Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Text
Not on the map. Why?
Abstract (arXiv)
Detecting text generated by modern large language models is thought to be hard, as both LLMs and humans can exhibit a wide range of complex behaviors. However, we find that a score based on contrasting two closely related language models is highly accurate at separating human-generated and machine-generated text. Based on this mechanism, we propose a novel LLM detector that only requires simple calculations using a pair of pre-trained LLMs. The method, called Binoculars, achieves state-of-the-art accuracy without any training data. It is capable of spotting machine text from a range of modern LLMs without any model-specific modifications. We comprehensively evaluate Binoculars on a number of text sources and in varied situations. Over a wide range of document types, Binoculars detects over 90% of generated samples from ChatGPT (and other LLMs) at a false positive rate of 0.01%, despite not being trained on any ChatGPT data.
Key facts. Cited by 263 papers in the map (data through 14 Oct 2026). Builds on 36 of its 54 references that are in the map. First posted on arXiv 22 Jan 2024.
Builds on
36 of 54 references.
References · 36
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2022Fast Inference from Transformers via Speculative Decodingcited by 1,653
- 2015Teaching Machines to Read and Comprehendcited by 1,049
- 2023Accelerating Large Language Model Decoding with Speculative Samplingcited by 1,006
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
- 2023A Watermark for Large Language Modelscited by 725
- 2022Contrastive Decoding: Open-ended Text Generation as Optimizationcited by 609
- 2019Defending Against Neural Fake Newscited by 559
- 2019Release Strategies and the Social Impacts of Language Modelscited by 513
24 more
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 496
- 2023How Close is ChatGPT to Human Experts? Comparison Corpus, Evaluation, and Detectioncited by 481
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 429
- 2023Can AI-Generated Text be Reliably Detected?cited by 386
- 2023Fast-DetectGPT: Efficient Zero-Shot Detection of Machine-Generated Text via Conditional Probability Curvaturecited by 287
- 2023DetectLLM: Leveraging Log Rank Information for Zero-Shot Detection of Machine-Generated Textcited by 210
- 2023RADAR: Robust AI-Text Detection via Adversarial Learningcited by 190
- 2023GPT detectors are biased against non-native English writerscited by 178
- 2023DNA-GPT: Divergent N-Gram Analysis for Training-Free Detection of GPT-Generated Textcited by 129
- 2023The Science of Detecting LLM-Generated Textscited by 128
- 2023M4: Multi-generator, Multi-domain, and Multi-lingual Black-Box Machine-Generated Text Detectioncited by 121
- 2023Intrinsic Dimension Estimation for Robust Detection of AI-Generated Textscited by 112
- 2023Ghostbuster: Detecting Text Ghostwritten by Large Language Modelscited by 91
- 2023On the Possibilities of AI-Generated Text Detectioncited by 88
- 2022Machine Generated Text: A Comprehensive Survey of Threat Models and Detection Methodscited by 79
- 2023Multiscale Positive-Unlabeled Detection of AI-Generated Textscited by 61
- 2020Attacking Neural Text Detectorscited by 39
- 2023HowkGPT: Investigating the Detection of ChatGPT-generated University Student Homework through Context-Aware Perplexity Analysiscited by 30
- 2023Towards Possibilities & Impossibilities of AI-generated Text Detection: A Surveycited by 28
- 2023G3Detector: General GPT-Generated Text Detectorcited by 17
- 2020Limits of Detecting Text Generated by Large-Scale Language Modelscited by 15
- 2022Fooling MOSS Detection with Pretrained Language Modelscited by 12
- 2023Detecting ChatGPT: A Survey of the State of Detecting ChatGPT-Generated Textcited by 10
- 2023A Statistical Turing Test for Generative Modelscited by 8
Built on by
Citing papers per year: 2024: 42; 2025: 91; 2026: 130.
263 papers.
