LLM-Based Adversarial Persuasion Attacks on Fact-Checking Systems

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Leite, João A., Razuvayevskaya, Olesya, Bontcheva, Kalina, Scarton, Carolina
Formato: Preprint
Publicado: 2026
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866909999118155776
author Leite, João A.
Razuvayevskaya, Olesya
Bontcheva, Kalina
Scarton, Carolina
author_facet Leite, João A.
Razuvayevskaya, Olesya
Bontcheva, Kalina
Scarton, Carolina
contents Automated fact-checking (AFC) systems are susceptible to adversarial attacks, enabling false claims to evade detection. Existing adversarial frameworks typically rely on injecting noise or altering semantics, yet no existing framework exploits the adversarial potential of persuasion techniques, which are widely used in disinformation campaigns to manipulate audiences. In this paper, we introduce a novel class of persuasive adversarial attacks on AFCs by employing a generative LLM to rephrase claims using persuasion techniques. Considering 15 techniques grouped into 6 categories, we study the effects of persuasion on both claim verification and evidence retrieval using a decoupled evaluation strategy. Experiments on the FEVER and FEVEROUS benchmarks show that persuasion attacks can substantially degrade both verification performance and evidence retrieval. Our analysis identifies persuasion techniques as a potent class of adversarial attacks, highlighting the need for more robust AFC systems.
format Preprint
id arxiv_https___arxiv_org_abs_2601_16890
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle LLM-Based Adversarial Persuasion Attacks on Fact-Checking Systems
Leite, João A.
Razuvayevskaya, Olesya
Bontcheva, Kalina
Scarton, Carolina
Computation and Language
Artificial Intelligence
Machine Learning
Automated fact-checking (AFC) systems are susceptible to adversarial attacks, enabling false claims to evade detection. Existing adversarial frameworks typically rely on injecting noise or altering semantics, yet no existing framework exploits the adversarial potential of persuasion techniques, which are widely used in disinformation campaigns to manipulate audiences. In this paper, we introduce a novel class of persuasive adversarial attacks on AFCs by employing a generative LLM to rephrase claims using persuasion techniques. Considering 15 techniques grouped into 6 categories, we study the effects of persuasion on both claim verification and evidence retrieval using a decoupled evaluation strategy. Experiments on the FEVER and FEVEROUS benchmarks show that persuasion attacks can substantially degrade both verification performance and evidence retrieval. Our analysis identifies persuasion techniques as a potent class of adversarial attacks, highlighting the need for more robust AFC systems.
title LLM-Based Adversarial Persuasion Attacks on Fact-Checking Systems
topic Computation and Language
Artificial Intelligence
Machine Learning
url https://arxiv.org/abs/2601.16890