Bots Now Outnumber Humans on the Internet

Bots and AI systems now generate more internet traffic than human beings. That's the central finding of HUMAN Security's 2026 State of AI Traffic report, released March 26, which analysed over one quadrillion digital interactions and found that automated traffic grew eight times faster than human activity throughout 2025. The so-called "Dead Internet Theory" — once a fringe conspiracy — just got its receipts.

And the numbers aren't even close to slowing down. AI-specific traffic surged 187% from January to December 2025. Traffic from AI agents — the kind that browse, shop, book, and transact on your behalf — exploded by 7,851% in a single year. "The internet as a whole was created with this very basic notion that there's a human being on the other side of the computer screen," HUMAN Security CEO Stu Solomon told CNBC. "And that notion is very rapidly being replaced."

What's actually happening

Three industries are absorbing the bulk of this automated wave: retail and e-commerce, streaming and media, and travel and hospitality. Together, they account for more than 95% of concentrated AI traffic. If you've noticed flight prices shifting faster than you can refresh a page, or product listings changing in real time, this is the mechanism. Bots are comparing, browsing, and buying faster than any human can scroll.

This isn't just ChatGPT and Gemini answering questions. It's a fundamentally different internet — one where AI agents perform actions autonomously. They check prices across dozens of sites simultaneously. They book flights. They monitor inventory. They scrape content to train the next generation of models. The line between "helpful tool" and "replacement user" has already blurred.

As Albis has covered in the broader AI chip export war, the infrastructure powering this bot-dominated internet is itself a geopolitical battleground. The compute that drives these AI agents has to live somewhere — and that somewhere is rapidly becoming a problem.

The electricity bill nobody voted for

Every AI agent that scrapes a retail site, every bot that checks 400 flight prices per second, every language model that ingests a news article — someone's server is handling that load. And right now, the humans footing the bandwidth and electricity bills are subsidising the machines replacing their clicks.

US residential electricity prices jumped 7.1% in 2025, more than double the overall rate of inflation. That cost the average American household an extra $123 last year. In northern Virginia — America's data centre capital — the impact is more visceral. John Steinbach, a Manassas resident for nearly 40 years, received a $281 electricity bill in January 2026 after paying roughly $100 the month before. "They're building them like it's 'Field of Dreams' — build it and the electricity will come — but we don't see how that's going to happen," he told Consumer Reports.

The scale of what's being built is staggering. A Bloom Energy report from January 2026 projects that US data centre energy demand will nearly double between 2025 and 2028, jumping from 80 to 150 gigawatts. That's equivalent to adding Spain's entire electricity consumption in three years. Meta's Hyperion campus in Louisiana alone has expanded to 3,650 acres — twice the size of the state's international airport.

Meanwhile, Musk's $25 billion Terafab chip factory just launched in Austin, designed to produce one terawatt of computing output per year. Eighty percent of that is allocated for space-based AI processing. The appetite for compute isn't plateauing — it's going orbital, literally.

The backlash is already here

Something unusual is happening in American local politics: communities are saying no.

More than 100 local communities across 12 US states have enacted moratoriums on data centre construction. Missouri, Indiana, Georgia, North Carolina, and others have passed temporary bans. At least 11 states are now considering statewide policies to pause the buildout while they study the impact on power grids, water supplies, and local economies.

On March 25, Senator Bernie Sanders and Representative Alexandria Ocasio-Cortez introduced the AI Data Centre Moratorium Act of 2026, proposing an immediate federal halt on all new AI data centre construction until Congress passes laws protecting workers, consumers, and the environment. "AI and robotics are creating the most sweeping technological revolution in the history of humanity," Sanders said. "I fear that Congress is totally unprepared for the magnitude of the changes that are already taking place."

The bill would also ban the export of AI computing hardware — including chips — to any country without equivalent safeguards. That provision alone, if enacted, would reshape the global AI chip supply chain overnight.

"More than 100 local communities across 12 states have already enacted local moratoriums on data centres," Ocasio-Cortez said, "and Congress itself has a moral obligation to stand with them and stop Big Tech from ruining their communities."

The trust problem

The deeper issue isn't just electricity or bandwidth. It's that the entire internet economy was built on one assumption: a "visit" means a person. Advertising revenue, engagement metrics, analytics dashboards — all of it presupposes human attention on the other side.

When the majority of your "eyeballs" are Python scripts, that economic model breaks. Ad impressions become fictional. Engagement metrics become noise. The question isn't whether this is happening — HUMAN Security just confirmed it is — but how long the advertising industry can pretend it isn't.

HUMAN Security's own framing has shifted. The company now says the relevant question is no longer "bot or not?" but "trust or not?" — whether a given interaction deserves to be treated as legitimate, regardless of whether a human initiated it. That distinction matters because some AI agents are doing useful things: checking prices, comparing insurance quotes, managing schedules. Others are scraping copyrighted content, manipulating markets, or inflating engagement numbers.

What comes next

The internet is splitting into two layers. The visible layer — the one you browse — is increasingly curated by and for machines. The invisible layer — infrastructure, energy, chips — is the new battleground.

Cloudflare CEO Matthew Prince predicted bot traffic would fully exceed human traffic by 2027. HUMAN Security's data suggests that timeline was generous. It's already happened.

The question nobody in Washington, Brussels, or Beijing has answered yet: who pays when the majority of internet users don't pay taxes, don't buy ads, and don't vote?

For now, the answer appears to be: you do. Through your electricity bill.