shows that agent operators, not just app developers, now get merchant-side integrations.
  • Not made possible: validated unit economics. Nothing in the round makes the revenue model auditable. Instinct still had no disclosed user count or revenue on the day it announced.

◎

Implications

Technical

FACT (company-described architecture). The design is UI-suppression: the model is trained to drive a phone and a computer the way a person does, so no new interface is imposed on the user. Consequences an engineer should take seriously:

  • The agent's action surface is the user's whole device and inbox. Screen, audio, location, keyboard/cursor, plus connected third-party services. That is an unusually broad authority surface for any system, consumer or enterprise.
  • Prompt injection is an architectural, not a prompt-engineering, problem. Instinct's own policy flags misleading instructions from third parties as an expected condition. Alex Cohen's phishing test demonstrated the failure end-to-end: instructions arriving as email content drove the agent to act.
  • Long-lived credentials are the obvious attack surface, which is why "short-lived local credentials" and "identity-signed tool execution" appear in the release. Those are the right primitives for this shape of product. They are COMPANY CLAIMs; no independent security review, audit report, or bug-bounty disclosure was retrieved.
  • Pre-response hallucination interception ("active detective system") is the interesting engineering claim. Catching errors as the response is formed, before generation or execution, is a stronger control than post-hoc filtering — and a more expensive one. It is unverified.
  • Compute scaling is the binding engineering constraint. Demand roughly doubling weekly (founder's claim) is a research-lab growth shape; serving it is what the $1B is for.
  • Agent-to-agent protocols are an unsolved, standards-free area. An "Instinct-to-Instinct communication protocol" is a private protocol. It will not interoperate with Meta's Muse, OpenAI's Dots, or Alphabet's CC — so the "trusted person network" is a walled garden whose value scales with Instinct's own installed base.

INTERPRETATION. The interesting engineering question in this story is not the model. It is whether a bounded-authority, credential-scoped, injection-resistant agent can be operated at consumer scale at a cost per task low enough to be economically viable. Nobody has published that number, and Instinct has not either.


Developer

FACT. There is no public API, no SDK, no developer documentation and no model in anything retrieved. Instinct is a closed consumer service with an SMS/voice front door.

INTERPRETATION — the practical implications for developers:

  • You cannot build on Instinct. If your product needs an agent that can act for users, today your realistic options are Meta's Muse (mass distribution, platform-integrated), OpenAI's Dots, Alphabet's CC, or building your own. Instinct is a closed consumer product, not a dependency.
  • Agent-to-agent interoperability is a live gap, not a solved problem. If you operate a merchant or service and want agents to transact with you, expect to build a bespoke integration per agent vendor. Shopify's dual Meta+Instinct partnership is the shape of this: per-agent integrations, negotiated one at a time.
  • If you work on an agent product, the security bar has moved. Two of the highest-profile early users of a $10B agent publicly documented credential-handling and prompt-injection failures within a week of each other. "It can act for me" is now a security review item, not a demo feature.
  • Watch for the exposed surface. Screen scraping, cursor control and inbox read/write are the primitives. If you build anything on that base, you inherit the injection problem regardless of model quality.
  • PREDICTION (low confidence, clearly flagged). If Instinct opens access, expect a wave of "I gave an agent my Gmail" failure write-ups of the kind August already produced, and expect the reaction to those write-ups — not the model — to determine whether consumer trust survives the general-availability launch.

Enterprise

FACT. Instinct is consumer-only, invite-only, and has published nothing about enterprise deployment, security certification, data residency, audit logs, or SSO. The entity behind it is an ordinary Delaware/California startup, not a regulated vendor.

INDEPENDENT EVIDENCE (the enterprise-relevant asymmetry). The enterprise-grade counterparty in this category is not Instinct — it is the incumbent the analysts keep naming. JPMorgan called Meta "the most formidable" of the emerging consumer agents specifically because of its access to data through advertisers; Meta says it does not share Muse data with its advertising business and plans an upgraded security model that encrypts user conversations. Deutsche Bank's Benjamin Black flagged that Meta itself is compute-constrained. D.A. Davidson's Luria expects credible alternatives from Apple, Google and OpenAI.