Sort:
By area:
- 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 686
- 2024RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectorscited by 163
- 2025DeepScientist: Advancing Frontier-Pushing Scientific Findings Progressivelycited by 63
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-offcited by 54
- 2024SoK: Watermarking for AI-Generated Contentcited by 51
- 2024Zero-Shot Detection of AI-Generated Imagescited by 50
- 2024M4GT-Bench: Evaluation Benchmark for Black-Box Machine-Generated Text Detectioncited by 43
- 2025People who frequently use ChatGPT for writing tasks are accurate and robust detectors of AI-generated textcited by 40
- 2024DetectRL: Benchmarking LLM-Generated Text Detection in Real-World Scenarioscited by 38
- 2024Training-free LLM-generated Text Detection by Mining Token Probability Sequencescited by 35
- 2024SemEval-2024 Task 8: Multidomain, Multimodel and Multilingual Machine-Generated Text Detectioncited by 30
- 2024Beemo: Benchmark of Expert-edited Machine-generated Outputscited by 27
38 more
- 2025EditLens: Quantifying the Extent of AI Editing in Textcited by 26
- 2025RepreGuard: Detecting LLM-Generated Text by Revealing Hidden Representation Patternscited by 24
- 2024Detecting AI-Generated Text: Factors Influencing Detectability with Current Methodscited by 23
- 2024The Rise of AI-Generated Content in Wikipediacited by 22
- 2025Is Your Paper Being Reviewed by an LLM? Benchmarking AI Text Detection in Peer Reviewcited by 21
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guaranteescited by 21
- 2024Evaluation of LLM Vulnerabilities to Being Misused for Personalized Disinformation Generationcited by 20
- 2025DAMAGE: Detecting Adversarially Modified AI Generated Textcited by 20
- 2025Almost AI, Almost Human: The Challenge of Detecting AI-Polished Writingcited by 19
- 2024Are AI-Generated Text Detectors Robust to Adversarial Perturbations?cited by 16
- 2025Cost-Aware Contrastive Routing for LLMscited by 16
- 2024Exploring the Limitations of Detecting Machine-Generated Textcited by 15
- 2024Detecting Machine-Generated Texts: Not Just "AI vs Humans" and Explainability is Complicatedcited by 15
- 2025Human-LLM Coevolution: Evidence from Academic Writingcited by 15
- 2024MultiSocial: Multilingual Benchmark of Machine-Generated Text Detection of Social-Media Textscited by 14
- 2024Glimpse: Enabling White-Box Methods to Use Proprietary Models for Zero-Shot LLM-Generated Text Detectioncited by 14
- 2025Machine-generated text detection prevents language model collapsecited by 14
- 2024EAGLE: A Domain Generalization Framework for AI-generated Text Detectioncited by 13
- 2024DALD: Improving Logits-based Detector without Logits from Black-box LLMscited by 13
- 2024SilverSpeak: Evading AI-Generated Text Detectors using Homoglyphscited by 13
- 2025GenAI Content Detection Task 1: English and Multilingual Machine-Generated Text Detection: AI vs. Humancited by 13
- 2024AI "News" Content Farms Are Easy to Make and Hard to Detect: A Case Study in Italiancited by 12
- 2025DETree: DEtecting Human-AI Collaborative Texts via Tree-Structured Hierarchical Representation Learningcited by 12
- 2024Online Detection of LLM-Generated Texts via Sequential Hypothesis Testing by Bettingcited by 11
- 2025AI Safety Should Prioritize the Future of Workcited by 11
- 2025DNA-DetectLLM: Unveiling AI-Generated Text via a DNA-Inspired Mutation-Repair Paradigmcited by 11
- 2025Blackbox Model Provenance via Palimpsestic Membership Inferencecited by 11
- 2026GPTZero: Robust Detection of LLM-Generated Textscited by 11
- 2024Are AI Detectors Good Enough? A Survey on Quality of Datasets With Machine-Generated Textscited by 10
- 2024On the Generalization and Adaptation Ability of Machine-Generated Text Detectors in Academic Writingcited by 10
- 2025Reliably Bounding False Positives: A Zero-Shot Machine-Generated Text Detection Framework via Multiscaled Conformal Predictioncited by 10
- 2025Benchmarking the Detection of LLMs-Generated Modern Chinese Poetrycited by 10
- 2026Detecting LLM-Generated Text with Performance Guaranteescited by 10
- 2025Stress-testing Machine Generated Text Detection: Shifting Language Models Writing Style to Fool Detectorscited by 9
- 2025DivScore: Zero-Shot Detection of LLM-Generated Text in Specialized Domainscited by 9
