Characterizing Manipulation from AI Systems
Not on the map. Why?
Abstract (arXiv)
Manipulation is a common concern in many domains, such as social media, advertising, and chatbots. As AI systems mediate more of our interactions with the world, it is important to understand the degree to which AI systems might manipulate humans without the intent of the system designers. Our work clarifies challenges in defining and measuring manipulation in the context of AI systems. Firstly, we build upon prior literature on manipulation from other fields and characterize the space of possible notions of manipulation, which we find to depend upon the concepts of incentives, intent, harm, and covertness. We review proposals on how to operationalize each factor. Second, we propose a definition of manipulation based on our characterization: a system is manipulative if it acts as if it were pursuing an incentive to change a human (or another agent) intentionally and covertly. Third, we discuss the connections between manipulation and related concepts, such as deception and coercion. Finally, we contextualize our operationalization of manipulation in some applications. Our overall assessment is that while some progress has been made in defining and measuring manipulation from AI systems, many gaps remain. In the absence of a consensus definition and reliable tools for measurement, we cannot rule out the possibility that AI systems learn to manipulate humans without the intent of the system designers. We argue that such manipulation poses a significant threat to human autonomy, suggesting that precautionary actions to mitigate it are warranted.
Key facts. Cited by 43 papers in the map (data through 7 Oct 2026). First posted on arXiv 16 Mar 2023.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2023: 10; 2024: 16; 2025: 10; 2026: 7.
43 papers.
Sort:
By area:
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2023How to Catch an AI Liar: Lie Detection in Black-Box LLMs by Asking Unrelated Questionscited by 82
- 2024Building Machines that Learn and Think with Peoplecited by 73
- 2024Feedback Loops With Language Models Drive In-Context Reward Hackingcited by 70
- 2024Beyond Preferences in AI Alignmentcited by 46
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedbackcited by 45
- 2023Honesty Is the Best Policy: Defining and Mitigating AI Deceptioncited by 40
- 2024AI Alignment with Changing and Influenceable Reward Functionscited by 33
- 2023Discovering Variable Binding Circuitry with Desideratacited by 32
31 more
- 2024Adversaries Can Misuse Combinations of Safe Modelscited by 31
- 2024Persuasion with Large Language Models: A Survey of Empirical Evidence, Study Methodologies, and Ethical Implicationscited by 30
- 2024From Lived Experience to Insight: Unpacking the Psychological Risks of Using AI Conversational Agentscited by 25
- 2024Locking Down the Finetuned LLMs Safetycited by 22
- 2026Reasoning Models Struggle to Control their Chains of Thoughtcited by 22
- 2024Understanding the Learning Dynamics of Alignment with Human Feedbackcited by 15
- 2025Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Modelscited by 14
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
- 2025Build Agent Advocates, Not Platform Agentscited by 8
- 2025Distributional AGI Safetycited by 8
- 2024Can DPO Learn Diverse Human Values? A Theoretical Scaling Lawcited by 7
- 2024Sociotechnical Implications of Generative Artificial Intelligence for Information Accesscited by 6
- 2024Challenges and Future Directions of Data-Centric AI Alignmentcited by 5
- 2023On Imperfect Recall in Multi-Agent Influence Diagramscited by 4
- 2025Scheming Ability in LLM-to-LLM Strategic Interactionscited by 4
- 2024Dishonesty in Helpful and Harmless Alignmentcited by 3
- 2025How Well Can Preference Optimization Generalize Under Noisy Feedback?cited by 3
- 2025Clean First, Align Later: Benchmarking Preference Data Cleaning for Reliable LLM Alignmentcited by 2
- 2023Strengthening the EU AI Act: Defining Key Terms on AI Manipulationcited by 1
- 2023Agent-Specific Effects: A Causal Effect Propagation Analysis in Multi-Agent MDPscited by 1
- 2025Detecting Malicious AI Agents Through Simulated Interactionscited by 1
- 2026Bounded Minds, Generative Machines: Envisioning Conversational AI that Works with Human Heuristics and Reduces Bias Riskcited by 1
