mlsanityData to 7 Oct 2026

The Hidden Puppet Master: Predicting Human Belief Change in Manipulative LLM Dialogues

arXiv 2603.20907 ↗First posted 21 Mar 2026cs.CLcited by 2

Not on the map. Why?

Abstract (arXiv)

As users increasingly turn to LLMs for practical and personal advice, they become vulnerable to subtle steering toward hidden incentives misaligned with their own interests. While existing NLP research has benchmarked manipulation detection, these efforts often rely on simulated debates and remain fundamentally decoupled from actual human belief shifts in real-world scenarios. We introduce PUPPET, a theoretical taxonomy and resource that bridges this gap by focusing on the moral direction of hidden incentives in everyday, advice-giving contexts. We provide an evaluation dataset of N=1,035 human-LLM interactions, where we measure users' belief shifts. Our analysis reveals a critical disconnect in current safety paradigms: while models can be trained to detect manipulative strategies, they do not correlate with the magnitude of resulting belief change. As such, we define the task of human belief shift prediction and show that while state-of-the-art LLMs achieve moderate correlation (r=0.3-0.5), they exhibit systematic directional biases, with certain models over or under-predicting the magnitude of human belief change. This work establishes a theoretically grounded and behaviorally validated foundation for AI social safety efforts by studying incentive-driven manipulation in LLMs during everyday, practical user queries.

Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 20 of its 48 references that are in the map. First posted on arXiv 21 Mar 2026.

Builds on

20 of 48 references.

References · 20

  1. 2019Persuasion for Good: Towards a Personalized Persuasive Dialogue System for Social Goodcited by 207
  2. 2024On the Conversational Persuasiveness of Large Language Models: A Randomized Controlled Trialcited by 105
  3. 2023Personalisation within bounds: A risk taxonomy and policy framework for the alignment of large language models with personalised feedbackcited by 86
  4. 2024The Dark Side of AI Companionship: A Taxonomy of Harmful Algorithmic Behaviors in Human-AI Relationshipscited by 61
  5. 2024Measuring and Benchmarking Large Language Models' Capabilities to Generate Persuasive Languagecited by 31
  6. 2024AI Safety in Generative AI Large Language Models: A Surveycited by 31
  7. 2024AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agentscited by 28
  8. 2024MentalManip: A Dataset For Fine-grained Analysis of Mental Manipulation in Conversationscited by 21
  9. 2025LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Modelscited by 21
  10. 2025Human Decision-making is Susceptible to AI-driven Manipulationcited by 19
  11. 2024The Call for Socially Aware Language Technologiescited by 12
  12. 2019An Unsupervised Domain-Independent Framework for Automated Detection of Persuasion Tactics in Textcited by 9
8 more
  1. 2025A Meta-Analysis of the Persuasive Power of Large Language Modelscited by 7
  2. 2025Words Like Knives: Backstory-Personalized Modeling and Detection of Violent Communicationcited by 4
  3. 2025ChatbotManip: A Dataset to Facilitate Evaluation and Oversight of Manipulative Chatbot Behaviourcited by 4
  4. 2025How Do LLMs Persuade? Linear Probes Can Uncover Persuasion Dynamics in Multi-Turn Conversationscited by 3
  5. 2023ManiTweet: A New Benchmark for Identifying Manipulation of News on Social Mediacited by 2
  6. 2025SELF-PERCEPT: Introspection Improves Large Language Models' Detection of Multi-Person Mental Manipulation in Conversationscited by 2
  7. 2025CLAIM: An Intent-Driven Multi-Agent Framework for Analyzing Manipulation in Courtroom Dialoguescited by 1
  8. 2026DeliberationBench: A Normative Benchmark for the Influence of Large Language Models on Users' Viewscited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 2.

2 papers.