Among Us: A Sandbox for Measuring and Detecting Agentic Deception
On the map: LLM agents and tool use → Social simulation and multi-agent debate
also in 1 more
Abstract (arXiv)
Prior studies on deception in language-based AI agents typically assess whether the agent produces a false statement about a topic, or makes a binary choice prompted by a goal, rather than allowing open-ended deceptive behavior to emerge in pursuit of a longer-term goal. To fix this, we introduce Among Us, a sandbox social deception game where LLM-agents exhibit long-term, open-ended deception as a consequence of the game objectives. While most benchmarks saturate quickly, Among Us can be expected to last much longer, because it is a multi-player game far from equilibrium. Using the sandbox, we evaluate 18 proprietary and open-weight LLMs and uncover a general trend: models trained with RL are comparatively much better at producing deception than detecting it. We evaluate the effectiveness of methods to detect lying and deception: logistic regression on the activations and sparse autoencoders (SAEs). We find that probes trained on a dataset of "pretend you're a dishonest model:.." generalize extremely well out-of-distribution, consistently obtaining AUROCs over 95% even when evaluated just on the deceptive statement, without the chain of thought. We also find two SAE features that work well at deception detection but are unable to steer the model to lie less. We hope our open-sourced sandbox, game logs, and probes serve to anticipate and mitigate deceptive behavior and capabilities in language-based agents.
Key facts. Cited by 26 papers in the map (data through 14 Oct 2026). Placed in Social simulation and multi-agent debate, one of 16 directions in LLM agents and tool use. Builds on 24 of its 38 references that are in the map. First posted on arXiv 5 Apr 2025.
Builds on
24 of 38 references.
References · 24
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,218
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,420
- 2016Understanding intermediate layers using linear classifier probescited by 1,353
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 767
- 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 712
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2024Alignment faking in large language modelscited by 360
- 2023Exploring Large Language Models for Communication Games: An Empirical Study on Werewolfcited by 241
- 2023AI Control: Improving Safety Despite Intentional Subversioncited by 229
- 2024A Survey on Large Language Model-Based Game Agentscited by 112
12 more
- 2025Detecting Strategic Deception Using Linear Probescited by 68
- 2022Mastering the Game of No-Press Diplomacy via Human-Regularized Reinforcement Learning and Planningcited by 48
- 2023Hoodwinked: Deception and Cooperation in a Text-Based Game for Language Modelscited by 47
- 2025Gradual Disempowerment: Systemic Existential Risks from Incremental AI Developmentcited by 46
- 2024Richelieu: Self-Evolving LLM-Based Agents for AI Diplomacycited by 36
- 2024AMONGAGENTS: Evaluating Large Language Models in the Interactive Text-Based Social Deduction Gamecited by 28
- 2025Deception in LLMs: Self-Preservation and Autonomous Goals in Large Language Modelscited by 16
- 2025Training Language Models for Social Deduction with Multi-Agent Reinforcement Learningcited by 16
- 2024Lies, Damned Lies, and Distributional Language Statistics: Persuasion and Deception with Large Language Modelscited by 15
- 2025Line Goes Up? Inherent Limitations of Benchmarks for Evaluating Large Language Modelscited by 14
- 2024Multi-Agent Training for Pommerman: Curriculum Learning and Population-based Self-Play Approachcited by 3
- 2024LLMs are Superior Feedback Providers: Bootstrapping Reasoning for Lie Detection with Self-Generated Feedbackcited by 2
Built on by
Citing papers per year: 2025: 7; 2026: 19.
26 papers.