- 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attackscited by 9
- 2025DetectAnyLLM: Towards Generalizable and Robust Detection of Machine-Generated Text Across Domains and Modelscited by 9
- 2026StoryScope: Investigating idiosyncrasies in AI fictioncited by 9
50 most cited of 263 All 263 (JSON)
- 2026Likelihood Is Not Authorship: Can We Reliably Measure Human Contribution in AI-Assisted Writing?14 Oct 2026
- 2026Who's Behind the Text? Robust Model Authorship Attribution14 Oct 2026
- 2026Attacking Only Half the Data: Two-Sided Evaluation of AI-Text Detector Robustness13 Oct 2026
- 2026Unchecked or Falsely Accused? Evaluating AI-Generated Text Detectors on Kazakh11 Oct 2026
- 2026Measuring Artifact Reliance in Machine-Generated Text Detectors9 Oct 2026
- 2026Belief-Trajectory Energy: Measuring the Path to a Prediction4 Oct 2026
- 2026Writerslogic at PAN 2026: Process over Content for Robust Detection under Domain Shift2 Oct 2026
- 2026DeBERTa-ConPara: Attack-Aware and Deployment-Realistic Detection of AI-Generated Text1 Oct 2026
- 2026Science or Slop?: Benchmarking and Mitigating Scientific Slop in AI-Generated Papers30 Sep 2026
- 2026Policy-Conditioned AI-Use Detection: An Evidentiary Framework for Academic Publishing29 Sep 2026
- 2026Beyond Sub-Gaussian Detector Scores: Robust Weighted Profile-Loss Change Point Detection for Human-LLM Text Segmentation29 Sep 2026
- 2026Using LLMs to Detect LLM-Generated Texts: A Cross-Generation Analysis28 Sep 2026
38 more
- 2026IVT-Guard: All-in-One Reasoning Model for AI-Generated Content Detection27 Sep 2026
- 2026C-HAT-Bench: Benchmarking Chinese AI-Text Detection Beyond Fully Generated Text26 Sep 2026
- 2026MixDetect: Word-Level Localization and Quantification of AI Editing26 Sep 2026
- 2026Agents Can Use Base Models to Evade AI Detection25 Sep 2026
- 2026Two Conformal Constructions for Adaptive Within-Document AI-Text Screening25 Sep 2026
- 2026System Attribution in LLM Brand Recommendations: Single Responses Identify the System, Aggregated Brand Profiles Do Not Transfer23 Sep 2026
- 2026How Much Were You Told? Measuring External Information in Peer Reviews23 Sep 2026
- 2026CrisisFake: Benchmark Validity of AI-Generated Text Detection for Disaster Social Sensing21 Sep 2026
- 2026Towards Detecting AI-Assisted Responses in Online Surveys15 Sep 2026
- 2026SlopShape: Identifying AI-Generated Commercial Web Content14 Sep 2026
- 2026SynthSentry: Detecting Synthetic Data Contamination in Language Model Training Data11 Sep 2026
- 2026A Mechanistic Study of AI-Text Detection Neurons in Frozen BERT: Sparse Probing and Activation Patching on RAID8 Sep 2026
- 2026IndicDetect: Evaluating Cross-Lingual LLM-Generated Text Detection for Hindi, Telugu, and Tamil30 Aug 2026
- 2026Detecting and Guiding LLM-Generated Korean Poetry with Interpretable Form-level Features29 Aug 2026
- 2026Beyond Global Scalars: Synergizing Token-Level Statistics and Deep Semantics for Adversarial AIGC Text Detection28 Aug 2026
- 2026AI Writers Have a Consistent Stylometric Footprint, but AI Editors Do Not28 Aug 2026
- 2026D2C-Routing: Dimension-to-Composition Evidence Routing for Mixed-Origin AI-Generated Text Detection27 Aug 2026
- 2026Style as a Confound: False Positives in AI Detection of Non-Native Academic Writing27 Aug 2026
- 2026Relational Over-Regularization: Graph-Based AI-Generated Text Detection via Sentence Transition Deviation27 Aug 2026
- 2026VietAIDetector: An Open-Source Zero-Shot Detector for Vietnamese AI-Generated Text26 Aug 2026
- 2026Linear Probing Provides Robust and Efficient Detection of Machine-Generated Text25 Aug 2026
- 2026Propaganda Forensics: Recovering the Generation Pipeline of an AI-Driven Influence Campaign16 Aug 2026
- 2026EVIL-Detect for NLPCC 2026 Shared Task 6: LLM-Generated Text Detection11 Aug 2026
- 2026MD-ProTector: Positioning Multiple Data-Driven Prototypes for LLM-Generated Text Detection11 Aug 2026
- 2026Build it, Break it, Repeat: Benchmarking and improving LLM-manipulated disinformation detection in social media posts10 Aug 2026
- 2026From Forensics to Ecosystems: Rethinking Watermarks for Generative AI Oversight7 Aug 2026
- 2026Once a Response, Always a Response: Detecting LLM-generated Text via Latent Prompt Restoration6 Aug 2026
