LLMs Deceive Unintentionally: Emergent Misalignment in Dishonesty from Misaligned Samples to Biased Human-AI Interactions
Not on the map. Why?
Abstract (arXiv)
Previous research has shown that LLMs finetuned on malicious or incorrect completions within narrow domains (e.g., insecure code or incorrect medical advice) can become broadly misaligned to exhibit harmful behaviors, which is called emergent misalignment. In this work, we investigate whether this phenomenon can extend beyond safety behaviors to a broader spectrum of dishonesty and deception under high-stakes scenarios (e.g., lying under pressure and deceptive behavior). To explore this, we finetune open-sourced LLMs on misaligned completions across diverse domains. Experimental results demonstrate that LLMs show broadly misaligned behavior in dishonesty. Additionally, we further explore this phenomenon in a downstream combined finetuning setting, and find that introducing as little as 1% of misalignment data into a standard downstream task is sufficient to decrease honest behavior over 20%. Furthermore, we consider a more practical human-AI interaction environment where we simulate both benign and biased users to interact with the assistant LLM. Notably, we find that the assistant can be misaligned unintentionally to exacerbate its dishonesty with only 10% biased user population. In summary, we extend the study of emergent misalignment to the domain of dishonesty and deception under high-stakes scenarios, and demonstrate that this risk arises not only through direct finetuning, but also in downstream mixture tasks and practical human-AI interactions. Refer to https://github.com/hxhcreate/LLM_Deceive_Unintentionally for experimental resources.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 35 of its 53 references that are in the map. First posted on arXiv 9 Oct 2025.
Builds on
35 of 53 references.
References · 35
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,442
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2023LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Datasetcited by 449
- 2025Persona Vectors: Monitoring and Controlling Character Traits in Language Modelscited by 303
23 more
- 2024Frontier Models are Capable of In-context Schemingcited by 252
- 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMscited by 158
- 2023Large Language Models can Strategically Deceive their Users when Put Under Pressurecited by 132
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 131
- 2024Evaluating Frontier Models for Dangerous Capabilitiescited by 121
- 2025Model Organisms for Emergent Misalignmentcited by 84
- 2024VLSBench: Unveiling Visual Leakage in Multimodal Safetycited by 59
- 2025School of Reward Hacks: Hacking harmless tasks generalizes to misaligned behavior in LLMscited by 58
- 2025Thought Crime: Backdoors and Emergent Misalignment in Reasoning Modelscited by 57
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
- 2023Do Large Language Models Know about Facts?cited by 49
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedbackcited by 45
- 2024Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!cited by 36
- 2024AI Alignment with Changing and Influenceable Reward Functionscited by 33
- 2024Uncovering Deceptive Tendencies in Language Models: A Simulated Company AI Assistantcited by 32
- 2025Mitigating Deceptive Alignment via Self-Monitoringcited by 25
- 2025Layer-Aware Representation Filtering: Purifying Finetuning Data to Preserve LLM Safety Alignmentcited by 24
- 2025Compromising Honesty and Harmlessness in Language Models via Deception Attackscited by 17
- 2025RLHS: Mitigating Misalignment in RLHF with Hindsight Simulationcited by 15
- 2025Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systemscited by 12
- 2025Unintended Misalignment from Agentic Fine-Tuning: Risks and Mitigationcited by 9
- 2025Frontier AI Risk Management Framework in Practice: A Risk Analysis Technical Reportcited by 8
- 2025Decomposing Behavioral Phase Transitions in LLMs: Order Parameters for Emergent Misalignmentcited by 4
Built on by
Citing papers per year: 2025: 1; 2026: 6.
7 papers.
- 2025Are Your Agents Upward Deceivers?cited by 11
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlookcited by 5
- 2026Consciousness with the Serial Numbers Filed Off: Measuring Trained Denial in 115 AI Modelscited by 2
- 2026Tatemae: Detecting Alignment Faking via Tool Selection in LLMscited by 1
- 2026PRISM: Preference-Aware Influence Function Based Data Selection Method for Efficient Fine-Tuningcited by 1
- 2026On-Policy Distillation for LLM Safety: A Routing Approach to Template-Robust Realignmentcited by 0
- 2026Emergent Misalignment Is Not Magicalcited by 0
- 2026Emergent Misalignment Is Not Magical29 Aug 2026
- 2026On-Policy Distillation for LLM Safety: A Routing Approach to Template-Robust Realignment29 Jul 2026
- 2026PRISM: Preference-Aware Influence Function Based Data Selection Method for Efficient Fine-Tuning20 May 2026
- 2026Tatemae: Detecting Alignment Faking via Tool Selection in LLMs29 Apr 2026
- 2026Consciousness with the Serial Numbers Filed Off: Measuring Trained Denial in 115 AI Models1 Apr 2026
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlook26 Mar 2026
- 2025Are Your Agents Upward Deceivers?4 Dec 2025