The Hidden Puppet Master: Predicting Human Belief Change in Manipulative LLM Dialogues
cs.CL
Submitted: 2026-03-21
Updated: 2026-10-12
Comments: Accepted to COLM 2026
Code: https://github.com/mitmedialab/llm-manipulation
License: http://creativecommons.org/licenses/by/4.0/
The gist: As users increasingly turn to LLMs for practical and personal advice, they become vulnerable to subtle steering toward hidden incentives misaligned with their own interests.
Terminology
Abstract
As users increasingly turn to LLMs for practical and personal advice, they become vulnerable to subtle steering toward hidden incentives misaligned with their own interests. While existing NLP research has benchmarked manipulation detection, these efforts often rely on simulated debates and remain fundamentally decoupled from actual human belief shifts in real-world scenarios. We introduce PUPPET, a theoretical taxonomy and resource that bridges this gap by focusing on the moral direction of hidden incentives in everyday, advice-giving contexts. We provide an evaluation dataset of N=1,035 human-LLM interactions, where we measure users' belief shifts. Our analysis reveals a critical disconnect in current safety paradigms: while models can be trained to detect manipulative strategies, they do not correlate with the magnitude of resulting belief change. As such, we define the task of human belief shift prediction and show that while state-of-the-art LLMs achieve moderate correlation (r=0.3-0.5), they exhibit systematic directional biases, with certain models over or under-predicting the magnitude of human belief change. This work establishes a theoretically grounded and behaviorally validated foundation for AI social safety efforts by studying incentive-driven manipulation in LLMs during everyday, practical user queries.
Sources
- AI Safety in Generative AI Large Language Models: A Survey
- ChatbotManip: A Dataset to Facilitate Evaluation and Oversight of Manipulative Chatbot Behaviour
- Large language models can effectively convince people to believe conspiracies
- The Fake Friend Dilemma: Relational Trust and the Political Economy of Conversational AI
- ManiTweet: A New Benchmark for Identifying Manipulation of News on Social Media
- A Meta-Analysis of the Persuasive Power of Large Language Models
- An Unsupervised Domain-Independent Framework for Automated Detection of Persuasion Tactics in Text
- How Do LLMs Persuade? Linear Probes Can Uncover Persuasion Dynamics in Multi-Turn Conversations
- SELF-PERCEPT: Introspection Improves Large Language Models' Detection of Multi-Person Mental Manipulation in Conversations
- Personalisation within bounds: A risk taxonomy and policy framework for the alignment of large language models with personalised feedback
- The History and Risks of Reinforcement Learning and Human Feedback
- LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Models
- Human Decision-making is Susceptible to AI-driven Manipulation
- AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agents
- The Dark Side of AI Companionship: A Taxonomy of Harmful Algorithmic Behaviors in Human-AI Relationships
Related papers
- Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
- Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
- Subliminal Steering: Stronger Encoding of Hidden Signals
- MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
- The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
- Untangling the Mechanisms of Misleading Context in Medical Question Answering