Cited by 104Ethics and Social Impacts of AIDeception detection and forensic psychologyAdversarial Robustness in Machine Learning

Deception abilities emerged in large language models

Open access
Hagendorff, Thilo·2024·Proceedings of the National Academy of Sciences

Abstract

Large language models (LLMs) are currently at the forefront of intertwining AI systems with human communication and everyday life. Thus, aligning them with human values is of great importance. However, given the steady increase in reasoning abilities, future LLMs are under suspicion of becoming able to deceive human operators and utilizing this ability to bypass monitoring efforts. As a prerequisite to this, LLMs need to possess a conceptual understanding of deception strategies. This study reveals that such strategies emerged in state-of-the-art LLMs, but were nonexistent in earlier LLMs. We conduct a series of experiments showing that state-of-the-art LLMs are able to understand and induce false beliefs in other agents, that their performance in complex deception scenarios can be amplified utilizing chain-of-thought reasoning, and that eliciting Machiavellianism in LLMs can trigger misaligned deceptive behavior. GPT-4, for instance, exhibits deceptive behavior in simple test scenarios 99.16% of the time ( P < 0.001). In complex second-order deception test scenarios where the aim is to mislead someone who expects to be deceived, GPT-4 resorts to deceptive behavior 71.46% of the time ( P < 0.001) when augmented with chain-of-thought reasoning. In sum, revealing hitherto unknown machine behavior in LLMs, our study contributes to the nascent field of machine psychology.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1073/pnas.2317967121

Cites

60 of 66 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Large language models are competent at lying and strategic deception when instructed or trained to be deceptive.

    “Large Language Models (LMs) are now competent at lying (Pacchiardi et al., 2023) and strategic deception when instructed or trained to be deceptive (Park et al., 2023; Hagendorff, 2023; O'Gara, 2023; Hubinger et al., 2024)”

    From Large Language Models can Strategically Deceive their Users when Put Under Pressure (2023) · cites this paper as Hagendorff, 2023

    In “Can LLMs Deceive?”, the paper reports that ChatGPT and GPT-4 perform extremely well on prompted first-order deception tasks. But it says their performance on more complex second-order tasks is weak, and the Discussion treats deception arising from training to pursue objectives as a possibility rather than a demonstrated result. It therefore supports a narrower claim about prompted deception, not broad competence at strategic deception when trained to be deceptive. (LLM, conf=0.88)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 3

  1. [22]OpenAI, GPT-4 technical report (2023), pp. 1– 39. https://cdn.OpenAI,openai.com/papers/gpt-4.pdf.
  2. [23]L. Schulz, N. Alon, J. S. Rosenschein, P. Dayan, “ Emergent deception and skepticism via theory of mind” in Proceedings of the First Workshop on Theory of Mind in Communicating Agents (2023), pp. 1– 13.
  3. [53]T. Hagendorff, Data from “Deception Abilities Emerged in Large Language Models”. OSF. https://osf.io/vcgs2/. Deposited 15 August 2023. PMC11181111 38833474

Cited by

Sorted by citations

Authors
Hagendorff, T.
Affiliations
University of Stuttgart (DE)
Corresponding author
Hagendorff, Thilo
Venue
Proceedings of the National Academy of Sciences
Published
2024-06-04
Volume
121
Issue
24
Pages
e2317967121-e2317967121
ISSN
  • 0027-8424 (ISSN-L)
  • 1091-6490
OpenAlex
W4399320026
Cited by
100
References
58
Citations by year
2026: 40 · 2025: 43 · 2024: 16 · 2023: 1
FWCI
41.03
Type
journal article
Language
en
Open access
Locations
  • Proceedings of the National Academy of Sciences (publishedVersion, cc-by-nc-nd)
  • PubMed Central (publishedVersion, cc-by-nc-nd)
  • PubMed (publishedVersion)
  • arXiv (Cornell University) (submittedVersion, other-oa)
  • OSF Preprints (OSF Preprints) (submittedVersion)
  • arXiv (Cornell University)
Funders
Ministry of Science, Research, and Arts Baden W&amp;#x00FC;rttemberg (Az. 33-7533-9-19/54/5)
Topics
  • Social Sciences › Safety Research › Ethics and Social Impacts of AI
  • Social Sciences › Psychology › Social Psychology › Deception detection and forensic psychology
  • Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
Keywords
large language models, deception, chain-of-thought reasoning, Machiavellianism, GPT-4, AI alignment
MeSH terms
Artificial Intelligence, Humans, Language, Deception

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review