"How do I fool you?": Manipulating User Trust via Misleading Black Box Explanations
Not on the map. Why?
Abstract (arXiv)
As machine learning black boxes are increasingly being deployed in critical domains such as healthcare and criminal justice, there has been a growing emphasis on developing techniques for explaining these black boxes in a human interpretable manner. It has recently become apparent that a high-fidelity explanation of a black box ML model may not accurately reflect the biases in the black box. As a consequence, explanations have the potential to mislead human users into trusting a problematic black box. In this work, we rigorously explore the notion of misleading explanations and how they influence user trust in black-box models. More specifically, we propose a novel theoretical framework for understanding and generating misleading explanations, and carry out a user study with domain experts to demonstrate how these explanations can be used to mislead users. Our work is the first to empirically establish how user trust in black box models can be manipulated via misleading explanations.
Key facts. Cited by 111 papers in the map (data through 14 Oct 2026). First posted on arXiv 15 Nov 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 25; 2022: 29; 2023: 18; 2024: 15; 2025: 13; 2026: 11.
111 papers.
Sort:
By area:
- 2021Interpretable Machine Learning: Fundamental Principles and 10 Grand Challengescited by 367
- 2022The Disagreement Problem in Explainable Machine Learning: A Practitioner's Perspectivecited by 159
- 2022OpenXAI: Towards a Transparent Evaluation of Model Explanationscited by 126
- 2021If Only We Had Better Counterfactual Explanations: Five Key Deficits to Rectify in the Evaluation of Counterfactual XAI Techniquescited by 82
- 2021Beyond Expertise and Roles: A Framework to Characterize the Stakeholders of Interpretable Machine Learning and their Needscited by 64
- 2021Synthetic Benchmarks for Scientific Research in Explainable Machine Learningcited by 59
- 2022Post hoc Explanations may be Ineffective for Detecting Unknown Spurious Correlationcited by 59
- 2022Concept-level Debugging of Part-Prototype Networkscited by 52
- 2022Logic-Based Explainability in Machine Learningcited by 48
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A surveycited by 48
- 2021Towards the Unification and Robustness of Perturbation and Gradient Based Explanationscited by 47
- 2021Local Explanations via Necessity and Sufficiency: Unifying Theory and Practicecited by 45
38 more
- 2022Towards Formal XAI: Formally Approximate Minimal Explanations of Neural Networkscited by 42
- 2022The Road to Explainability is Paved with Bias: Measuring the Fairness of Explanationscited by 41
- 2021SAT-Based Rigorous Explanations for Decision Listscited by 40
- 2022Fairness via Explanation Quality: Evaluating Disparities in the Quality of Post hoc Explanationscited by 40
- 2022Connecting Algorithmic Research and Usage Contexts: A Perspective of Contextualized Evaluation for Explainable AIcited by 40
- 2021On Efficiently Explaining Graph-Based Classifierscited by 37
- 2021GCExplainer: Human-in-the-Loop Concept-based Explanations for Graph Neural Networkscited by 35
- 2023A Systematic Literature Review of User Trust in AI-Enabled Systems: An HCI Perspectivecited by 33
- 2022Scalable Interpretability via Polynomialscited by 25
- 2022Explanations, Fairness, and Appropriate Reliance in Human-AI Decision-Makingcited by 25
- 2022Robust Explanation Constraints for Neural Networkscited by 24
- 2023Dear XAI Community, We Need to Talk! Fundamental Misconceptions in Current XAI Researchcited by 22
- 2021Characterizing the risk of fairwashingcited by 21
- 2023A Systematic Review on Fostering Appropriate Trust in Human-AI Interactioncited by 21
- 2024LLM-Assisted Crisis Management: Building Advanced LLM Platforms for Effective Emergency Response and Public Collaborationcited by 21
- 2021A Framework for Fairness: A Systematic Review of Existing Fair AI Solutionscited by 18
- 2022On Computing Probabilistic Abductive Explanationscited by 18
- 2021Connecting Interpretability and Robustness in Decision Trees through Separationcited by 16
- 2021Fooling Partial Dependence via Data Poisoningcited by 16
- 2023A Critical Survey on Fairness Benefits of Explainable AIcited by 16
- 2022Inferring Sensitive Attributes from Model Explanationscited by 15
- 2023Impact Of Explainable AI On Cognitive Load: Insights From An Empirical Studycited by 15
