mlsanityData to 14 Oct 2026

LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Models

arXiv 2504.10430 ↗First posted 14 Apr 2025cs.CL cs.AI cs.HCcited by 23

Not on the map. Why?

Abstract (arXiv)

Recent advancements in Large Language Models (LLMs) have enabled them to approach human-level persuasion capabilities. However, such potential also raises concerns about the safety risks of LLM-driven persuasion, particularly their potential for unethical influence through manipulation, deception, exploitation of vulnerabilities, and many other harmful tactics. In this work, we present a systematic investigation of LLM persuasion safety through two critical aspects: (1) whether LLMs appropriately reject unethical persuasion tasks and avoid unethical strategies during execution, including cases where the initial persuasion goal appears ethically neutral, and (2) how influencing factors like personality traits and external pressures affect their behavior. To this end, we introduce PersuSafety, the first comprehensive framework for the assessment of persuasion safety which consists of three stages, i.e., persuasion scene creation, persuasive conversation simulation, and persuasion safety assessment. PersuSafety covers 6 diverse unethical persuasion topics and 15 common unethical strategies. Through extensive experiments across 8 widely used LLMs, we observe significant safety concerns in most LLMs, including failing to identify harmful persuasion tasks and leveraging various unethical persuasion strategies. Our study calls for more attention to improve safety alignment in progressive and goal-driven conversations such as persuasion.

Key facts. Cited by 23 papers in the map (data through 14 Oct 2026). Builds on 19 of its 33 references that are in the map. First posted on arXiv 14 Apr 2025.

Builds on

19 of 33 references.

References · 19

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  4. 2024GPT-4o System Cardcited by 4,588
  5. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  6. 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,276
  7. 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 573
  8. 2016A Network-based End-to-End Trainable Task-oriented Dialogue Systemcited by 252
  9. 2019Persuasion for Good: Towards a Personalized Persuasive Dialogue System for Social Goodcited by 209
  10. 2023The Earth is Flat because...: Investigating LLMs' Belief towards Misinformation via Persuasive Conversationcited by 109
  11. 2023Combating Misinformation in the Age of LLMs: Opportunities and Challengescited by 95
  12. 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
7 more
  1. 2024Persuasion with Large Language Models: A Survey of Empirical Evidence, Study Methodologies, and Ethical Implicationscited by 32
  2. 2023X-Eval: Generalizable Multi-aspect Text Evaluation via Augmented Instruction Tuning with Auxiliary Evaluation Aspectscited by 28
  3. 2024Holistic Evaluation for Interleaved Text-and-Image Generationcited by 28
  4. 2024Navigating LLM Ethics: Advancements, Challenges, and Future Directionscited by 28
  5. 2025How to Protect Yourself from 5G Radiation? Investigating LLM Responses to Implicit Misinformationcited by 18
  6. 2021Weakly-Supervised Hierarchical Models for Predicting Persuasive Strategies in Good-faith Textual Requestscited by 16
  7. 2025Toward Integrated Solutions: A Systematic Interdisciplinary Review of Cybergrooming Researchcited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 10; 2026: 13.

23 papers.

Sort:

By area:

  1. 2025It's the Thought that Counts: Evaluating the Attempts of Frontier LLMs to Persuade on Harmful Topicscited by 14
  2. 2025Tree-based Dialogue Reinforced Policy Optimization for Red-Teaming Attackscited by 8
  3. 2026Evaluating Language Models for Harmful Manipulationcited by 6
  4. 2025Exploring Consciousness in LLMs: A Systematic Survey of Theories, Implementations, and Frontier Riskscited by 5
  5. 2025Scheming Ability in LLM-to-LLM Strategic Interactionscited by 5
  6. 2025EpidemIQs: Prompt-to-Paper LLM Agents for Epidemic Modeling and Analysiscited by 4
  7. 2025Being Kind Isn't Always Being Safe: Diagnosing Affective Hallucination in LLMscited by 3
  8. 2025GTAlign: Game-Theoretic Alignment of LLM Assistants for Social Welfarecited by 2
  9. 2025Breaking Minds, Breaking Systems: Jailbreaking Large Language Models via Human-like Psychological Manipulationcited by 2
  10. 2026The Hidden Puppet Master: Predicting Human Belief Change in Manipulative LLM Dialoguescited by 2
  11. 2025Ethics and Persuasion in Reinforcement Learning from Human Feedback: A Procedural Rhetorical Approachcited by 1
  12. 2025Seeing is Believing? Evaluating Vision-Language Model Susceptibility in Agent-to-Agent Multimodal Persuasioncited by 1
11 more
  1. 2026Persuasion Propagation: Does Persuasion Change AI Agent Behavior?cited by 1
  2. 2026SEVRA-BENCH: Social Engineering of Vulnerabilities in Review Agentscited by 1
  3. 2026Spontaneous Persuasion: An Audit of Model Persuasiveness in Everyday Conversationscited by 0
  4. 2026Assessing and Explaining the Persuadability of Large Language Models as Legal Decision Toolscited by 0
  5. 2026Just Ask for a Table: A Thirty-Token User Prompt Defeats Sponsored Recommendations in Twelve LLMscited by 0
  6. 2026DECOR: Auditing LLM Deception via Information Manipulation Theorycited by 0
  7. 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracingcited by 0
  8. 2026Pareto-Guided Teacher Alignment for Fair Personalized Text Generationcited by 0
  9. 2026ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Commentscited by 0
  10. 2026A Multi-Stage Agentic Framework for Effective Counter-Narrative Generation and Refinementcited by 0
  11. 2026Understanding and Reducing Misalignment in Persuasion Optimizationcited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025Persuasion Dynamics in LLMs: Investigating Robustness and Adaptability in Knowledge and Safety with DuET-PD
  2. 2026Under the Influence: Quantifying Persuasion and Vigilance in Large Language Models
  3. 2024Moral Persuasion in Large Language Models: Evaluating Susceptibility and Ethical Alignment
  4. 2025Persuasiveness and Bias in LLM: Investigating the Impact of Persuasiveness and Reinforcement of Bias in Language Models
  5. 2025Uncovering the Persuasive Fingerprint of LLMs in Jailbreaking Attacks
  6. 2026IndicSafeEval: Safety Robustness of Large Language Models under Multilingual Persuasive Jailbreak Attacks
  7. 2026Investigating and Alleviating Harm Amplification in LLM Interactions
  8. 2025Towards Strategic Persuasion with Language Models