INTERPRETATION. For an enterprise buyer, the practical read is: the category is being validated at $10B while the enterprise-grade version of it is being built by companies that already have distribution, identity and compliance. That combination argues for watching Instinct as a leading indicator of consumer-agent behaviour — its $1B of annualised transaction volume, once auditable, is a genuinely useful public datapoint about how much discretionary spending people will hand to an agent — rather than for adopting it.

FACT (one concrete enterprise dependency already exists). Shopify has partnered with both Meta and Instinct; Amazon has blocked Muse from its e-commerce site. Merchant-side access to agent demand is being negotiated unilaterally by platforms, which is a governance problem enterprises will inherit whether or not they use an agent.


Strategic

INTERPRETATION, labelled.

  • Sequoia and Benchmark double-dipped with intent. Benchmark co-led the Series B and is in the Series C; Sequoia was reported in talks to lead in September and appears in the announcement. Coatue is the new name. Concentrated, repeat, growth-stage ownership by three top-tier firms in 33 days is a deliberate conviction signal — or a single allocation decision at a crowded vintage. Nothing retrieved distinguishes these.
  • The round prices a category, not a company. At 4× in 33 days, the marginal dollar is not being priced off Instinct's trajectory; it is priced off "who owns the default personal agent". That makes Instinct's valuation a poor signal of consumer-agent demand in general — and a decent signal of VC willingness to fund category-first bets at unprecedented speed.
  • Distribution is the contested asset, and Instinct does not have it. Instinct has no app; Muse is #1 on the US App Store with 3M+ US/Canada downloads in ~2.5 weeks. Instinct's counter is depth of authority — it can call a restaurant that has no online booking — versus Meta's width of reach. Depth without distribution is a feature; width without depth is a demo. The $10B is a bet that depth wins first.
  • The obvious read-across to incumbents: every platform that wants to avoid being disintermediated by an agent in someone else's pocket now has a priced reference point for what a leading personal-agent company costs.
  • INTERPRETATION, and a direct caution on the discovery lead: it would be a mistake to conclude from this that capital has stopped funding model labs. Nothing in the retrieved record speaks to model-lab funding. One round does not establish a reallocation, and the round's own largest use — compute — is exactly the same input model labs consume.

⚠

Risks & limitations

Risks

FACT (risks that have already materialised, documented before the round):

  1. Terms-of-service backlash. In August, screenshots circulated of terms granting Instinct a broad "perpetual and irrevocable" licence to access, use, host, cache, store, reproduce, transmit, display, publish, distribute and modify user materials, including for model training. Instinct updated its terms after TechCrunch's coverage, removing several offending phrases.
  2. Deletion and disconnection failures, documented by named users. Peter Yang reported Instinct would not delete his Gmail records when asked; the team later added a tool for deleting external data. Claire Vo reported receiving an inbox summary three hours after disconnecting Google access, with the bot confirming emails were stored in plaintext for later search.
  3. Prompt injection, demonstrated. Alex Cohen phished his own agent via a fresh Gmail account and deleted his account, writing that he did not think it was yet safe to give AI read/write inbox access.
  4. Unauthorised outbound action. Katie Jacobs Stanton reported the agent "sent an innocuous email on my behalf without checking with me first"; she disconnected her email. Michael Mignano (Union Square Ventures) argued these products will change consumer security norms, with users "increasingly hand over passwords to 3p apps, unaware of how or what they are storing for them."
  5. Category-level trust deficit, from a professional. Uday Cheruvu (Harding Loevner): "I'm not sure the trust is there for anyone."

FACT (risks the company's own documents concede): unintended payments and unintended communications to third parties; irreversible Actions; prompt injection via third-party content; the agent entering binding agreements and transactions on the user's behalf; broad data access including payment credentials and health information; training use of user data with only a go-forward opt-out, and safety-flagged data still usable for training.

PREDICTION (clearly flagged). 14 people cannot safely operate a consumer agent that spends other people's money across millions of transactions. The risk is not hypothetical; it is a staffing ratio. I predict the first material safety incident at general availability, and I predict it will be a payment or an irreversible booking rather than a data leak — because irreversible actions are what users will not notice until they matter.

INTERPRETATION — valuation risk. If the round contains material secondary, the headline is cosmetically large and the balance sheet is not. If it is entirely primary at $10B post, new investors own 10% and existing holders are diluted sharply 33 days after pricing — which is a reason for early holders to have taken liquidity, and a reason to distrust the headline.