- 2022Assessing the communication gap between AI models and healthcare professionals: explainability, utility and trust in AI-driven clinical decision-makingcited by 14
- 2021Efficient Explanations With Relevant Setscited by 12
- 2022Algorithmic Assistance with Recommendation-Dependent Preferencescited by 12
- 2021On the Fairness of Machine-Assisted Human Decisionscited by 11
- 2023On Formal Feature Attribution and Its Approximationcited by 11
- 2021Detecting Spurious Correlations with Sanity Tests for Artificial Intelligence Guided Radiology Systemscited by 10
- 2021When and How to Fool Explainable Models (and Humans) with Adversarial Examplescited by 10
- 2022A Psychological Theory of Explainabilitycited by 10
- 2023Discriminative Feature Attributions: Bridging Post Hoc Explainability and Inherent Interpretabilitycited by 10
- 2024Efficient Exploration of the Rashomon Set of Rule Set Modelscited by 10
- 2024Utilizing Human Behavior Modeling to Manipulate Explanations in AI-Assisted Decision Making: The Good, the Bad, and the Scarycited by 10
- 2022A Human-Centric Take on Model Monitoringcited by 9
- 2022Causality-Inspired Taxonomy for Explainable Artificial Intelligencecited by 9
- 2024The Double-Edged Sword of Behavioral Responses in Strategic Classification: Theory and User Studiescited by 9
- 2024Don't be Fooled: The Misinformation Effect of Explanations in Human-AI Collaborationcited by 8
- 2021What will it take to generate fairness-preserving explanations?cited by 7
50 most cited of 111 All 111 (JSON)
- 2026Evaluating RL Explainability Methods by How Much They Help Fix Bugs in Agents18 Aug 2026
- 2026"Trust Junk" Leads to Unjustified Support for Highly Discriminatory Predictive Models14 Jul 2026
- 2026AI, Trust, and Teaming: The Humans-as-Handlers Approach for Autonomous and Opaque AI Systems1 Jul 2026
- 2026Model Stealing Through the Lens of Model Multiplicity13 Jun 2026
- 2026Position: Genomic Model Research Must Move Beyond Anecdotal Evaluation of Interpretability Methods29 May 2026
- 2026Right Predictions, Misleading Explanations: On the Vulnerability of Vision-Language Model Explanations15 May 2026
- 2026Rigorous Explanations for Tree Ensembles31 Mar 2026
- 2026Seeing the Reasoning: How LLM Rationales Influence User Trust and Decision-Making in Factual Verification Tasks7 Mar 2026
- 2026When AI Persuades: Adversarial Explanation Attacks on Human Trust in AI-Assisted Decision Making3 Feb 2026
- 2026On the Definition and Detection of Cherry-Picking in Counterfactual Explanations8 Jan 2026
- 2026The Fake Friend Dilemma: Relational Trust and the Political Economy of Conversational AI6 Jan 2026
- 2025Problems With Large Language Models for Learner Modelling: Why LLMs Alone Fall Short for Responsible Tutoring in K--12 Education28 Dec 2025
38 more
- 2025Understanding AI Trustworthiness: A Scoping Review of AIES & FAccT Articles24 Oct 2025
- 2025Development of Mental Models in Human-AI Collaboration: A Conceptual Framework9 Oct 2025
- 2025Learning Conformal Explainers for Image Classifiers25 Sep 2025
- 2025Explainability of Algorithms19 Aug 2025
- 2025Towards Reasonable Concept Bottleneck Models5 Jun 2025
- 2025What Do People Want to Know About Artificial Intelligence (AI)? The Importance of Answering End-User Questions to Explain Autonomous Vehicle (AV) Decisions9 May 2025
- 2025Gender Bias in Explainability: Investigating Performance Disparity in Post-hoc Methods2 May 2025
- 2025Trustworthy AI Must Account for Interactions9 Apr 2025
- 2025Towards Responsible and Trustworthy Educational Data Mining: Comparing Symbolic, Sub-Symbolic, and Neural-Symbolic AI Methods1 Apr 2025
- 2025Algebraic Adversarial Attacks on Explainability Models16 Mar 2025
- 2025HyConEx: Hypernetwork classifier with counterfactual explanations for tabular data16 Mar 2025
- 2025Models That Are Interpretable But Not Transparent26 Feb 2025
- 2024Comparative Analysis of Black-Box and White-Box Machine Learning Model in Phishing Detection3 Dec 2024
- 2024Utilizing Human Behavior Modeling to Manipulate Explanations in AI-Assisted Decision Making: The Good, the Bad, and the Scary2 Nov 2024
- 2024The Double-Edged Sword of Behavioral Responses in Strategic Classification: Theory and User Studies23 Oct 2024
- 2024Don't be Fooled: The Misinformation Effect of Explanations in Human-AI Collaboration19 Sep 2024
- 2024Synthetic Human Memories: AI-Edited Images and Videos Can Implant False Memories and Distort Recollection13 Sep 2024
- 2024Deceptive AI systems that give explanations are more convincing than honest AI systems and can amplify belief in misinformation31 Jul 2024
- 2024Algebraic Adversarial Attacks on Integrated Gradients23 Jul 2024
