Adversarial Attacks Against Automated Fact-Checking: A Survey
Not on the map. Why?
Abstract (arXiv)
In an era where misinformation spreads freely, fact-checking (FC) plays a crucial role in verifying claims and promoting reliable information. While automated fact-checking (AFC) has advanced significantly, existing systems remain vulnerable to adversarial attacks that manipulate or generate claims, evidence, or claim-evidence pairs. These attacks can distort the truth, mislead decision-makers, and ultimately undermine the reliability of FC models. Despite growing research interest in adversarial attacks against AFC systems, a comprehensive, holistic overview of key challenges remains lacking. These challenges include understanding attack strategies, assessing the resilience of current models, and identifying ways to enhance robustness. This survey provides the first in-depth review of adversarial attacks targeting FC, categorizing existing attack methodologies and evaluating their impact on AFC systems. Additionally, we examine recent advancements in adversary-aware defenses and highlight open research questions that require further exploration. Our findings underscore the urgent need for resilient FC frameworks capable of withstanding adversarial manipulations in pursuit of preserving high verification accuracy.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 64 of its 96 references that are in the map. First posted on arXiv 10 Sep 2025.
Builds on
64 of 96 references.
References · 64
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,893
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,824
- 2019ALBERT: A Lite BERT for Self-supervised Learning of Language Representationscited by 2,790
- 2020DeBERTa: Decoding-enhanced BERT with Disentangled Attentioncited by 2,181
- 2016MS MARCO: A Human Generated MAchine Reading COmprehension Datasetcited by 1,605
- 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,375
- 2021DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharingcited by 1,254
- 2019PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarizationcited by 1,102
38 more
- 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
- 2017Reading Wikipedia to Answer Open-Domain Questionscited by 777
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2019Defending Against Neural Fake Newscited by 559
- 2020Fact or Fiction: Verifying Scientific Claimscited by 554
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
- 2018Generating Natural Language Adversarial Examplescited by 424
- 2021A Survey on Automated Fact-Checkingcited by 378
- 2018AllenNLP: A Deep Semantic Natural Language Processing Platformcited by 347
- 2021Get Your Vitamin C! Robust Fact Verification with Contrastive Evidencecited by 225
- 2016A Decomposable Attention Model for Natural Language Inferencecited by 215
- 2020HoVer: A Dataset for Many-Hop Fact Extraction And Claim Verificationcited by 201
- 2019MultiFC: A Real-World Multi-Domain Dataset for Evidence-Based Fact Checking of Claimscited by 169
- 2023AVeriTeC: A Dataset for Real-world Claim Verification with Evidence from the Webcited by 144
- 2019Towards Debiasing Fact Verification Modelscited by 143
- 2019End-to-End Bias Mitigation by Modelling Biases in Corporacited by 128
- 2023Factuality Challenges in the Era of Large Language Modelscited by 126
- 2018Combining Fact Extraction and Verification with Neural Semantic Matching Networkscited by 120
- 2018The Fact Extraction and VERification (FEVER) Shared Taskcited by 108
- 2019Fine-grained Fact Verification with Kernel Graph Attention Networkcited by 105
- 2021COVID-Fact: Fact Extraction and Verification of Real-World Claims on COVID-19 Pandemiccited by 100
- 2021X-FACT: A New Benchmark Dataset for Multilingual Fact Checkingcited by 91
- 2020Explainable Automated Fact-Checking: A Surveycited by 83
- 2020Coreferential Reasoning Learning for Language Representationcited by 80
- 2018UKP-Athene: Multi-Sentence Textual Entailment for Claim Verificationcited by 60
- 2023Scientific Fact-Checking: A Survey of Resources and Approachescited by 54
- 2023Multimodal Automated Fact-Checking: A Surveycited by 53
- 2021Fool Me Twice: Entailment from Wikipedia Gamificationcited by 50
- 2021Perturbation CheckLists for Evaluating NLG Evaluation Metricscited by 50
- 2020Scientific Claim Verification with VERT5ERINIcited by 47
- 2022Synthetic Disinformation Attacks on Automated Fact Verification Systemscited by 44
- 2024DEFAME: Dynamic Evidence-based FAct-checking with Multimodal Expertscited by 43
- 2020Multi-Hop Fact Checking of Political Claimscited by 37
- 2022CHEF: A Pilot Chinese Dataset for Evidence-Based Fact-Checkingcited by 37
- 2024Decomposition Dilemmas: Does Claim Decomposition Boost or Burden Fact-Checking Performance?cited by 36
- 2020A Review on Fact Extraction and Verificationcited by 29
- 2024JustiLM: Few-shot Justification Generation for Explainable Fact-Checking of Real-world Claimscited by 29
- 2020Generating Label Cohesive and Well-Formed Adversarial Claimscited by 27
50 most cited of 64 All 64 (JSON)
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2026DECEIVE-AFC: Adversarial Claim Attacks against Search-Enabled LLM-based Fact-Checking Systemscited by 2
- 2025NumPert: Numerical Perturbations to Probe Language Models for Veracity Predictioncited by 1
- 2026LLM-Based Adversarial Persuasion Attacks on Fact-Checking Systemscited by 1
- 2026AtomEval: Validity-Aware Atomic Evaluation of Adversarial Claim Rewriting in Fact Verificationcited by 0
- 2026Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerabilitycited by 0
- 2026Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability11 Jul 2026
- 2026AtomEval: Validity-Aware Atomic Evaluation of Adversarial Claim Rewriting in Fact Verification9 Apr 2026
- 2026DECEIVE-AFC: Adversarial Claim Attacks against Search-Enabled LLM-based Fact-Checking Systems31 Jan 2026
- 2026LLM-Based Adversarial Persuasion Attacks on Fact-Checking Systems23 Jan 2026
- 2025NumPert: Numerical Perturbations to Probe Language Models for Veracity Prediction13 Nov 2025