mlsanityData to 7 Oct 2026

LLMs Deceive Unintentionally: Emergent Misalignment in Dishonesty from Misaligned Samples to Biased Human-AI Interactions

arXiv 2510.08211 ↗First posted 9 Oct 2025cs.CL cs.AI cs.CRcited by 7

Not on the map. Why?

Abstract (arXiv)

Previous research has shown that LLMs finetuned on malicious or incorrect completions within narrow domains (e.g., insecure code or incorrect medical advice) can become broadly misaligned to exhibit harmful behaviors, which is called emergent misalignment. In this work, we investigate whether this phenomenon can extend beyond safety behaviors to a broader spectrum of dishonesty and deception under high-stakes scenarios (e.g., lying under pressure and deceptive behavior). To explore this, we finetune open-sourced LLMs on misaligned completions across diverse domains. Experimental results demonstrate that LLMs show broadly misaligned behavior in dishonesty. Additionally, we further explore this phenomenon in a downstream combined finetuning setting, and find that introducing as little as 1% of misalignment data into a standard downstream task is sufficient to decrease honest behavior over 20%. Furthermore, we consider a more practical human-AI interaction environment where we simulate both benign and biased users to interact with the assistant LLM. Notably, we find that the assistant can be misaligned unintentionally to exacerbate its dishonesty with only 10% biased user population. In summary, we extend the study of emergent misalignment to the domain of dishonesty and deception under high-stakes scenarios, and demonstrate that this risk arises not only through direct finetuning, but also in downstream mixture tasks and practical human-AI interactions. Refer to https://github.com/hxhcreate/LLM_Deceive_Unintentionally for experimental resources.

Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 35 of its 53 references that are in the map. First posted on arXiv 9 Oct 2025.

Builds on

35 of 53 references.

References · 35

  1. 2022Training language models to follow instructions with human feedbackcited by 15,712
  2. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  3. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  4. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
  5. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
  6. 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
  7. 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,442
  8. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
  9. 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
  10. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
  11. 2023LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Datasetcited by 449
  12. 2025Persona Vectors: Monitoring and Controlling Character Traits in Language Modelscited by 303
23 more
  1. 2024Frontier Models are Capable of In-context Schemingcited by 252
  2. 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMscited by 158
  3. 2023Large Language Models can Strategically Deceive their Users when Put Under Pressurecited by 132
  4. 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 131
  5. 2024Evaluating Frontier Models for Dangerous Capabilitiescited by 121
  6. 2025Model Organisms for Emergent Misalignmentcited by 84
  7. 2024VLSBench: Unveiling Visual Leakage in Multimodal Safetycited by 59
  8. 2025School of Reward Hacks: Hacking harmless tasks generalizes to misaligned behavior in LLMscited by 58
  9. 2025Thought Crime: Backdoors and Emergent Misalignment in Reasoning Modelscited by 57
  10. 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
  11. 2023Do Large Language Models Know about Facts?cited by 49
  12. 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedbackcited by 45
  13. 2024Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!cited by 36
  14. 2024AI Alignment with Changing and Influenceable Reward Functionscited by 33
  15. 2024Uncovering Deceptive Tendencies in Language Models: A Simulated Company AI Assistantcited by 32
  16. 2025Mitigating Deceptive Alignment via Self-Monitoringcited by 25
  17. 2025Layer-Aware Representation Filtering: Purifying Finetuning Data to Preserve LLM Safety Alignmentcited by 24
  18. 2025Compromising Honesty and Harmlessness in Language Models via Deception Attackscited by 17
  19. 2025RLHS: Mitigating Misalignment in RLHF with Hindsight Simulationcited by 15
  20. 2025Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systemscited by 12
  21. 2025Unintended Misalignment from Agentic Fine-Tuning: Risks and Mitigationcited by 9
  22. 2025Frontier AI Risk Management Framework in Practice: A Risk Analysis Technical Reportcited by 8
  23. 2025Decomposing Behavioral Phase Transitions in LLMs: Order Parameters for Emergent Misalignmentcited by 4

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 1; 2026: 6.

7 papers.