The Facade of Truth: Uncovering and Mitigating LLM Susceptibility to Deceptive Evidence
Not on the map. Why?
Abstract (arXiv)
To reliably assist human decision-making, LLMs must maintain factual internal beliefs against misleading injections. While current models resist explicit misinformation, we uncover a fundamental vulnerability to sophisticated, hard-to-falsify evidence. To systematically probe this weakness, we introduce MisBelief, a framework that generates misleading evidence via collaborative, multi-round interactions among multi-role LLMs. This process mimics subtle, defeasible reasoning and progressive refinement to create logically persuasive yet factually deceptive claims. Using MisBelief, we generate 4,800 instances across three difficulty levels to evaluate 7 representative LLMs. Results indicate that while models are robust to direct misinformation, they are highly sensitive to this refined evidence: belief scores in falsehoods increase by an average of 93.0%, fundamentally compromising downstream recommendations. To address this, we propose Deceptive Intent Shielding (DIS), a governance mechanism that provides an early warning signal by inferring the deceptive intent behind evidence. Empirical results demonstrate that DIS consistently mitigates belief shifts and promotes more cautious evidence evaluation.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 46 of its 84 references that are in the map. First posted on arXiv 9 Jan 2026.
Builds on
46 of 84 references.
References · 46
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2024LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Codecited by 1,906
- 2024MMLU-Pro: A More Robust and Challenging Multi-Task Language Understanding Benchmarkcited by 1,758
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 533
- 2018FakeNewsNet: A Data Repository with News Content, Social Context and Spatialtemporal Information for Studying Fake News on Social Mediacited by 281
- 2017Automatic Detection of Fake Newscited by 145
- 2023The Truth is in There: Improving Reasoning in Language Models with Layer-Selective Rank Reductioncited by 120
- 2023The Earth is Flat because...: Investigating LLMs' Belief towards Misinformation via Persuasive Conversationcited by 107
- 2025Which Economic Tasks are Performed with AI? Evidence from Millions of Claude Conversationscited by 88
- 2017SemEval-2017 Task 8: RumourEval: Determining rumour veracity and support for rumourscited by 77
- 2023Fake News in Sheep's Clothing: Robust Fake News Detection Against LLM-Empowered Style Attackscited by 69
34 more
- 2023LatestEval: Addressing Data Contamination in Language Model Evaluation through Dynamic and Time-Sensitive Test Constructioncited by 57
- 2023Fighting Fire with Fire: The Dual Role of LLMs in Crafting and Detecting Elusive Disinformationcited by 51
- 2024AutoBencher: Towards Declarative Benchmark Constructioncited by 40
- 2024The Stepwise Deception: Simulating the Evolution from True News to Fake News with LLM Agentscited by 24
- 2024Evaluation of LLM Vulnerabilities to Being Misused for Personalized Disinformation Generationcited by 20
- 2017Automatically Identifying Fake News in Popular Twitter Threadscited by 18
- 2025How to Protect Yourself from 5G Radiation? Investigating LLM Responses to Implicit Misinformationcited by 17
- 2022Matching Tweets With Applicable Fact-Checks Across Languagescited by 15
- 2024RAEmoLLM: Retrieval Augmented LLMs for Cross-Domain Misinformation Detection Using In-Context Learning Based on Emotional Informationcited by 14
- 2025Fact-R1: Towards Explainable Video Misinformation Detection with Deep Reasoningcited by 14
- 2024Real-time Factuality Assessment from Adversarial Feedbackcited by 12
- 2024Learn and Unlearn: Addressing Misinformation in Multilingual LLMscited by 11
- 2025PCoT: Persuasion-Augmented Chain of Thought for Detecting Fake News and Social Media Disinformationcited by 11
- 2024Language Models can Subtly Deceive Without Lying: A Case Study on Strategic Phrasing in Legislationcited by 10
- 2024Attacking Misinformation Detection Using Adversarial Examples Generated by Language Modelscited by 10
- 2025TRUST-VL: An Explainable News Assistant for General Multimodal Misinformation Detectioncited by 10
- 2025Beyond the Crowd: LLM-Augmented Community Notes for Governing Health Misinformationcited by 10
- 2024Bias in the Mirror: Are LLMs opinions robust to their own adversarial attacks ?cited by 8
- 2025Truth over Tricks: Measuring and Mitigating Shortcut Learning in Misinformation Detectioncited by 8
- 2024Detection of Human and Machine-Authored Fake News in Urducited by 7
- 2024Have LLMs Reopened the Pandora's Box of AI-Generated Fake News?cited by 6
- 2025Unraveling Misinformation Propagation in LLM Reasoningcited by 6
- 2025Drifting Away from Truth: GenAI-Driven News Diversity Challenges LVLM-Based Misinformation Detectioncited by 6
- 2024On the Risk of Evidence Pollution for Malicious Social Text Detection in the Era of LLMscited by 5
- 2025How does Misinformation Affect Large Language Model Behaviors and Preferences?cited by 5
- 2025Exploring the Impact of Instruction-Tuning on LLM's Susceptibility to Misinformationcited by 4
- 2025MPCG: Multi-Round Persona-Conditioned Generation for Modeling the Evolution of Misinformation with LLMscited by 4
- 2025When Claims Evolve: Evaluating and Enhancing the Robustness of Embedding Models Against Misinformation Editscited by 3
- 2025DRES: Fake news detection by dynamic representation and ensemble selectioncited by 3
- 2025Reasoning About the Unsaid: Misinformation Detection with Omission-Aware Graph Inferencecited by 3
- 2025SINCon: Mitigate LLM-Generated Malicious Message Injection Attack for Rumor Detectioncited by 2
- 2025TriSPrompt: A Hierarchical Soft Prompt Model for Multimodal Rumor Detection with Incomplete Modalitiescited by 2
- 2025Enhancing Multimodal Misinformation Detection by Replaying the Whole Story from Image Modality Perspectivecited by 1
- 2025Out-of-Context Misinformation Detection via Variational Domain-Invariant Learning with Test-Time Trainingcited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.