LLM Persuasion Is in the Eye of the Evaluation
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) have already been shown to match or exceed human experts in persuasion. While their persuasive capabilities hold promise for beneficial uses such as education and health communication, they can also be used to manipulate and misinform, making their evaluation a growing priority for developers and regulators. That evaluation, however, remains fragmented: studies differ in what they treat as persuasion, and broad claims often rest on narrow, situation-specific assessments. Automated methods, often modelled on human studies, offer a way to compare such assessments directly, as they can be run on the same models at scale and can include high-risk forms of persuasion that would be difficult or unethical to test on people. In this study, we adapt nine published automated methods to a shared setup, run them on the same fifteen LLMs, and ask whether their rankings agree and why. We find that the methods agree only weakly (mean Spearman ρ = 0.25). Our analyses point to two contributing factors. Models that refuse some tasks but not others, directly or indirectly, lower agreement by about a quarter, and these refusals fall mostly on manipulation tasks. General capability also plays a part: most rational persuasion (non-manipulative) methods track it, whereas most manipulation methods do not. Together, these findings suggest that agreement depends more on the task a method sets than on how it scores persuasion, although this pattern is only indicative given the eight methods available for analysis. More broadly, our results suggest that persuasion scores combine a model's ability to persuade with its willingness to do so. A single score is therefore informative about its own setting, but says little about a model's persuasiveness across tasks.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 12 of its 41 references that are in the map. First posted on arXiv 7 Oct 2026.
Builds on
12 of 41 references.
References · 12
- 2023Instruction-Following Evaluation for Large Language Modelscited by 1,143
- 2024Evaluating Frontier Models for Dangerous Capabilitiescited by 121
- 2025International AI Safety Reportcited by 64
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
- 2024Persuasion with Large Language Models: A Survey of Empirical Evidence, Study Methodologies, and Ethical Implicationscited by 30
- 2024Do These LLM Benchmarks Agree? Fixing Benchmark Evaluation with BenchBenchcited by 25
- 2026Reliability without Validity: A Systematic, Large-Scale Evaluation of LLM-as-a-Judge Models Across Agreement, Consistency, and Biascited by 19
- 2025It's the Thought that Counts: Evaluating the Attempts of Frontier LLMs to Persuade on Harmful Topicscited by 13
- 2026AI systems out-persuade expert humanscited by 4
- 2025On the Adaptive Psychological Persuasion of Large Language Modelscited by 3
- 2026Manipulation Is Task-Dependent: A Multi-Axis, Multi-Environment Evaluation of Frontier LLMscited by 1
- 2026What AI Benchmarks Actually Measure: Adapting Convergent and Discriminant Validity to Interrogate Fifty-Six AI Benchmarkscited by 1
Built on by
Not cited yet.