- 2024Characterising Interventions in Causal Gamescited by 0
- 2024Limits to Predicting Online Speech Using Large Language Modelscited by 0
- 2025When Assisting One Disempowers Anothercited by 0
- 2025Human-AI Interaction Alignment: Designing, Evaluating, and Evolving Value-Centered AI For Reciprocal Human-AI Futurescited by 0
- 2026Questionnaire Responses Do not Capture the Safety of AI Agentscited by 0
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracingcited by 0
- 2026Persuasion Attacks Can Decrease Effectiveness of CoT Monitoringcited by 0
- 2026AISPA: User-Centric System Prompt Auditing for Large Language Model Applicationscited by 0
- 2026Toward Meaningful Transparency for AI Chatbots: Disclosing Persuasive Intent Reduces Persuasioncited by 0
- 2026Toward Meaningful Transparency for AI Chatbots: Disclosing Persuasive Intent Reduces Persuasion12 Aug 2026
- 2026AISPA: User-Centric System Prompt Auditing for Large Language Model Applications30 Jul 2026
- 2026Persuasion Attacks Can Decrease Effectiveness of CoT Monitoring9 Jul 2026
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracing3 Jun 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2026Reasoning Models Struggle to Control their Chains of Thought5 Mar 2026
- 2026Bounded Minds, Generative Machines: Envisioning Conversational AI that Works with Human Heuristics and Reduces Bias Risk19 Jan 2026
- 2025Human-AI Interaction Alignment: Designing, Evaluating, and Evolving Value-Centered AI For Reciprocal Human-AI Futures25 Dec 2025
- 2025Distributional AGI Safety18 Dec 2025
- 2025Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models19 Nov 2025
- 2025When Assisting One Disempowers Another6 Nov 2025
- 2025Scheming Ability in LLM-to-LLM Strategic Interactions11 Oct 2025
31 more
- 2025How Well Can Preference Optimization Generalize Under Noisy Feedback?1 Oct 2025
- 2025Clean First, Align Later: Benchmarking Preference Data Cleaning for Reliable LLM Alignment28 Sep 2025
- 2025Build Agent Advocates, Not Platform Agents7 May 2025
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective4 Apr 2025
- 2025Detecting Malicious AI Agents Through Simulated Interactions31 Mar 2025
- 2024From Lived Experience to Insight: Unpacking the Psychological Risks of Using AI Conversational Agents10 Dec 2024
- 2024Persuasion with Large Language Models: A Survey of Empirical Evidence, Study Methodologies, and Ethical Implications11 Nov 2024
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedback4 Nov 2024
- 2024Locking Down the Finetuned LLMs Safety14 Oct 2024
- 2024Challenges and Future Directions of Data-Centric AI Alignment2 Oct 2024
- 2024Beyond Preferences in AI Alignment30 Aug 2024
- 2024Can DPO Learn Diverse Human Values? A Theoretical Scaling Law6 Aug 2024
- 2024Building Machines that Learn and Think with People22 Jul 2024
- 2024Limits to Predicting Online Speech Using Large Language Models8 Jul 2024
- 2024Adversaries Can Misuse Combinations of Safe Models20 Jun 2024
- 2024Characterising Interventions in Causal Games13 Jun 2024
- 2024Dishonesty in Helpful and Harmless Alignment4 Jun 2024
- 2024AI Alignment with Changing and Influenceable Reward Functions28 May 2024
- 2024Sociotechnical Implications of Generative Artificial Intelligence for Information Access19 May 2024
- 2024Understanding the Learning Dynamics of Alignment with Human Feedback27 Mar 2024
- 2024Feedback Loops With Language Models Drive In-Context Reward Hacking9 Feb 2024
- 2023Honesty Is the Best Policy: Defining and Mitigating AI Deception3 Dec 2023
- 2023Agent-Specific Effects: A Causal Effect Propagation Analysis in Multi-Agent MDPs17 Oct 2023
- 2023How to Catch an AI Liar: Lie Detection in Black-Box LLMs by Asking Unrelated Questions26 Sep 2023
- 2023Large Language Model Alignment: A Survey26 Sep 2023
- 2023Can LLM-Generated Misinformation Be Detected?25 Sep 2023
- 2023Strengthening the EU AI Act: Defining Key Terms on AI Manipulation30 Aug 2023
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutions28 Aug 2023
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedback27 Jul 2023
- 2023On Imperfect Recall in Multi-Agent Influence Diagrams11 Jul 2023
- 2023Discovering Variable Binding Circuitry with Desiderata7 Jul 2023
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023Large Language Model Alignment: A Surveycited by 241