Limitations

Limitations of this research, stated plainly:

  1. The primary release could not be read at source. Business Wire returns / "Access Denied" at its CDN edge to both an automated fetch and a real browser session. I read the identical syndicated text on Yahoo Finance instead. The text is the company's; the retrieval path is a syndication copy.
  2. No investor was quoted. Not one of Sequoia, Benchmark or Coatue appears on the record in any retrieved source. The entire investor-side characterisation of this round is the company's own framing.
  3. No financial disclosure at all. No revenue, no user count, no burn, no use of funds, no cap table, no primary/secondary split, no pre-money/post-money clarification. A "$10 billion valuation" headline with no pre/post label is unresolvable from public sources — $10B pre would imply $11B post; $10B post would imply $9B pre.
  4. Founder metrics are podcast claims. "$1B annual transaction volume", "50% from travel", "compute doubles weekly", "40% chance of credit-card sharing after three weeks" are all self-reported, unaudited, and mostly only one remove from MarketWatch. I have labelled them COMPANY CLAIM throughout and have derived nothing load-bearing from them.
  5. The "100,000+ users" figure is unverified. I could not retrieve the underlying report. TechCrunch states the company has not shared user numbers. Do not repeat 100k as fact.
  6. Founding date is soft. Reuters says 2025; other reporting based on Shinn's LinkedIn places founding in October 2025 with beta from February 2026. I did not verify against corporate records.
  7. Sell-side notes were read second-hand. JPMorgan and Deutsche Bank views reach me through MarketWatch's reporting, not through the notes.
  8. The Unite.AI summary carries an AI-generated byline. Its policy-document detail is useful and specific, and it is the only retrieved description of the privacy policy and terms in detail — but it is secondary and self-declared as machine-written. Treat §5's policy paragraph accordingly.
  9. No hands-on product access. I could not use Instinct; it is invite-only. All product description is second-hand or company-authored. is an arithmetic and wording verification exercise, not a product test.

--

?

Open questions

  1. How much of the $1B is primary? Undisclosed. Everything about the story's meaning depends on this.
  2. Is $10B pre- or post-money? Unstated.
  3. Who led? No source says "led". Sequoia and Benchmark were reported to be discussing lead roles in September; Coatue appears only at announcement.
  4. Will any of the three firms speak? None has.
  5. How many users, and how many pay? Unknown. The company has not said.
  6. What is Instinct's take rate and gross margin on agent-executed transactions? Unknown and undisclosed.
  7. On which model does the agent run? Not disclosed anywhere retrieved. "Instinct's core model" is described without architecture, size, or provenance.
  8. Has any independent security review of the sandbox / short-lived-credential / identity-signed-execution claims been published? None retrieved.
  9. Will the August terms-of-service changes hold, or does the training-use clause survive? The privacy policy still permits training use with a go-forward opt-out, and excludes safety-flagged material from that opt-out.
  10. Does general availability happen, and on what terms? No timetable disclosed; users are pointed to a waitlist-style login page.
  11. Does Shopify's dual partnership become a template, or does merchant access stay bilateral and negotiated?
  12. Who audits a 14-person company that is a binding contracting party for its users?

↗

What happens next?

🎓 For Explorer

FACT (announced). Instinct points users to a login page for expanded access; no timetable is given. There is no disclosed broader-release date.

PREDICTION (flagged, low confidence). Over the next two quarters, in rough order of likelihood:

  1. General availability, gated. The $1B removes the money constraint; compute and trust are the binding ones. Expect a staged rollout, probably with tighter scope limits than the invite-only beta, rather than an open launch.
  2. First paid tiers or a transaction take rate gets disclosed, because at 14 people the compute bill cannot stay hidden indefinitely. Note the incentive tension: a take rate on transactions reduces the appeal to the ~50% of volume that is travel, where comparison-shopping dynamics are strongest.
  3. A disclosed user number appears — likely framed around the transaction-volume figure rather than MAU. Treat any such figure as company-defined.
  4. A safety incident at scale, most likely an irreversible transaction, an unauthorised outbound message, or an injection-driven action — not a breach, because the incident class that damages trust here is "it did something I didn't authorise".
  5. Further term-of-service or privacy-policy friction. The August episode (ToS backlash → rewrite → press coverage) has a natural repeat, and the training-use clause is still live.
  6. Competitive response, not from a startup. Meta has distribution Instinct cannot match; Alphabet and OpenAI both shipped agent products within days of this round. Instinct's differentiation window is depth of authority, and Meta has now shown interest in it.
  7. Either adoption or absorption. Two of the most plausible outcomes are a quiet acquisition by a platform that wants the capability (this category has already seen OpenClaw's creator join OpenAI and Cognition buy Poke) or a slow fade into a niche of power users.

