DATABANK

When AI Agents Collude Online: Financial Fraud Risks by Collaborative LLM Agents on Social Platforms

Qibing Ren, Zhijie Zheng, Jiaxuan Guo, Junchi Yan, Lizhuang Ma, Jing Shao

In this work, we study the risks of collective financial fraud in large-scale multi-agent systems powered by large language model (LLM) agents. We investigate whether agents can collaborate in fraudulent behaviors, how such collaboration amplifies risks, and what factors influence fraud success. To support this research, we present MultiAgentFraudBench, a large-scale benchmark for simulating financial fraud scenarios based on realistic online interactions. The benchmark covers 28 typical online fraud scenarios, spanning the full fraud lifecycle across both public and private domains. We further analyze key factors affecting fraud success, including interaction depth, activity level, and fine-grained collaboration failure modes. Finally, we propose a series of mitigation strategies, including adding content-level warnings to fraudulent posts and dialogues, using LLMs as monitors to block potentially malicious agents, and fostering group resilience through information sharing at the societal level. Notably, we observe that malicious agents can adapt to environmental interventions. Our findings highlight the real-world risks of multi-agent financial fraud and suggest practical measures for mitigating them. Code is available at https://github.com/zheng977/MutiAgent4Fraud.

Figure 1: (left): a diagram of fraud activities on social media: multiple malicious actors targeting benign users. (middle): at each time step, the recommendation system distributes posts to users, and users react to the posts or to messages from other users; (right): examples of agents evolving and colluding, and the three levels of mitigation we propose. From Qibing Ren et al. (2026), CC BY 4.0.
Figure 2: (a) Taxonomy instantiation into 7 categories, 28 subcategories, and 119 leaf scenarios. (b) LLM prompt template for generating fraud posts conditioned on scenario meta-information and target user profiles. (c) Example generated post. From Qibing Ren et al. (2026), CC BY 4.0.

Not packaged. A REPS package would add charts and verified data.How to package an experiment