- 2026CraftAlign: Feature-Grounded Evaluation and Revision Guidance for AI Stories2 Aug 2026
- 2026ARB: A Matched Authorship-Rewriting Benchmark Dataset for AI-Text Detector Evaluation31 Jul 2026
- 2026Characterizing Human-Likeness in AI Generated Poetry: A Zero-shot Classification Study28 Jul 2026
- 2026DWT-Fusion: A Signal-Based Framework for Training-Free LLM-Generated Text Detection24 Jul 2026
- 2026Detecting LLM-Generated Tokens in Human--LLM Coauthored Text23 Jul 2026
- 2026Latent Trajectory Discrimination for AI-Generated Text Detection16 Jul 2026
- 2026Show Me How You Reason and I'll Tell You Who You Are: Reasoning Graphs for Robust LLM Authorship Attribution16 Jul 2026
- 2026UTS at ELOQUENT 2026 Voight-Kampff: structural shifts in AI writing bypass state-of-the-art detectors15 Jul 2026
- 2026When Words Predict Workload6 Jul 2026
- 2026Telescope: Improving Zero Shot Detection of LLM Generated Content By Measuring Token Repetition Probability5 Jul 2026
- 2026Rethinking AI-Generated Text Detection: A Strong Baseline and the Distribution-Shift Problem That Remains4 Jul 2026
50 newest of 263 All 263 (JSON)
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-offcited by 54
- 2024SoK: Watermarking for AI-Generated Contentcited by 51
- 2025Blackbox Model Provenance via Palimpsestic Membership Inferencecited by 11
- 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attackscited by 9
- 2025Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Modelscited by 4
- 2025Machine Text Detectors are Membership Inference Attackscited by 2
- 2025PVMark: Enabling Public Verifiability for LLM Watermarking Schemescited by 2
- 2025Improving Detection of Watermarked Language Modelscited by 0
- 2026On Google's SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validationcited by 0
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimizedcited by 0
- 2026From Forensics to Ecosystems: Rethinking Watermarks for Generative AI Oversightcited by 0
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Textcited by 0
- 2026From Forensics to Ecosystems: Rethinking Watermarks for Generative AI Oversight7 Aug 2026
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text9 Jun 2026
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimized2 May 2026
- 2026On Google's SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validation3 Mar 2026
- 2025PVMark: Enabling Public Verifiability for LLM Watermarking Schemes30 Oct 2025
- 2025Blackbox Model Provenance via Palimpsestic Membership Inference22 Oct 2025
- 2025Machine Text Detectors are Membership Inference Attacks22 Oct 2025
- 2025Improving Detection of Watermarked Language Models18 Aug 2025
- 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks8 Jul 2025
- 2025Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models8 Apr 2025
- 2024SoK: Watermarking for AI-Generated Content27 Nov 2024
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off6 Mar 2024
- 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 686
- 2026Zero-Shot Detection of LLM-Generated Text via Implicit Reward Modelcited by 4
- 2025Watermarking Degrades Alignment in Language Models: Analysis and Mitigationcited by 3
- 2026Alignment Imprint: Zero-Shot AI-Generated Text Detection via Provable Preference Discrepancycited by 1
- 2026Measuring, Localizing, and Ablating Alignment Signatures in LLMscited by 0
- 2026PolyAlign: Conditional Human-Distribution Alignmentcited by 0
- 2026PolyAlign: Conditional Human-Distribution Alignment11 Jun 2026
- 2026Measuring, Localizing, and Ablating Alignment Signatures in LLMs28 May 2026
- 2026Zero-Shot Detection of LLM-Generated Text via Implicit Reward Model23 Apr 2026
- 2026Alignment Imprint: Zero-Shot AI-Generated Text Detection via Provable Preference Discrepancy18 Apr 2026
- 2025Watermarking Degrades Alignment in Language Models: Analysis and Mitigation4 Jun 2025
- 2024LLM Evaluators Recognize and Favor Their Own Generations15 Apr 2024
- 2026Deep-Research Agents Can Be Poisoned via User-Generated Contentcited by 4
- 2026From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AIcited by 0
- 2026The DeepSpeak-Agentic Datasetcited by 0
- 2026Towards Detecting AI-Assisted Responses in Online Surveyscited by 0
- 2026Agents Can Use Base Models to Evade AI Detectioncited by 0
- 2026Agents Can Use Base Models to Evade AI Detection25 Sep 2026
