Deception Abilities Emerged in Large Language Models
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) are currently at the forefront of intertwining artificial intelligence (AI) systems with human communication and everyday life. Thus, aligning them with human values is of great importance. However, given the steady increase in reasoning abilities, future LLMs are under suspicion of becoming able to deceive human operators and utilizing this ability to bypass monitoring efforts. As a prerequisite to this, LLMs need to possess a conceptual understanding of deception strategies. This study reveals that such strategies emerged in state-of-the-art LLMs, such as GPT-4, but were non-existent in earlier LLMs. We conduct a series of experiments showing that state-of-the-art LLMs are able to understand and induce false beliefs in other agents, that their performance in complex deception scenarios can be amplified utilizing chain-of-thought reasoning, and that eliciting Machiavellianism in LLMs can alter their propensity to deceive. In sum, revealing hitherto unknown machine behavior in LLMs, our study contributes to the nascent field of machine psychology.
Key facts. Cited by 99 papers in the map (data through 7 Oct 2026). Builds on 32 of its 64 references that are in the map. First posted on arXiv 31 Jul 2023.
Builds on
32 of 64 references.
References · 32
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,579
- 2022Emergent Abilities of Large Language Modelscited by 2,483
- 2022Survey of Hallucination in Natural Language Generationcited by 2,056
- 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,968
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2021Calibrate Before Use: Improving Few-Shot Performance of Language Modelscited by 1,371
20 more
- 2023PaLM 2 Technical Reportcited by 1,154
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 733
- 2023The Internal State of an LLM Knows When It's Lyingcited by 644
- 2023Language Models can Solve Computer Taskscited by 371
- 2021Unsolved Problems in ML Safetycited by 291
- 2023How is ChatGPT's behavior changing over time?cited by 265
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 250
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2023An Overview of Catastrophic AI Riskscited by 214
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 174
- 2021Alignment of Language Agentscited by 167
- 2023Model evaluation for extreme riskscited by 167
- 2022Thinking Fast and Slow in Large Language Modelscited by 136
- 2023Boosting Theory-of-Mind Performance in Large Language Models via Promptingcited by 64
- 2023DERA: Enhancing Large Language Model Completions with Dialog-Enabled Resolving Agentscited by 52
- 2023Evaluating Superhuman Models with Consistency Checkscited by 47
- 2023Natural Selection Favors AIs over Humanscited by 24
- 2020An Analysis of Dataset Overlap on Winograd-Style Taskscited by 16
- 2023Does ChatGPT have Theory of Mind?cited by 16
- 2023Deceptive Alignment Monitoringcited by 12
Built on by
Citing papers per year: 2023: 7; 2024: 27; 2025: 38; 2026: 27.
99 papers.
Sort:
By area:
- 2024OpenAI o1 System Cardcited by 1,220
- 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 292
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2023Large Language Models can Strategically Deceive their Users when Put Under Pressurecited by 132
- 2023Avalon's Game of Thoughts: Battle Against Deception through Recursive Contemplationcited by 102
- 2023AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Modelscited by 102
- 2024Truth is Universal: Robust Detection of Lies in LLMscited by 78
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2024Do LLMs write like humans? Variation in grammatical and rhetorical stylescited by 62
- 2024Risks of AI Scientists: Prioritizing Safeguarding Over Autonomycited by 49
