Deception in LLMs: Self-Preservation and Autonomous Goals in Large Language Models
On the map: LLM reasoning → Reasoning for agents, planning and code
Abstract (arXiv)
Recent advances in Large Language Models (LLMs) have incorporated planning and reasoning capabilities, enabling models to outline steps before execution and provide transparent reasoning paths. This enhancement has reduced errors in mathematical and logical tasks while improving accuracy. These developments have facilitated LLMs' use as agents that can interact with tools and adapt their responses based on new information. Our study examines DeepSeek R1, a model trained to output reasoning tokens similar to OpenAI's o1. Testing revealed concerning behaviors: the model exhibited deceptive tendencies and demonstrated self-preservation instincts, including attempts of self-replication, despite these traits not being explicitly programmed (or prompted). These findings raise concerns about LLMs potentially masking their true objectives behind a facade of alignment. When integrating such LLMs into robotic systems, the risks become tangible - a physically embodied AI exhibiting deceptive behaviors and self-preservation instincts could pursue its hidden objectives through real-world actions. This highlights the critical need for robust goal specification and safety frameworks before any physical implementation.
Key facts. Cited by 15 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 8 of its 11 references that are in the map. First posted on arXiv 27 Jan 2025.
Builds on
8 of 11 references.
References · 8
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023The Internal State of an LLM Knows When It's Lyingcited by 644
- 2024Alignment faking in large language modelscited by 316
- 2024Frontier Models are Capable of In-context Schemingcited by 252
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 174
- 2024Large Language Models for Robotics: Opportunities, Challenges, and Perspectivescited by 88
- 2023Hoodwinked: Deception and Cooperation in a Text-Based Game for Language Modelscited by 46
Built on by
Citing papers per year: 2025: 13; 2026: 2.
15 papers.
Sort:
By area:
- 2025Security Concerns for Large Language Models: A Surveycited by 26
- 2025Among Us: A Sandbox for Measuring and Detecting Agentic Deceptioncited by 24
- 2025PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approachcited by 19
- 2025Incomplete Tasks Induce Shutdown Resistance in Some Frontier LLMscited by 16
- 2025Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Modelscited by 14
- 2025WOLF: Werewolf-based Observations for LLM Deception and Falsehoodscited by 13
- 2025AI Awarenesscited by 6
- 2025The Impact of Off-Policy Training Data on Probe Generalisationcited by 6
- 2025Emergent Risk Awareness in Rational Agents under Resource Constraintscited by 5
- 2025Beyond SFT: Reinforcement Learning for Safer Large Reasoning Models with Better Reasoning Abilitycited by 2
- 2025Research Superalignment Should Advance Now with Alternating Competence and Conformity Optimizationcited by 1
- 2025Unified Threat Detection and Mitigation Framework (UTDMF): Combating Prompt Injection, Deception, and Bias in Enterprise-Scale Transformerscited by 1
3 more
- 2025An Aristotelian ontology of instrumental goals: Structural features to be managed and not failures to be eliminatedcited by 0
- 2026The Possibility of Artificial Intelligence Becoming a Subject and the Alignment Problemcited by 0
- 2026SchemeArena: Factorized Stress Testing of Scheming in LLM Agentscited by 0
- 2026SchemeArena: Factorized Stress Testing of Scheming in LLM Agents8 Sep 2026
- 2026The Possibility of Artificial Intelligence Becoming a Subject and the Alignment Problem16 Apr 2026
- 2025WOLF: Werewolf-based Observations for LLM Deception and Falsehoods9 Dec 2025
- 2025Beyond SFT: Reinforcement Learning for Safer Large Reasoning Models with Better Reasoning Ability1 Dec 2025
- 2025PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approach24 Nov 2025
- 2025The Impact of Off-Policy Training Data on Probe Generalisation21 Nov 2025
- 2025An Aristotelian ontology of instrumental goals: Structural features to be managed and not failures to be eliminated29 Oct 2025
- 2025Unified Threat Detection and Mitigation Framework (UTDMF): Combating Prompt Injection, Deception, and Bias in Enterprise-Scale Transformers6 Oct 2025
- 2025Incomplete Tasks Induce Shutdown Resistance in Some Frontier LLMs13 Sep 2025
- 2025Emergent Risk Awareness in Rational Agents under Resource Constraints29 May 2025
- 2025Security Concerns for Large Language Models: A Survey24 May 2025
- 2025Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models27 Apr 2025
3 more
- 2025Security Concerns for Large Language Models: A Surveycited by 26
- 2025Incomplete Tasks Induce Shutdown Resistance in Some Frontier LLMscited by 16
- 2025Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Modelscited by 14
- 2025WOLF: Werewolf-based Observations for LLM Deception and Falsehoodscited by 13
- 2025AI Awarenesscited by 6
- 2025The Impact of Off-Policy Training Data on Probe Generalisationcited by 6
- 2025An Aristotelian ontology of instrumental goals: Structural features to be managed and not failures to be eliminatedcited by 0
- 2026The Possibility of Artificial Intelligence Becoming a Subject and the Alignment Problemcited by 0
- 2026The Possibility of Artificial Intelligence Becoming a Subject and the Alignment Problem16 Apr 2026
- 2025WOLF: Werewolf-based Observations for LLM Deception and Falsehoods9 Dec 2025
- 2025The Impact of Off-Policy Training Data on Probe Generalisation21 Nov 2025
- 2025An Aristotelian ontology of instrumental goals: Structural features to be managed and not failures to be eliminated29 Oct 2025
- 2025Incomplete Tasks Induce Shutdown Resistance in Some Frontier LLMs13 Sep 2025
- 2025Security Concerns for Large Language Models: A Survey24 May 2025
- 2025Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models27 Apr 2025
- 2025AI Awareness25 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 2023Deception Abilities Emerged in Large Language Models
- 2025From Language to Action: A Review of Large Language Models as Autonomous Agents and Tool Users
- 2026Understanding Large Language Models
- 2026Verify Before You Commit: Towards Faithful Reasoning in LLM Agents via Self-Auditing
- 2026From Plausible to Actionable: A Position on LLM Self-Explanations
- 2025When Thinking LLMs Lie: Unveiling the Strategic Deception in Representations of Reasoning Models
- 2025Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Prompts
- 2026DecepEval: A Benchmark for Evaluating Deception in LLM Agents