Sort:
By area:
- 2025TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systemscited by 59
- 2026Lying with Truths: Open-Channel Multi-Agent Collusion for Belief Manipulation via Generative Montagecited by 19
- 2025Difficulties with Evaluating a Deception Detector for AIscited by 13
- 2025Deceive, Detect, and Disclose: Large Language Models Play Mini-Mafiacited by 9
- 2026Among Us: Measuring and Mitigating Malicious Contributions in Model Collaboration Systemscited by 7
- 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretabilitycited by 7
- 2025A Mathematical Philosophy of Explanations in Mechanistic Interpretability -- The Strange Science Part I.icited by 6
- 2026LieCraft: A Multi-Agent Framework for Evaluating Deceptive Capabilities in Language Modelscited by 5
- 2025PhenoAssistant: A Conversational Multi-Agent AI System for Automated Plant Phenotypingcited by 4
- 2026Activation Steering for Aligned Open-ended Generation without Sacrificing Coherencecited by 4
- 2026Deception and Communication in Autonomous Multi-Agent Systems: An Experimental Study with Among Uscited by 3
- 2025Shall We Play a Game? Language Models for Open-ended Wargamescited by 2
14 more
- 2026MaMa: A Game-Theoretic Approach for Designing Safe Agentic Systemscited by 2
- 2026MafiaScope: Non-Invasive, Time-Resolved Belief Probing for LLM Agents in Social Deduction Gamescited by 2
- 2026Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalationcited by 2
- 2025Debate with Images: Detecting Deceptive Behaviors in Multimodal Large Language Modelscited by 1
- 2026ElecTwit: A Framework for Studying Persuasion in Multi-Agent Social Systemscited by 1
- 2026Evaluating Large Language Models in a Complex Hidden Role Gamecited by 1
- 2026Behind EvoMap: Characterizing a Self-Evolving Agent-to-Agent Collaboration Networkcited by 1
- 2026RogueAI: A Reverse Turing Test for Detecting Licensed AI Deception in Dialoguecited by 1
- 2026Disentangling Deception and Hallucination Failures in LLMscited by 0
- 2026SocialGrid: A Benchmark for Planning and Social Reasoning in Embodied Multi-Agent Systemscited by 0
- 2026Even More Deception: Objective Misalignment in Mixed-Motive LLM Multi-Agent Systemscited by 0
- 2026Can Agents Deceive? Evaluating Reasoning and Deception in ParliamentBench using a Social Deduction Gamecited by 0
- 2026MARBO: Relational Belief Grounding for LLM Agents in Social Deduction Gamescited by 0
- 2026MCAIR: Monitoring and Correcting Agent Unfaithfulness via Internal Representationscited by 0
- 2026MCAIR: Monitoring and Correcting Agent Unfaithfulness via Internal Representations14 Oct 2026
- 2026MARBO: Relational Belief Grounding for LLM Agents in Social Deduction Games6 Sep 2026
- 2026Can Agents Deceive? Evaluating Reasoning and Deception in ParliamentBench using a Social Deduction Game30 Jul 2026
- 2026Even More Deception: Objective Misalignment in Mixed-Motive LLM Multi-Agent Systems28 Jul 2026
- 2026Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalation16 Jul 2026
- 2026MafiaScope: Non-Invasive, Time-Resolved Belief Probing for LLM Agents in Social Deduction Games12 Jul 2026
- 2026RogueAI: A Reverse Turing Test for Detecting Licensed AI Deception in Dialogue11 Jun 2026
- 2026Behind EvoMap: Characterizing a Self-Evolving Agent-to-Agent Collaboration Network25 May 2026
- 2026SocialGrid: A Benchmark for Planning and Social Reasoning in Embodied Multi-Agent Systems17 Apr 2026
- 2026Evaluating Large Language Models in a Complex Hidden Role Game9 Apr 2026
- 2026Activation Steering for Aligned Open-ended Generation without Sacrificing Coherence9 Apr 2026
- 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretability1 Apr 2026
14 more
- 2026Deception and Communication in Autonomous Multi-Agent Systems: An Experimental Study with Among Us27 Mar 2026
- 2026LieCraft: A Multi-Agent Framework for Evaluating Deceptive Capabilities in Language Models6 Mar 2026
- 2026Disentangling Deception and Hallucination Failures in LLMs16 Feb 2026
- 2026Among Us: Measuring and Mitigating Malicious Contributions in Model Collaboration Systems5 Feb 2026
- 2026MaMa: A Game-Theoretic Approach for Designing Safe Agentic Systems4 Feb 2026
- 2026Lying with Truths: Open-Channel Multi-Agent Collusion for Belief Manipulation via Generative Montage4 Jan 2026
- 2026ElecTwit: A Framework for Studying Persuasion in Multi-Agent Social Systems2 Jan 2026
- 2025Debate with Images: Detecting Deceptive Behaviors in Multimodal Large Language Models29 Nov 2025
- 2025Difficulties with Evaluating a Deception Detector for AIs27 Nov 2025
- 2025Deceive, Detect, and Disclose: Large Language Models Play Mini-Mafia27 Sep 2025
- 2025Shall We Play a Game? Language Models for Open-ended Wargames21 Sep 2025
- 2025TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems4 Jun 2025
- 2025A Mathematical Philosophy of Explanations in Mechanistic Interpretability -- The Strange Science Part I.i1 May 2025
- 2025PhenoAssistant: A Conversational Multi-Agent AI System for Automated Plant Phenotyping28 Apr 2025