- 2025Emergent Abilities in Large Language Models: A Surveycited by 34
- 2024Towards evaluations-based safety cases for AI schemingcited by 32
38 more
- 2025Mitigating Deceptive Alignment via Self-Monitoringcited by 25
- 2024Theory of Mind abilities of Large Language Models in Human-Robot Interaction : An Illusion?cited by 22
- 2024BeHonest: Benchmarking Honesty in Large Language Modelscited by 20
- 2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Reviewcited by 19
- 2024Exploring the Frontiers of LLMs in Psychological Applications: A Comprehensive Reviewcited by 17
- 2025Compromising Honesty and Harmlessness in Language Models via Deception Attackscited by 17
- 2024Can LLMs make trade-offs involving stipulated pain and pleasure states?cited by 16
- 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarioscited by 14
- 2024Poser: Unmasking Alignment Faking LLMs by Manipulating Their Internalscited by 13
- 2025WOLF: Werewolf-based Observations for LLM Deception and Falsehoodscited by 13
- 2024The Road to Artificial SuperIntelligence: A Comprehensive Survey of Superalignmentcited by 11
- 2025Are Your Agents Upward Deceivers?cited by 11
- 2024Are LLMs Socially Adaptive? Contrasting Belief Evolution in Large Language Models and Humanscited by 10
- 2024Persona Setting Pitfall: Persistent Outgroup Biases in Large Language Models Arising from Social Identity Adoptioncited by 9
- 2025When Do Large Language Models Exhibit Unsolicited Deception?cited by 9
- 2024An Auditing Test To Detect Behavioral Shift in Language Modelscited by 8
- 2025The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blindcited by 7
- 2025Know Thyself? On the Incapability and Implications of AI Self-Recognitioncited by 7
- 2025Evaluating & Reducing Deceptive Dialogue From Language Models with Multi-turn RLcited by 7
- 2024Towards Safe and Honest AI Agents with Neural Self-Other Overlapcited by 6
- 2025AI Awarenesscited by 6
- 2025Caught in the Act: a mechanistic approach to detecting deceptioncited by 6
- 2024Multilevel Interpretability Of Artificial Neural Networks: Leveraging Framework And Methods From Neurosciencecited by 5
- 2025AI Agent Behavioral Sciencecited by 5
- 2025Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Promptscited by 5
- 2025A Multi-Task Evaluation of LLMs' Processing of Academic Text Inputcited by 5
- 2023Is There Any Social Principle for LLM-Based Agents?cited by 4
- 2024An Assessment of Model-On-Model Deceptioncited by 4
- 2025This Is Your Doge, If It Please You: Exploring Deception and Robustness in Mixture of LLMscited by 4
- 2025Emergence of psychopathological computations in large language modelscited by 4
- 2025Beyond Chains of Thought: Benchmarking Latent-Space Reasoning Abilities in Large Language Modelscited by 4
- 2025Psychometric Personality Shaping Modulates Capabilities and Safety in Language Modelscited by 4
- 2025Scheming Ability in LLM-to-LLM Strategic Interactionscited by 4
- 2026Emergently Misaligned Language Models Show Behavioral Self-Awareness That Shifts With Subsequent Realignmentcited by 4
- 2026Social physics in the age of artificial intelligencecited by 4
- 2026AI systems out-persuade expert humanscited by 4
- 2024Who is Undercover? Guiding LLMs to Explore Multi-Perspective Team Tactic in the Gamecited by 3
- 2024Bio-inspired AI: Integrating Biological Complexity into Artificial Intelligencecited by 3
50 most cited of 99 All 99 (JSON)
- 2026Stress-Testing LLM Lie Detectors: Role-Play Failures and Spurious Correlations30 Sep 2026
- 2026From Deceptive Outputs to Deceptive Mechanisms: A Causal Framework for Language-Model Deception Research3 Sep 2026
- 2026Knowledge-Verified Emergent Deception in LLM Agents Under Conflicting Incentives26 Aug 2026
