The web’s newest weapon against AI scrapers is a font

AI scrapers have pushed publishers into a messy mix of lawsuits and technical countermeasures, and now two designers are taking an oddly elegant swing at the problem: a font.

ShieldFont comes from Isaque Seneda and Gabriel Abrucio, who say in a white paper that it is meant to give web publishers “a practical opt-out from unauthorized AI training” and to “disrupt what is collected when that choice is ignored.” The pitch is simple. Make the page look normal to people. Feed something else to the machines.

The trick leans on ligatures, the old font feature that swaps certain letter pairs for a cleaner-looking version when they sit together. ShieldFont turns that idea sideways. Instead of prettifying text, it uses ligatures to replace whole words with other words, scrambling the value of the page for scrapers.

And the swap only happens when a browser renders the page on screen. If a scraper just pulls the plaintext source, it gets the altered version instead — the one no reader ever sees. That makes ShieldFont less like a lock and more like a booby-trapped signpost: the page still works for people, but the raw material underneath gets poisoned.