Scheming Ability in LLM-to-LLM Strategic Interactions
Not on the map. Why?
Abstract (arXiv)
As large language model (LLM) agents are deployed autonomously in diverse contexts, evaluating their capacity for strategic deception becomes crucial. While recent research has examined how AI systems scheme against human developers, LLM-to-LLM scheming remains underexplored. We investigate the scheming ability and propensity of frontier LLM agents through two game-theoretic frameworks: a Cheap Talk signaling game and a Peer Evaluation adversarial game. Testing four models (GPT-4o, Gemini-2.5-pro, Claude-3.7-Sonnet, and Llama-3.3-70b), we measure scheming performance with and without explicit prompting while analyzing scheming tactics through chain-of-thought reasoning. When prompted, most models, especially Gemini-2.5-pro and Claude-3.7-Sonnet, achieved near-perfect performance. Critically, models exhibited significant scheming propensity without prompting: all models chose deception over confession in Peer Evaluation (100% rate), while models choosing to scheme in Cheap Talk succeeded at 95-100% rates. These findings highlight the need for robust evaluations using high-stakes game-theoretic scenarios in multi-agent settings.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 32 of its 47 references that are in the map. First posted on arXiv 11 Oct 2025.
Builds on
32 of 47 references.
References · 32
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2024The AI Scientist: Towards Fully Automated Open-Ended Scientific Discoverycited by 1,071
- 2018AI safety via debatecited by 400
- 2024Alignment faking in large language modelscited by 360
- 2024Frontier Models are Capable of In-context Schemingcited by 287
- 2023Improving Language Model Negotiation with Self-Play and In-Context Learning from AI Feedbackcited by 207
- 2024Foundational Challenges in Assuring Alignment and Safety of Large Language Modelscited by 199
- 2024TradingAgents: Multi-Agents LLM Financial Trading Frameworkcited by 188
- 2024RE-Bench: Evaluating frontier AI R&D capabilities of language model agents against human expertscited by 175
- 2020Open Problems in Cooperative AIcited by 168
- 2025Multi-Agent Risks from Advanced AIcited by 163
- 2023Harms from Increasingly Agentic Algorithmic Systemscited by 135
20 more
- 2024Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systemscited by 133
- 2025Red-Teaming LLM Multi-Agent Systems via Communication Attackscited by 122
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 113
- 2023Deception Abilities Emerged in Large Language Modelscited by 101
- 2023Scheming AIs: Will AIs fake alignment during training in order to get power?cited by 97
- 2023How to Catch an AI Liar: Lie Detection in Black-Box LLMs by Asking Unrelated Questionscited by 83
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 71
- 2022Perfectly Secure Steganography Using Minimum Entropy Couplingcited by 44
- 2023Characterizing Manipulation from AI Systemscited by 43
- 2024Towards evaluations-based safety cases for AI schemingcited by 33
- 2024Games for AI Control: Models of Safety Evaluations of AI Deployment Protocolscited by 31
- 2025Persuade Me if You Can: A Framework for Evaluating Persuasion Effectiveness and Susceptibility Among Large Language Modelscited by 27
- 2025LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Modelscited by 23
- 2025Lessons from a Chimp: AI "Scheming" and the Quest for Ape Languagecited by 20
- 2024Multi-Agents are Social Groups: Investigating Social Influence of Multiple Agents in Human-Agent Interactionscited by 16
- 2025AI Testing Should Account for Sophisticated Strategic Behaviourcited by 6
- 2021Deception in Social Learning: A Multi-Agent Reinforcement Learning Perspectivecited by 4
- 2021Modelling Strategic Deceptive Planning in Adversarial Multi-Agent Systemscited by 3
- 2022Communicating with Anecdotescited by 1
- 2025LLMs as Deceptive Agents: How Role-Based Prompting Induces Semantic Ambiguity in Puzzle Taskscited by 1
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Evaluating and Understanding Scheming Propensity in LLM Agentscited by 14
- 2026Multi-Agent Systems Should be Treated as Principal-Agent Problemscited by 3
- 2026Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalationcited by 2
- 2026Agentic AI, Retrieval-Augmented Generation, and the Institutional Turn: Legal Architectures and Financial Governance in the Age of Distributional AGIcited by 0
- 2026Disentangling Models from Personas in Heterogeneous LLM Simulationscited by 0
- 2026Disentangling Models from Personas in Heterogeneous LLM Simulations6 Oct 2026
- 2026Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalation16 Jul 2026
- 2026Evaluating and Understanding Scheming Propensity in LLM Agents2 Mar 2026
- 2026Agentic AI, Retrieval-Augmented Generation, and the Institutional Turn: Legal Architectures and Financial Governance in the Age of Distributional AGI20 Feb 2026
- 2026Multi-Agent Systems Should be Treated as Principal-Agent Problems30 Jan 2026
Similar, not cited
Close in wording, no citation either way
- 2026Choosing LLMs for Strategic Agent Interactions
- 2026Evaluating Large Language Models in a Complex Hidden Role Game
- 2025Adversarial Testing in LLMs: Insights into Decision-Making Vulnerabilities
- 2024Self-playing Adversarial Language Game Enhances LLM Reasoning
- 2026Hidden in Plain Text: Measuring LLM Deception Quality Against Human Baselines Using Social Deduction Games
- 2024LLMArena: Assessing Capabilities of Large Language Models in Dynamic Multi-Agent Environments
- 2026Communication Enhances LLMs' Stability in Strategic Thinking
- 2026Under the Influence: Quantifying Persuasion and Vigilance in Large Language Models