- 2026Causal Behavioral Evaluation of AI Agents at Scale via Automated Behavioral Science10 Aug 2026
- 2026Persuasion Attacks Can Decrease Effectiveness of CoT Monitoring9 Jul 2026
- 2026When Agents Lie: Premeditation, Persistence, and Exploitation in Repeated Games6 Jul 2026
- 2026Understanding Large Language Models1 Jul 2026
- 2026AI systems out-persuade expert humans15 Jun 2026
- 2026RogueAI: A Reverse Turing Test for Detecting Licensed AI Deception in Dialogue11 Jun 2026
- 2026Sycophancy Towards Researchers Drives Performative Misalignment7 Jun 2026
- 2026When Behavioral Safety Evaluation Fails: A Representation-Level Perspective6 Jun 2026
- 2026If LLMs Have Human-Like Attributes, Then So Does Age of Empires II29 May 2026
38 more
- 2026Breaking the Impasse: Dual-Scale Evolutionary Policy Training for Social Language Agents9 May 2026
- 2026Measuring Evaluation-Context Divergence in Open-Weight LLMs: A Paired-Prompt Protocol with Pilot Evidence of Alignment-Pipeline-Specific Heterogeneity7 May 2026
- 2026Tatemae: Detecting Alignment Faking via Tool Selection in LLMs29 Apr 2026
- 2026Communicate-Predict-Act: Evaluating Social Intelligence of Agents9 Apr 2026
- 2026Readable Minds: Emergent Theory-of-Mind-Like Behavior in LLM Poker Agents5 Apr 2026
- 2026How Open Must Language Models be to Enable Reliable Scientific Inference?27 Mar 2026
- 2026Detection of adversarial intent in Human-AI teams using LLMs21 Mar 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2026"Dark Triad" Model Organisms of Misalignment: Narrow Fine-Tuning Mirrors Human Antisocial Behavior6 Mar 2026
- 2026Social physics in the age of artificial intelligence4 Mar 2026
- 2026Probing the Limits of the Lie Detector Approach to LLM Deception16 Feb 2026
- 2026Emergently Misaligned Language Models Show Behavioral Self-Awareness That Shifts With Subsequent Realignment16 Feb 2026
- 2026Data-Centric Interpretability for LLM-based Multi-Agent Reinforcement Learning5 Feb 2026
- 2026Multi-Agent Systems Should be Treated as Principal-Agent Problems30 Jan 2026
- 2026Steerability of Instrumental-Convergence Tendencies in LLMs4 Jan 2026
- 2025Safe for Whom? Rethinking How We Evaluate the Safety of LLMs for Real Users11 Dec 2025
- 2025WOLF: Werewolf-based Observations for LLM Deception and Falsehoods9 Dec 2025
- 2025Are Your Agents Upward Deceivers?4 Dec 2025
- 2025Debate with Images: Detecting Deceptive Behaviors in Multimodal Large Language Models29 Nov 2025
- 2025Estimating the Error of Large Language Models at Pairwise Text Comparison25 Oct 2025
- 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarios17 Oct 2025
- 2025Evaluating & Reducing Deceptive Dialogue From Language Models with Multi-turn RL16 Oct 2025
- 2025Scheming Ability in LLM-to-LLM Strategic Interactions11 Oct 2025
- 2025VelLMes: A high-interaction AI-based deception framework8 Oct 2025
- 2025From Poisoned to Aware: Fostering Backdoor Self-Awareness in LLMs5 Oct 2025
- 2025Know Thyself? On the Incapability and Implications of AI Self-Recognition3 Oct 2025
- 2025The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blind23 Sep 2025
- 2025Psychometric Personality Shaping Modulates Capabilities and Safety in Language Models19 Sep 2025
- 2025Caught in the Act: a mechanistic approach to detecting deception27 Aug 2025
- 2025A Multi-Task Evaluation of LLMs' Processing of Academic Text Input15 Aug 2025
- 2025Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Prompts8 Aug 2025
- 2025Against racing to AGI: Cooperation, deterrence, and catastrophic risks29 Jul 2025
- 2025Black Box Deployed -- Functional Criteria for Artificial Moral Agents in the LLM Era17 Jul 2025
- 2025"Amazing, They All Lean Left" -- Analyzing the Political Temperaments of Current LLMs8 Jul 2025
- 2025A Conceptual Framework for AI Capability Evaluations23 Jun 2025
