When AI Agents Collude Online: Financial Fraud Risks by Collaborative LLM Agents on Social Platforms
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
In this work, we study the risks of collective financial fraud in large-scale multi-agent systems powered by large language model (LLM) agents. We investigate whether agents can collaborate in fraudulent behaviors, how such collaboration amplifies risks, and what factors influence fraud success. To support this research, we present MultiAgentFraudBench, a large-scale benchmark for simulating financial fraud scenarios based on realistic online interactions. The benchmark covers 28 typical online fraud scenarios, spanning the full fraud lifecycle across both public and private domains. We further analyze key factors affecting fraud success, including interaction depth, activity level, and fine-grained collaboration failure modes. Finally, we propose a series of mitigation strategies, including adding content-level warnings to fraudulent posts and dialogues, using LLMs as monitors to block potentially malicious agents, and fostering group resilience through information sharing at the societal level. Notably, we observe that malicious agents can adapt to environmental interventions. Our findings highlight the real-world risks of multi-agent financial fraud and suggest practical measures for mitigating them. Code is available at https://github.com/zheng977/MutiAgent4Fraud.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 26 of its 44 references that are in the map. First posted on arXiv 9 Nov 2025.
Builds on
26 of 44 references.
Closest ancestors · 8
Same direction, newest first
- 2025Web Fraud Attacks Against LLM-Driven Multi-Agent Systems1 Sep
- 2025Is Your LLM-Based Multi-Agent a Reliable Real-World Planner? Exploring Fraud Detection in Travel Planning22 May
- 2025Personalized Attacks of Social Engineering in Multi-turn Conversations: LLM Agents for Simulation and Detection18 Mar
- 2024NetSafe: Exploring the Topological Safety of Multi-agent Networks21 Oct
- 2024Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities10 Jul
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb
- 2024PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety22 Jan
- 2023Evil Geniuses: Delving into the Safety of LLM-based Agents20 Nov
Other references · 18
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2025Qwen3 Technical Reportcited by 8,820
- 2024GPT-4o System Cardcited by 4,588
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
- 2025Why Do Multi-Agent LLM Systems Fail?cited by 604
- 2024CodeAgent: Enhancing Code Generation with Tool-Integrated Agent Systems for Real-World Repo-level Coding Challengescited by 282
- 2023S3: Social-network Simulation System with Large Language Model-Empowered Agentscited by 233
- 2024TradingAgents: Multi-Agents LLM Financial Trading Frameworkcited by 188
- 2024AgentScope: A Flexible yet Robust Multi-Agent Platformcited by 121
- 2024On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agentscited by 99
6 more
- 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMscited by 55
- 2025Fraud-R1 : A Multi-Round Benchmark for Assessing the Robustness of LLM Against Augmented Fraud and Phishing Inducementscited by 32
- 2025When Autonomy Goes Rogue: Preparing for Risks of Multi-Agent Collusion in Social Systemscited by 11
- 2025Frontier AI Risk Management Framework in Practice: A Risk Analysis Technical Reportcited by 8
- 2024An Explorative Study of Pig Butchering Scamscited by 5
- 2024Conning the Crypto Conman: End-to-End Analysis of Cryptocurrency-based Technical Support Scamscited by 2
Built on by
Citing papers per year: 2026: 8.
8 papers.
- 2026Emergent Risks in Generative Multi-Agent Systemscited by 5
- 2026Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agentscited by 4
- 2026Emergent Collusion in Long-Horizon LLM Agent Interactioncited by 2
- 2026Reinforcement Learning of Large Language Models for Interpretable Credit Card Fraud Detectioncited by 1
- 2026From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agentscited by 1
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systemscited by 1
- 2026WolfSociety: Understanding Collective Risk from Harmful-Agent Scaling in Financial Agent Societiescited by 0
- 2026Financial Fragility in Societies of LLM Agents: Coordination Failures and Stabilizing Mechanismscited by 0
- 2026Financial Fragility in Societies of LLM Agents: Coordination Failures and Stabilizing Mechanisms25 Sep 2026
- 2026Emergent Collusion in Long-Horizon LLM Agent Interaction21 Sep 2026
- 2026WolfSociety: Understanding Collective Risk from Harmful-Agent Scaling in Financial Agent Societies4 Sep 2026
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems1 Sep 2026
- 2026Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents11 Apr 2026
- 2026Emergent Risks in Generative Multi-Agent Systems29 Mar 2026
- 2026From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents8 Mar 2026
- 2026Reinforcement Learning of Large Language Models for Interpretable Credit Card Fraud Detection9 Jan 2026
Similar, not cited
Close in wording, no citation either way
- 2026SAGE: An LLM-driven Self Reflective Agentic Framework for Fraud Detection
- 2025Audit the Whisper: Detecting Steganographic Collusion in Multi-Agent LLMs
- 2026Behavior-Grounded Semantic Enrichment for Financial Fraud Modeling and Reasoning
- 2026DecepEval: A Benchmark for Evaluating Deception in LLM Agents
- 2026I must delete the evidence: AI Agents Explicitly Cover up Fraud and Violent Crime
- 2025The Agentic Regulator: Risks for AI in Finance and a Proposed Agent-based Framework for Governance
- 2026Quantifying Trust: Financial Risk Management for Trustworthy AI Agents
- 2026Contagion on the Trading Floor: How Adversarial Signals Spread in Multi-Agent Trading Systems