- 2025TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systemscited by 59
- 2026Among Us: Measuring and Mitigating Malicious Contributions in Model Collaboration Systemscited by 7
- 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretabilitycited by 7
- 2026LieCraft: A Multi-Agent Framework for Evaluating Deceptive Capabilities in Language Modelscited by 5
- 2025PhenoAssistant: A Conversational Multi-Agent AI System for Automated Plant Phenotypingcited by 4
- 2026Deception and Communication in Autonomous Multi-Agent Systems: An Experimental Study with Among Uscited by 3
- 2026MaMa: A Game-Theoretic Approach for Designing Safe Agentic Systemscited by 2
- 2026MafiaScope: Non-Invasive, Time-Resolved Belief Probing for LLM Agents in Social Deduction Gamescited by 2
- 2026Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalationcited by 2
- 2026ElecTwit: A Framework for Studying Persuasion in Multi-Agent Social Systemscited by 1
- 2026Even More Deception: Objective Misalignment in Mixed-Motive LLM Multi-Agent Systemscited by 0
- 2026MARBO: Relational Belief Grounding for LLM Agents in Social Deduction Gamescited by 0
12 most cited of 13 All 13 (JSON)
- 2026MCAIR: Monitoring and Correcting Agent Unfaithfulness via Internal Representations14 Oct 2026
- 2026MARBO: Relational Belief Grounding for LLM Agents in Social Deduction Games6 Sep 2026
- 2026Even More Deception: Objective Misalignment in Mixed-Motive LLM Multi-Agent Systems28 Jul 2026
- 2026Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalation16 Jul 2026
- 2026MafiaScope: Non-Invasive, Time-Resolved Belief Probing for LLM Agents in Social Deduction Games12 Jul 2026
- 2026Detecting Multi-Agent Collusion Through Multi-Agent Interpretability1 Apr 2026
- 2026Deception and Communication in Autonomous Multi-Agent Systems: An Experimental Study with Among Us27 Mar 2026
- 2026LieCraft: A Multi-Agent Framework for Evaluating Deceptive Capabilities in Language Models6 Mar 2026
- 2026Among Us: Measuring and Mitigating Malicious Contributions in Model Collaboration Systems5 Feb 2026
- 2026MaMa: A Game-Theoretic Approach for Designing Safe Agentic Systems4 Feb 2026
- 2026ElecTwit: A Framework for Studying Persuasion in Multi-Agent Social Systems2 Jan 2026
- 2025TRiSM for Agentic AI: A Review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems4 Jun 2025
12 newest of 13 All 13 (JSON)
- 2026Lying with Truths: Open-Channel Multi-Agent Collusion for Belief Manipulation via Generative Montagecited by 19
- 2026SocialGrid: A Benchmark for Planning and Social Reasoning in Embodied Multi-Agent Systemscited by 0
- 2026Can Agents Deceive? Evaluating Reasoning and Deception in ParliamentBench using a Social Deduction Gamecited by 0
- 2026Can Agents Deceive? Evaluating Reasoning and Deception in ParliamentBench using a Social Deduction Game30 Jul 2026
- 2026SocialGrid: A Benchmark for Planning and Social Reasoning in Embodied Multi-Agent Systems17 Apr 2026
- 2026Lying with Truths: Open-Channel Multi-Agent Collusion for Belief Manipulation via Generative Montage4 Jan 2026
- 2025Difficulties with Evaluating a Deception Detector for AIscited by 13
- 2025Deceive, Detect, and Disclose: Large Language Models Play Mini-Mafiacited by 9
- 2025Shall We Play a Game? Language Models for Open-ended Wargamescited by 2
- 2026Evaluating Large Language Models in a Complex Hidden Role Gamecited by 1
- 2026Behind EvoMap: Characterizing a Self-Evolving Agent-to-Agent Collaboration Networkcited by 1
- 2026RogueAI: A Reverse Turing Test for Detecting Licensed AI Deception in Dialoguecited by 1
- 2026Disentangling Deception and Hallucination Failures in LLMscited by 0
- 2026RogueAI: A Reverse Turing Test for Detecting Licensed AI Deception in Dialogue11 Jun 2026
- 2026Behind EvoMap: Characterizing a Self-Evolving Agent-to-Agent Collaboration Network25 May 2026
- 2026Evaluating Large Language Models in a Complex Hidden Role Game9 Apr 2026
- 2026Disentangling Deception and Hallucination Failures in LLMs16 Feb 2026
- 2025Difficulties with Evaluating a Deception Detector for AIs27 Nov 2025
- 2025Deceive, Detect, and Disclose: Large Language Models Play Mini-Mafia27 Sep 2025
- 2025Shall We Play a Game? Language Models for Open-ended Wargames21 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2026Hidden in Plain Text: Measuring LLM Deception Quality Against Human Baselines Using Social Deduction Games
- 2026Lying to Win: Assessing LLM Deception through Human-AI Games and Parallel-World Probing
- 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarios
- 2026Lies We Can See: Joint Verbal and Non-Verbal Deception by VLM Agents in Embodied Social Interactions
- 2026DecepEval: A Benchmark for Evaluating Deception in LLM Agents
- 2025The Traitors: Deception and Trust in Multi-Agent Language Model Simulations
- 2025When Thinking LLMs Lie: Unveiling the Strategic Deception in Representations of Reasoning Models
- 2025The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systems