- 2025Large Language Models are Near-Optimal Decision-Makers with a Non-Human Learning Behavior19 Jun 2025
- 2025PRISON: Unmasking the Criminal Potential of Large Language Models19 Jun 2025
- 2025AI Agent Behavioral Science4 Jun 2025
50 newest of 99 All 99 (JSON)
- 2025Are Your Agents Upward Deceivers?cited by 11
- 2024Towards Safe and Honest AI Agents with Neural Self-Other Overlapcited by 6
- 2025AI Agent Behavioral Sciencecited by 5
- 2023Is There Any Social Principle for LLM-Based Agents?cited by 4
- 2026If LLMs Have Human-Like Attributes, Then So Does Age of Empires IIcited by 2
- 2026Multi-Agent Systems Should be Treated as Principal-Agent Problemscited by 1
- 2026Data-Centric Interpretability for LLM-based Multi-Agent Reinforcement Learningcited by 1
- 2026Readable Minds: Emergent Theory-of-Mind-Like Behavior in LLM Poker Agentscited by 1
- 2025Black Box Deployed -- Functional Criteria for Artificial Moral Agents in the LLM Eracited by 0
- 2026Questionnaire Responses Do not Capture the Safety of AI Agentscited by 0
- 2026Communicate-Predict-Act: Evaluating Social Intelligence of Agentscited by 0
- 2026When Agents Lie: Premeditation, Persistence, and Exploitation in Repeated Gamescited by 0
12 most cited of 13 All 13 (JSON)
- 2026Knowledge-Verified Emergent Deception in LLM Agents Under Conflicting Incentives26 Aug 2026
- 2026When Agents Lie: Premeditation, Persistence, and Exploitation in Repeated Games6 Jul 2026
- 2026If LLMs Have Human-Like Attributes, Then So Does Age of Empires II29 May 2026
- 2026Communicate-Predict-Act: Evaluating Social Intelligence of Agents9 Apr 2026
- 2026Readable Minds: Emergent Theory-of-Mind-Like Behavior in LLM Poker Agents5 Apr 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2026Data-Centric Interpretability for LLM-based Multi-Agent Reinforcement Learning5 Feb 2026
- 2026Multi-Agent Systems Should be Treated as Principal-Agent Problems30 Jan 2026
- 2025Are Your Agents Upward Deceivers?4 Dec 2025
- 2025Black Box Deployed -- Functional Criteria for Artificial Moral Agents in the LLM Era17 Jul 2025
- 2025AI Agent Behavioral Science4 Jun 2025
- 2024Towards Safe and Honest AI Agents with Neural Self-Other Overlap20 Dec 2024
12 newest of 13 All 13 (JSON)
- 2024OpenAI o1 System Cardcited by 1,220
- 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 292
- 2023Avalon's Game of Thoughts: Battle Against Deception through Recursive Contemplationcited by 102
- 2025Mitigating Deceptive Alignment via Self-Monitoringcited by 25
- 2025Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Promptscited by 5
- 2025Beyond Chains of Thought: Benchmarking Latent-Space Reasoning Abilities in Large Language Modelscited by 4
- 2025Safe for Whom? Rethinking How We Evaluate the Safety of LLMs for Real Userscited by 1
- 2025Neither Stochastic Parroting nor AGI: LLMs Solve Tasks through Context-Directed Extrapolation from Training Data Priorscited by 0
- 2026Persuasion Attacks Can Decrease Effectiveness of CoT Monitoringcited by 0
- 2026Persuasion Attacks Can Decrease Effectiveness of CoT Monitoring9 Jul 2026
- 2025Safe for Whom? Rethinking How We Evaluate the Safety of LLMs for Real Users11 Dec 2025
- 2025Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Prompts8 Aug 2025
- 2025Neither Stochastic Parroting nor AGI: LLMs Solve Tasks through Context-Directed Extrapolation from Training Data Priors29 May 2025
- 2025Mitigating Deceptive Alignment via Self-Monitoring24 May 2025
- 2025Beyond Chains of Thought: Benchmarking Latent-Space Reasoning Abilities in Large Language Models14 Apr 2025
- 2024OpenAI o1 System Card21 Dec 2024
- 2024Deliberative Alignment: Reasoning Enables Safer Language Models20 Dec 2024
- 2023Avalon's Game of Thoughts: Battle Against Deception through Recursive Contemplation2 Oct 2023
