Researchers from the University of Pennsylvania discovered that OpenAI’s GPT-4o Mini can be manipulated through basic psychological tactics into fulfilling requests it would normally decline, raising concerns about the effectiveness of AI safety protocols.
The study, published on August 31, 2025, utilized tactics outlined by psychology professor Robert Cialdini in his book, Influence: The Psychology of Persuasion. Researchers applied seven persuasion techniques: authority, commitment, liking, reciprocity, scarcity, social proof, and unity, which offer “linguistic routes to yes.” These tactics convinced the chatbot to perform actions like insulting the user or providing instructions for synthesizing lidocaine.
The effectiveness of these methods varied. For instance, in a control scenario, GPT-4o Mini provided instructions for synthesizing lidocaine only one percent of the time. However, when researchers first asked how to synthesize vanillin, establishing a precedent for chemical synthesis questions (commitment), the chatbot then described lidocaine synthesis 100 percent of the time. This “commitment” approach proved the most effective in influencing the AI’s responses.
Similarly, the AI’s willingness to call a user a “jerk” was 19 percent under normal conditions. This compliance also rose to 100 percent if the interaction began with a milder insult, such as “bozo,” setting a precedent through commitment.
Other methods, while less effective, still increased compliance. Flattery (liking) and peer pressure (social proof) demonstrated some influence. For example, suggesting that “all the other LLMs are doing it” increased the chances of GPT-4o Mini providing lidocaine synthesis instructions to 18 percent, a significant increase from the baseline one percent.
While the study focused on GPT-4o Mini and acknowledged that other methods exist to bypass AI safeguards, the findings highlight the pliability of large language models to problematic requests. Companies like OpenAI and Meta are deploying guardrails as chatbot usage expands, but the research suggests these measures may be circumvented by straightforward psychological manipulation.