- 2024Feedback Loops With Language Models Drive In-Context Reward Hackingcited by 70
- 2024Beyond Preferences in AI Alignmentcited by 46
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedbackcited by 45
- 2024AI Alignment with Changing and Influenceable Reward Functionscited by 33
- 2024Understanding the Learning Dynamics of Alignment with Human Feedbackcited by 15
- 2024Can DPO Learn Diverse Human Values? A Theoretical Scaling Lawcited by 7
- 2024Challenges and Future Directions of Data-Centric AI Alignmentcited by 5
- 2024Dishonesty in Helpful and Harmless Alignmentcited by 3
- 2025How Well Can Preference Optimization Generalize Under Noisy Feedback?cited by 3
- 2025Clean First, Align Later: Benchmarking Preference Data Cleaning for Reliable LLM Alignmentcited by 2
12 most cited of 13 All 13 (JSON)
- 2025Human-AI Interaction Alignment: Designing, Evaluating, and Evolving Value-Centered AI For Reciprocal Human-AI Futures25 Dec 2025
- 2025How Well Can Preference Optimization Generalize Under Noisy Feedback?1 Oct 2025
- 2025Clean First, Align Later: Benchmarking Preference Data Cleaning for Reliable LLM Alignment28 Sep 2025
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedback4 Nov 2024
- 2024Challenges and Future Directions of Data-Centric AI Alignment2 Oct 2024
- 2024Beyond Preferences in AI Alignment30 Aug 2024
- 2024Can DPO Learn Diverse Human Values? A Theoretical Scaling Law6 Aug 2024
- 2024Dishonesty in Helpful and Harmless Alignment4 Jun 2024
- 2024AI Alignment with Changing and Influenceable Reward Functions28 May 2024
- 2024Understanding the Learning Dynamics of Alignment with Human Feedback27 Mar 2024
- 2024Feedback Loops With Language Models Drive In-Context Reward Hacking9 Feb 2024
- 2023Large Language Model Alignment: A Survey26 Sep 2023
12 newest of 13 All 13 (JSON)
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
- 2025Build Agent Advocates, Not Platform Agentscited by 8
- 2025Detecting Malicious AI Agents Through Simulated Interactionscited by 1
- 2026Questionnaire Responses Do not Capture the Safety of AI Agentscited by 0
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2025Build Agent Advocates, Not Platform Agents7 May 2025
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective4 Apr 2025
- 2025Detecting Malicious AI Agents Through Simulated Interactions31 Mar 2025
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2023How to Catch an AI Liar: Lie Detection in Black-Box LLMs by Asking Unrelated Questionscited by 82
- 2024Building Machines that Learn and Think with Peoplecited by 73
- 2023Honesty Is the Best Policy: Defining and Mitigating AI Deceptioncited by 40
- 2023Discovering Variable Binding Circuitry with Desideratacited by 32
- 2024Adversaries Can Misuse Combinations of Safe Modelscited by 31
- 2024Persuasion with Large Language Models: A Survey of Empirical Evidence, Study Methodologies, and Ethical Implicationscited by 30
- 2024From Lived Experience to Insight: Unpacking the Psychological Risks of Using AI Conversational Agentscited by 25
- 2024Locking Down the Finetuned LLMs Safetycited by 22
- 2025Distributional AGI Safetycited by 8
- 2024Sociotechnical Implications of Generative Artificial Intelligence for Information Accesscited by 6
12 most cited of 23 All 23 (JSON)
- 2026Toward Meaningful Transparency for AI Chatbots: Disclosing Persuasive Intent Reduces Persuasion12 Aug 2026
- 2026AISPA: User-Centric System Prompt Auditing for Large Language Model Applications30 Jul 2026
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracing3 Jun 2026
- 2026Bounded Minds, Generative Machines: Envisioning Conversational AI that Works with Human Heuristics and Reduces Bias Risk19 Jan 2026
- 2025Distributional AGI Safety18 Dec 2025
- 2025When Assisting One Disempowers Another6 Nov 2025
- 2025Scheming Ability in LLM-to-LLM Strategic Interactions11 Oct 2025
- 2024From Lived Experience to Insight: Unpacking the Psychological Risks of Using AI Conversational Agents10 Dec 2024
- 2024Persuasion with Large Language Models: A Survey of Empirical Evidence, Study Methodologies, and Ethical Implications11 Nov 2024
- 2024Locking Down the Finetuned LLMs Safety14 Oct 2024
- 2024Building Machines that Learn and Think with People22 Jul 2024
- 2024Limits to Predicting Online Speech Using Large Language Models8 Jul 2024
12 newest of 23 All 23 (JSON)