- 2026Towards Detecting AI-Assisted Responses in Online Surveys15 Sep 2026
- 2026The DeepSpeak-Agentic Dataset2 Jun 2026
- 2026Deep-Research Agents Can Be Poisoned via User-Generated Content22 May 2026
- 2026From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI15 May 2026
- 2025Tracing Thought: Using Chain-of-Thought Reasoning to Identify the LLM Behind AI-Generated Textcited by 3
- 2026Show Me How You Reason and I'll Tell You Who You Are: Reasoning Graphs for Robust LLM Authorship Attributioncited by 0
- 2026IVT-Guard: All-in-One Reasoning Model for AI-Generated Content Detectioncited by 0
- 2026Writerslogic at PAN 2026: Process over Content for Robust Detection under Domain Shiftcited by 0
- 2026Writerslogic at PAN 2026: Process over Content for Robust Detection under Domain Shift2 Oct 2026
- 2026IVT-Guard: All-in-One Reasoning Model for AI-Generated Content Detection27 Sep 2026
- 2026Show Me How You Reason and I'll Tell You Who You Are: Reasoning Graphs for Robust LLM Authorship Attribution16 Jul 2026
- 2025Tracing Thought: Using Chain-of-Thought Reasoning to Identify the LLM Behind AI-Generated Text23 Apr 2025
- 2026Steer-to-Detect: Probing Hidden Representations for Detection of LLM-Generated Textscited by 0
- 2026SV-Detect: AI-generated Text Detection with Steering Vectorscited by 0
- 2026Linear Probing Provides Robust and Efficient Detection of Machine-Generated Textcited by 0
- 2026A Mechanistic Study of AI-Text Detection Neurons in Frozen BERT: Sparse Probing and Activation Patching on RAIDcited by 0
- 2026A Mechanistic Study of AI-Text Detection Neurons in Frozen BERT: Sparse Probing and Activation Patching on RAID8 Sep 2026
- 2026Linear Probing Provides Robust and Efficient Detection of Machine-Generated Text25 Aug 2026
- 2026SV-Detect: AI-generated Text Detection with Steering Vectors5 Jun 2026
- 2026Steer-to-Detect: Probing Hidden Representations for Detection of LLM-Generated Texts13 May 2026
- 2024RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectorscited by 163
- 2025DeepScientist: Advancing Frontier-Pushing Scientific Findings Progressivelycited by 63
- 2024Zero-Shot Detection of AI-Generated Imagescited by 50
- 2024M4GT-Bench: Evaluation Benchmark for Black-Box Machine-Generated Text Detectioncited by 43
- 2025People who frequently use ChatGPT for writing tasks are accurate and robust detectors of AI-generated textcited by 40
- 2024DetectRL: Benchmarking LLM-Generated Text Detection in Real-World Scenarioscited by 38
- 2024Training-free LLM-generated Text Detection by Mining Token Probability Sequencescited by 35
- 2024SemEval-2024 Task 8: Multidomain, Multimodel and Multilingual Machine-Generated Text Detectioncited by 30
- 2024Beemo: Benchmark of Expert-edited Machine-generated Outputscited by 27
- 2025EditLens: Quantifying the Extent of AI Editing in Textcited by 26
- 2025RepreGuard: Detecting LLM-Generated Text by Revealing Hidden Representation Patternscited by 24
- 2024Detecting AI-Generated Text: Factors Influencing Detectability with Current Methodscited by 23
12 most cited of 228 All 228 (JSON)
- 2026Likelihood Is Not Authorship: Can We Reliably Measure Human Contribution in AI-Assisted Writing?14 Oct 2026
- 2026Who's Behind the Text? Robust Model Authorship Attribution14 Oct 2026
- 2026Attacking Only Half the Data: Two-Sided Evaluation of AI-Text Detector Robustness13 Oct 2026
- 2026Unchecked or Falsely Accused? Evaluating AI-Generated Text Detectors on Kazakh11 Oct 2026
- 2026Measuring Artifact Reliance in Machine-Generated Text Detectors9 Oct 2026
- 2026Belief-Trajectory Energy: Measuring the Path to a Prediction4 Oct 2026
- 2026DeBERTa-ConPara: Attack-Aware and Deployment-Realistic Detection of AI-Generated Text1 Oct 2026
- 2026Science or Slop?: Benchmarking and Mitigating Scientific Slop in AI-Generated Papers30 Sep 2026
- 2026Policy-Conditioned AI-Use Detection: An Evidentiary Framework for Academic Publishing29 Sep 2026
- 2026Beyond Sub-Gaussian Detector Scores: Robust Weighted Profile-Loss Change Point Detection for Human-LLM Text Segmentation29 Sep 2026
- 2026Using LLMs to Detect LLM-Generated Texts: A Cross-Generation Analysis28 Sep 2026
- 2026C-HAT-Bench: Benchmarking Chinese AI-Text Detection Beyond Fully Generated Text26 Sep 2026
12 newest of 228 All 228 (JSON)