mlsanityData to 7 Oct 2026

Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation

arXiv 2510.18019 ↗First posted 20 Oct 2025cs.CL cs.AIcited by 1

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Multilingual watermarking aims to make large language model (LLM) outputs traceable across languages, yet current methods still fall short. Despite claims of cross-lingual robustness, they are evaluated only on high-resource languages. We show that existing multilingual watermarking methods are not truly multilingual: they fail to remain robust under translation attacks in medium- and low-resource languages. We trace this failure to semantic clustering, which fails when the tokenizer vocabulary contains too few full-word tokens for a given language. To address this, we introduce STEAM, a detection method that uses Bayesian optimisation to search among 126 candidate languages for the back-translation that best recovers the watermark strength. It is compatible with any watermarking method, robust across different tokenizers and languages, non-invasive, and easily extendable to new languages. With average gains of +0.23 AUC and +37%p TPR@1%, STEAM provides a scalable approach toward fairer watermarking across the diversity of languages.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 15 of its 29 references that are in the map. First posted on arXiv 20 Oct 2025.

Builds on

15 of 29 references.

Closest ancestors · 9

Same direction, newest first

  1. 2025Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID27 Aug
  2. 2025Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulations23 Feb
  3. 2024An Entropy-based Text Watermarking Detection Method20 Mar
  4. 2024Lost in Overlap: Exploring Logit-based Watermark Collision in LLMs15 Mar
  5. 2023A Robust Semantics-based Watermark for Large Language Model against Paraphrasing15 Nov
  6. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  7. 2023Watermarking Conditional Text Generation for AI Detection: Unveiling Challenges and a Semantic-Aware Watermark Remedy25 Jul
  8. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  9. 2023Who Wrote this Code? Watermarking for Code Generation24 May

Other references · 6

  1. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
  2. 2018GPyTorch: Blackbox Matrix-Matrix Gaussian Process Inference with GPU Accelerationcited by 603
  3. 2017Word Translation Without Parallel Datacited by 480
  4. 2024LLaMAX: Scaling Linguistic Horizons of LLM by Enhancing Translation Capabilities Beyond 100 Languagescited by 47
  5. 2023WatME: Towards Lossless Watermarking Through Lexical Redundancycited by 22
  6. 2024URIEL+: Enhancing Linguistic Inclusion and Usability in a Typological and Multilingual Knowledge Basecited by 21

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.