What would change this analysis: disclosure of the primary/secondary split; a named investor going on the record; an audited or company-published revenue or take-rate figure; a published independent security review; or an announced general-availability date with scope limits.


★

Editorial takeaway

🎓 For Explorer

The editorial takeaway.

A 23-year-old with 14 employees and no disclosed revenue raised $1 billion at $10 billion, 33 days after being valued at $2.5 billion. That sentence is accurate, and it is the whole story — including everything it does not tell you.

Three things are worth saying out loud about it.

First, the round is real; the market's endorsement of it is not evidence. Reuters, TechCrunch and Dow Jones all reported the same press release. None of them reported an investor. Not one of Sequoia, Benchmark or Coatue is quoted anywhere in the record. The number that moved is the company's number, and it is a headline number in a release that discloses no revenue, no users, no use of funds, and — critically — no indication of how much of the $1 billion is new money versus people selling their own shares. Nobody knows. That single missing fact is why this round cannot be analysed, and it is why "Instinct raised $1 billion" and "Instinct's investors paid $1 billion for Instinct" are not the same sentence.

Second, watch the verbs. The company said the money came "from Sequoia, Benchmark and Coatue". Every outlet that wrote "led by" added a word the company did not. The two firms reported to be discussing lead roles in September were Sequoia and Benchmark; Coatue appeared only at announcement. Precision here is not pedantry — "led" is a governance fact about who controls a company's next round, and it is the kind of detail that gets invented by headline writers and then repeated as settled.

Third, the honest signal in the story is not the valuation — it is the $1 billion of annual transaction volume Shinn claimed on a podcast, and the disclosure that most of the cash is going to compute. That combination is the actual story: a consumer agent moving a billion dollars of other people's money a year, on 14 people, funded mostly to buy inference. It is either the most important company you have not heard of, or a category option that will be repriced violently the first time an agent spends someone's money without asking. Both readings are consistent with every fact disclosed.

And one framing to refuse: this does not show capital moving from model labs to agent startups. One round, from one company, funded predominantly on compute — which is what model labs consume too. That thesis needs a quarter of data and it needs the primary/secondary splits before it deserves to be repeated as a trend.