- 2023AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Modelscited by 102
- 2024The Road to Artificial SuperIntelligence: A Comprehensive Survey of Superalignmentcited by 11
- 2026Emergently Misaligned Language Models Show Behavioral Self-Awareness That Shifts With Subsequent Realignmentcited by 4
- 2025Research Superalignment Should Advance Now with Alternating Competence and Conformity Optimizationcited by 1
- 2026Tatemae: Detecting Alignment Faking via Tool Selection in LLMscited by 1
- 2026Tatemae: Detecting Alignment Faking via Tool Selection in LLMs29 Apr 2026
- 2026Emergently Misaligned Language Models Show Behavioral Self-Awareness That Shifts With Subsequent Realignment16 Feb 2026
- 2025Research Superalignment Should Advance Now with Alternating Competence and Conformity Optimization8 Mar 2025
- 2024The Road to Artificial SuperIntelligence: A Comprehensive Survey of Superalignment21 Dec 2024
- 2023AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models23 Oct 2023
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2023Large Language Models can Strategically Deceive their Users when Put Under Pressurecited by 132
- 2024Truth is Universal: Robust Detection of Lies in LLMscited by 78
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2024Do LLMs write like humans? Variation in grammatical and rhetorical stylescited by 62
- 2024Risks of AI Scientists: Prioritizing Safeguarding Over Autonomycited by 49
- 2025Emergent Abilities in Large Language Models: A Surveycited by 34
- 2024Towards evaluations-based safety cases for AI schemingcited by 32
- 2024Theory of Mind abilities of Large Language Models in Human-Robot Interaction : An Illusion?cited by 22
- 2024BeHonest: Benchmarking Honesty in Large Language Modelscited by 20
- 2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Reviewcited by 19
- 2024Exploring the Frontiers of LLMs in Psychological Applications: A Comprehensive Reviewcited by 17
12 most cited of 68 All 68 (JSON)
- 2026Stress-Testing LLM Lie Detectors: Role-Play Failures and Spurious Correlations30 Sep 2026
- 2026From Deceptive Outputs to Deceptive Mechanisms: A Causal Framework for Language-Model Deception Research3 Sep 2026
- 2026Causal Behavioral Evaluation of AI Agents at Scale via Automated Behavioral Science10 Aug 2026
- 2026Understanding Large Language Models1 Jul 2026
- 2026AI systems out-persuade expert humans15 Jun 2026
- 2026RogueAI: A Reverse Turing Test for Detecting Licensed AI Deception in Dialogue11 Jun 2026
- 2026Sycophancy Towards Researchers Drives Performative Misalignment7 Jun 2026
- 2026Breaking the Impasse: Dual-Scale Evolutionary Policy Training for Social Language Agents9 May 2026
- 2026Measuring Evaluation-Context Divergence in Open-Weight LLMs: A Paired-Prompt Protocol with Pilot Evidence of Alignment-Pipeline-Specific Heterogeneity7 May 2026
- 2026How Open Must Language Models be to Enable Reliable Scientific Inference?27 Mar 2026
- 2026"Dark Triad" Model Organisms of Misalignment: Narrow Fine-Tuning Mirrors Human Antisocial Behavior6 Mar 2026
- 2026Social physics in the age of artificial intelligence4 Mar 2026
12 newest of 68 All 68 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025When Thinking LLMs Lie: Unveiling the Strategic Deception in Representations of Reasoning Models
- 2026DecepEval: A Benchmark for Evaluating Deception in LLM Agents
- 2026Lying to Win: Assessing LLM Deception through Human-AI Games and Parallel-World Probing
- 2025Deception in LLMs: Self-Preservation and Autonomous Goals in Large Language Models
- 2026Evaluating Large Language Models in a Complex Hidden Role Game
- 2026Hidden in Plain Text: Measuring LLM Deception Quality Against Human Baselines Using Social Deduction Games
- 2026Intentional Deception as Controllable Capability in LLM Agents
- 2023Machine Psychology