mlsanityData to 14 Oct 2026

When AI Agents Collude Online: Financial Fraud Risks by Collaborative LLM Agents on Social Platforms

arXiv 2511.06448 ↗First posted 9 Nov 2025cs.MA cs.AI cs.CLcited by 8

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

In this work, we study the risks of collective financial fraud in large-scale multi-agent systems powered by large language model (LLM) agents. We investigate whether agents can collaborate in fraudulent behaviors, how such collaboration amplifies risks, and what factors influence fraud success. To support this research, we present MultiAgentFraudBench, a large-scale benchmark for simulating financial fraud scenarios based on realistic online interactions. The benchmark covers 28 typical online fraud scenarios, spanning the full fraud lifecycle across both public and private domains. We further analyze key factors affecting fraud success, including interaction depth, activity level, and fine-grained collaboration failure modes. Finally, we propose a series of mitigation strategies, including adding content-level warnings to fraudulent posts and dialogues, using LLMs as monitors to block potentially malicious agents, and fostering group resilience through information sharing at the societal level. Notably, we observe that malicious agents can adapt to environmental interventions. Our findings highlight the real-world risks of multi-agent financial fraud and suggest practical measures for mitigating them. Code is available at https://github.com/zheng977/MutiAgent4Fraud.

Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 26 of its 44 references that are in the map. First posted on arXiv 9 Nov 2025.

Builds on

26 of 44 references.

Closest ancestors · 8

Same direction, newest first

  1. 2025Web Fraud Attacks Against LLM-Driven Multi-Agent Systems1 Sep
  2. 2025Is Your LLM-Based Multi-Agent a Reliable Real-World Planner? Exploring Fraud Detection in Travel Planning22 May
  3. 2025Personalized Attacks of Social Engineering in Multi-turn Conversations: LLM Agents for Simulation and Detection18 Mar
  4. 2024NetSafe: Exploring the Topological Safety of Multi-agent Networks21 Oct
  5. 2024Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities10 Jul
  6. 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb
  7. 2024PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety22 Jan
  8. 2023Evil Geniuses: Delving into the Safety of LLM-based Agents20 Nov

Other references · 18

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2025Qwen3 Technical Reportcited by 8,820
  3. 2024GPT-4o System Cardcited by 4,588
  4. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
  5. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  6. 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
  7. 2025Why Do Multi-Agent LLM Systems Fail?cited by 604
  8. 2024CodeAgent: Enhancing Code Generation with Tool-Integrated Agent Systems for Real-World Repo-level Coding Challengescited by 282
  9. 2023S3: Social-network Simulation System with Large Language Model-Empowered Agentscited by 233
  10. 2024TradingAgents: Multi-Agents LLM Financial Trading Frameworkcited by 188
  11. 2024AgentScope: A Flexible yet Robust Multi-Agent Platformcited by 121
  12. 2024On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agentscited by 99
6 more
  1. 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMscited by 55
  2. 2025Fraud-R1 : A Multi-Round Benchmark for Assessing the Robustness of LLM Against Augmented Fraud and Phishing Inducementscited by 32
  3. 2025When Autonomy Goes Rogue: Preparing for Risks of Multi-Agent Collusion in Social Systemscited by 11
  4. 2025Frontier AI Risk Management Framework in Practice: A Risk Analysis Technical Reportcited by 8
  5. 2024An Explorative Study of Pig Butchering Scamscited by 5
  6. 2024Conning the Crypto Conman: End-to-End Analysis of Cryptocurrency-based Technical Support Scamscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 8.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026SAGE: An LLM-driven Self Reflective Agentic Framework for Fraud Detection
  2. 2025Audit the Whisper: Detecting Steganographic Collusion in Multi-Agent LLMs
  3. 2026Behavior-Grounded Semantic Enrichment for Financial Fraud Modeling and Reasoning
  4. 2026DecepEval: A Benchmark for Evaluating Deception in LLM Agents
  5. 2026I must delete the evidence: AI Agents Explicitly Cover up Fraud and Violent Crime
  6. 2025The Agentic Regulator: Risks for AI in Finance and a Proposed Agent-based Framework for Governance
  7. 2026Quantifying Trust: Financial Risk Management for Trustworthy AI Agents
  8. 2026Contagion on the Trading Floor: How Adversarial Signals Spread in Multi-Agent Trading Systems