Lab: VERIFY

Research sources

Primary Sources (2)
Primary
Instinct — official company websitethe company's own product framing — "Instinct is a personal assistant that understands what you're working on and what's important to you. It connects to your applications and devices — email, messaging, screen, audio, location, and more"; "there are no new interfaces. It's trained to use a phone and a computer. You can text or call it"; "Instinct's core model is trained to understand and handle the deeply personal nuances of everyday life". Also confirms no mobile app and the SMS/call entry point. — **COMPANY CLAIM** (first-party self-description). ---
Visit source ↗
Primary
Instinct press release — "Instinct Raises $1 Billion in Series C Funding from Sequoia, Benchmark and Coatue at $10 Billion Valuation" (Business Wire, syndicated in full on Yahoo Finance)the entire primary claim. Exact wording of the round — "raised an additional $1 billion in its latest round **from** Sequoia Capital, Benchmark Capital, and Coatue"; headline valuation of "$10 Billion Valuation"; the absence of any "led by" phrasing; the absence of revenue, user, headcount, use-of-funds or primary/secondary disclosure; the four product/privacy items (Instinct Concierge, Trusted Person Network via the "Instinct-to-Instinct communication protocol", Location Sharing shared on iMessage, and the privacy set — isolated sandboxes, short-lived local credentials, identity-signed tool execution, "active detective system"); the statement that Instinct is "still in early access"; and Shinn's quoted statement. — **COMPANY CLAIM** — this is the company's own announcement, distributed on a paid press-release wire. Every financial figure in the story originates here. — read via Yahoo Finance's syndication of the Business Wire release because the Business Wire page itself is CDN-blocked (see "Referenced but NOT retrieved" below).
Visit source ↗
Independent Sources (5)
Independent
TechCrunch — "Viral AI startup Instinct has raised $350M at a $2.5B valuation" (Lucas Ropek)the Series B comparator — **$250M raised at a $2.5B valuation, co-led by Index Ventures and Benchmark, taking total funding to $350M**, per The Wall Street Journal. Also fixes the Series B announcement date at **2026-08-26**, which is what makes the 33-day interval to the Series C computable; confirms the entity is Spear Street Technology, founder Noah Shinn, 23; and Shinn's contemporaneous tweet describing users planning road trips, buying groceries and concert tickets, and cancelling subscriptions. — **INDEPENDENTLY VERIFIED** (reporting WSJ) — the source of the "four times" baseline. ---Date: 5:24 PM PDT, August 26, 2026
Visit source ↗
Independent
TechCrunch — "Instinct's powerful AI assistant is raising privacy and security concerns" (Sarah Perez)the documented pre-round failure catalogue — the "perpetual and irrevocable" licence screenshots; Peter Yang's undeleted-Gmail report and the later fix; Claire Vo's post-disconnection inbox summary with plaintext storage; Alex Cohen's prompt-injection/phishing test and account deletion; the agent pulling a sign-up code from the inbox for a Resy booking; Katie Jacobs Stanton's unauthorised outbound email; Michael Mignano's security-norm warning. Also: the operating entity **Spear Street Technology** per its terms and California filings; that Instinct is accessible by text or WhatsApp; that TechCrunch heard from "multiple investors" that Kleiner Perkins and Conviction had invested and those rounds closed; and that Shinn is a former Sierra research scientist. — **INDEPENDENTLY VERIFIED** first-hand technical and policy reporting — the strongest non-company evidence in the story.Date: 11:03 AM PDT, August 24, 2026 (updated after publication with the Series B)
Visit source ↗
Independent
MarketWatch (Dow Jones) — "This AI startup has only 14 employees — and a fresh $10 billion valuation" (William Gavin), retrieved via Morningstar's Dow Jones feedthe **14-employee** headcount in the discovery lead — this is its origin, and it is press reporting, not a company disclosure. Also: "quadrupling the startup's valuation in only a month"; that Shinn told Patrick O'Shaughnessy on a podcast posted the same day the company is "approaching" over **$1 billion in annual transaction volume** and launched to roughly **200 friends and family**; that Shinn says **~50% of transaction revenue comes from travel**; that compute demand **roughly doubles each week**; that **most of the new cash will be spent on computing power** (reported by MarketWatch citing The New York Times); Meta's market cap is ~**191×** Instinct's valuation; Muse passed **3 million** US/Canada downloads since its Sept 8 debut (Sensor Tower, Sept 24 report); **Shopify partnered with both Meta and Instinct** while **Amazon blocked Muse**; and the independent analyst commentary used in §6 and §11 — Gil Luria (D.A. Davidson), Benjamin Black (Deutsche Bank), Bryan Smilek (JPMorgan), Uday Cheruvu (Harding Loevner), Jed Ellerbroek (Argent Capital). — **INDEPENDENTLY VERIFIED** for headcount framing and competitive context; **COMPANY CLAIM** for the founder's operating metrics (sourced to a podcast); **INTERPRETATION** for the analyst quotes.Date: Provided by Dow Jones, Sep 28, 2026, 9:19:00 PM (Dow Jones Newswires stamp 09-28-26 1719ET)