- 2024Operationalizing the Blueprint for an AI Bill of Rights: Recommendations for Practitioners, Researchers, and Policy Makers11 Jul 2024
- 2024Efficient Exploration of the Rashomon Set of Rule Set Models5 Jun 2024
- 2024Why do explanations fail? A typology and discussion on failures in XAI22 May 2024
- 2024Mapping the Potential of Explainable AI for Fairness Along the AI Lifecycle29 Apr 2024
- 2024SIDEs: Separating Idealization from Deceptive Explanations in xAI25 Apr 2024
- 2024XAI-CF -- Examining the Role of Explainable Artificial Intelligence in Cyber Forensics4 Feb 2024
- 2024Interactive Mars Image Content-Based Search with Interpretable Machine Learning19 Jan 2024
- 2024LLM-Assisted Crisis Management: Building Advanced LLM Platforms for Effective Emergency Response and Public Collaboration12 Jan 2024
- 2023SoK: Taming the Triangle -- On the Interplays between Fairness, Interpretability and Privacy in Machine Learning22 Dec 2023
- 2023Mindful Explanations: Prevalence and Impact of Mind Attribution in XAI Research19 Dec 2023
- 2023Can Physician Judgment Enhance Model Trustworthiness? A Case Study on Predicting Pathological Lymph Nodes in Rectal Cancer15 Dec 2023
- 2023On the Relationship Between Interpretability and Explainability in Machine Learning20 Nov 2023
- 2023A Systematic Review on Fostering Appropriate Trust in Human-AI Interaction8 Nov 2023
- 2023Augmenting deep neural networks with symbolic knowledge: Towards trustworthy and interpretable AI for education1 Nov 2023
- 2023A Critical Survey on Fairness Benefits of Explainable AI15 Oct 2023
- 2023Predictability and Comprehensibility in Post-Hoc XAI Methods: A User-Centered Analysis21 Sep 2023
- 2023Discriminative Feature Attributions: Bridging Post Hoc Explainability and Inherent Interpretability27 Jul 2023
- 2023Measuring Perceived Trust in XAI-Assisted Decision-Making by Eliciting a Mental Model15 Jul 2023
- 2023On Formal Feature Attribution and Its Approximation7 Jul 2023
50 newest of 111 All 111 (JSON)
- 2021Fooling Partial Dependence via Data Poisoningcited by 16
- 2021Fooling Partial Dependence via Data Poisoning26 May 2021
- 2021Interpretable Machine Learning: Fundamental Principles and 10 Grand Challengescited by 367
- 2022The Disagreement Problem in Explainable Machine Learning: A Practitioner's Perspectivecited by 159
- 2022OpenXAI: Towards a Transparent Evaluation of Model Explanationscited by 126
- 2021If Only We Had Better Counterfactual Explanations: Five Key Deficits to Rectify in the Evaluation of Counterfactual XAI Techniquescited by 82
- 2021Beyond Expertise and Roles: A Framework to Characterize the Stakeholders of Interpretable Machine Learning and their Needscited by 64
- 2021Synthetic Benchmarks for Scientific Research in Explainable Machine Learningcited by 59
- 2022Post hoc Explanations may be Ineffective for Detecting Unknown Spurious Correlationcited by 59
- 2022Concept-level Debugging of Part-Prototype Networkscited by 52
- 2022Logic-Based Explainability in Machine Learningcited by 48
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A surveycited by 48
- 2021Towards the Unification and Robustness of Perturbation and Gradient Based Explanationscited by 47
- 2021Local Explanations via Necessity and Sufficiency: Unifying Theory and Practicecited by 45
12 most cited of 107 All 107 (JSON)
- 2026"Trust Junk" Leads to Unjustified Support for Highly Discriminatory Predictive Models14 Jul 2026
- 2026AI, Trust, and Teaming: The Humans-as-Handlers Approach for Autonomous and Opaque AI Systems1 Jul 2026
- 2026Model Stealing Through the Lens of Model Multiplicity13 Jun 2026
- 2026Position: Genomic Model Research Must Move Beyond Anecdotal Evaluation of Interpretability Methods29 May 2026
- 2026Rigorous Explanations for Tree Ensembles31 Mar 2026
- 2026When AI Persuades: Adversarial Explanation Attacks on Human Trust in AI-Assisted Decision Making3 Feb 2026
- 2026On the Definition and Detection of Cherry-Picking in Counterfactual Explanations8 Jan 2026
- 2026The Fake Friend Dilemma: Relational Trust and the Political Economy of Conversational AI6 Jan 2026
- 2025Problems With Large Language Models for Learner Modelling: Why LLMs Alone Fall Short for Responsible Tutoring in K--12 Education28 Dec 2025
- 2025Understanding AI Trustworthiness: A Scoping Review of AIES & FAccT Articles24 Oct 2025
- 2025Development of Mental Models in Human-AI Collaboration: A Conceptual Framework9 Oct 2025
- 2025Learning Conformal Explainers for Image Classifiers25 Sep 2025
12 newest of 107 All 107 (JSON)