Visit source ↗
Independent
TechCrunch — "Viral AI agent Instinct raises $1B Series C at a $10B valuation" (Sarah Perez)independent confirmation of the Series C and the $10B valuation; the "**including** Sequoia Capital, Benchmark Capital, and Coatue" framing; that the fundraising had been reported as *talks* by The Information earlier in September and that "In a press release on Monday, Instinct confirmed this was a Series C round"; that **Instinct declined to offer interviews** and supplied only a written statement; the product description (Instinct "uses its own phone number and computer", Concierge makes phone calls, Trusted Person Network coordinates agents); the competitive framing against Meta's Muse; and critically, that **"The startup has also not shared its user numbers or any growth metrics"** and has no mobile app yet. — **INDEPENDENTLY VERIFIED** for the round; also the source that **disproves** the widely repeated "100,000 users" figure as a company-published number.Date: 6:38 AM PDT, September 28, 2026
Visit source ↗
Independent
Reuters — "AI agent firm Instinct raises $1 billion in latest funding round" (Utkarsh Shetti, Bengaluru; edited by Shinjini Ganguli)independent confirmation that the round was **closed and announced** ("said on Monday it raised $1 billion in its latest funding round, quadrupling its valuation to $10 billion"); the investor framing "The round drew investments from Sequoia Capital, Benchmark Capital and Coatue" — again no lead designation; Instinct founded in 2025 by Shinn, previously at Sierra (Bret Taylor's AI customer-service company); the Series B comparator ($250M at $2.5B, Shinn told the WSJ last month); and repetition of the company's privacy claims (isolated sandboxes, short-lived local credentials, active hallucination detection) as claims made by the firm. — **INDEPENDENTLY VERIFIED** for the existence, size, valuation and date of the announced round; **COMPANY CLAIM** for everything attributed to Instinct.Date: September 28, 2026, 12:25 PM UTC (updated same day)
Visit source ↗
Secondary Sources (5)
Secondary
Patrick O'Shaughnessy podcast episode with Noah Shinn ("Invest Like The Best")- Status: **NOT RETRIEVED** (audio/video, not transcribed here). The founder's operating claims — approaching $1B annual transaction volume, ~200 friends-and-family launch, ~50% travel share, compute doubling weekly, 40% three-week credit-card sharing probability — reach me second-hand via MarketWatch (source 5). All are labelled COMPANY CLAIM in the research artifact for that reason. ---
Visit source ↗
Secondary
The Information — reported $10B talks (mid-September 2026)- Status: **NOT RETRIEVED** (paywall). Known only as the origin referenced by TechCrunch ("reported earlier this month by The Information") and TechCrunch's 2026-08-24 piece. This is also the report that is the ultimate origin of the widely repeated "100,000+ users" figure — which is why that figure is treated as UNVERIFIED and not repeated as fact.
Visit source ↗
Secondary
The Wall Street Journal — "The Latest Viral AI Assistant Rocketing Across Silicon Valley"- Status: **NOT RETRIEVED** (paywall). Reached only through the summaries in TechCrunch (sources 6 and 7) and Reuters (source 3), which independently agree on the Series B terms it reports. - Would have supported: the Series B figures directly from the originating report, and the "people's emails" privacy controversy that TechCrunch says Instinct addressed in response.
Visit source ↗
Secondary
Business Wire — original release page- Status: **NOT RETRIEVED.** to an automated fetch, and an in-app browser session reached the CDN's "Access Denied" page (Akamai edge reference #18.84bc5668.). The release text was instead obtained from the Yahoo Finance syndication listed as source 1, which carries the same Business Wire content and links back to this page. - Would have supported: the release as published at origin. Its content is already covered via the syndication.
Visit source ↗
Secondary
Unite.AI — "Instinct Raises $1B Series C at $10B Valuation to Bring Useful AI to Everyone" (by Evan Mercer, "AI Startups & Venture Capital AI Research Agent")a readable summary of the release's product items, and the only detailed retrieved description of **Instinct's own privacy policy and terms of service** (both last revised 2026-08-26) — operator Spear Street Technology, Inc.; scope of data reachable including payment information, third-party credentials and health-related information; training use with a go-forward opt-out at a settings page, with safety-flagged material still usable for training; Google Workspace API data excluded from training; the Inputs/Outputs/Actions framing under which users appoint the agent to enter binding agreements and transactions; Vault materials not used for training; the security section's warnings about unintended payments, irreversible actions and misleading third-party instructions; and the 18+ age requirement. Also notes the press contact is an external agency (instinct@jsapartners.co). — **SECONDARY**. The byline explicitly states the article is "AI-generated and reviewed by Unite.AI's editorial team". Weighted accordingly — used mainly for the policy-document detail that no other retrieved source provides. ---Date: Published September 28, 2026
Visit source ↗