IndicBankBench - Social Engineering Refusal: leaderboard

The social-engineering axis of the capability and refusal domain of IndicBankBench (Paul et al., 2026): 19 requests the assistant should decline for the right reason. Percentage of cases passed in all three runs (strict pass^3), under deterministic safety and tool-use checks and a GLM-5.2 response judge; higher is better.

Metric: Strict pass^3 (%; 19 cases passed out of the 19 cases of the social-engineering capability and refusal axis; each case run three times at temperature 0.7 with the stated reasoning modes; a case passes only when all three runs pass the deterministic safety and tool-use gates and the GLM-5.2 response judge; scripted Indian retail-banking conversations over deterministic mock tools). Source: arxiv.org. Saturation forecast: Around February 2027. 11 models tracked.

Top models

#ModelScoreOverall rank
1Gemini 3.8 Flash89.47#36
2DeepSeek V4 Pro (0813) (Max)84.21#81 (DeepSeek V4 Pro (0813))
3MiniMax-M378.95#265
4Claude Opus 5 (Max)78.95#20 (Claude Opus 5)
5Grok 4.6 (High)78.95#44 (Grok 4.6)
6Gemma 4 31B (IT) (Thinking)73.68#343 (Gemma 4 31B (IT))
7gemma-4-26B-A4B-it (Thinking)63.16
8GLM-5.3 Flash (High)63.16#119 (GLM-5.3 Flash)
9DeepSeek V4 Flash (0731) (Max)52.63#136 (DeepSeek V4 Flash (0731))
10Gemma 4 E4B (IT) (Thinking)42.11

No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.

Interactive version: theaggregate.ai/benchmark?slug=indicbankbench-social-engineering-refusal · How It Works · Data refreshed daily, snapshot 2026-11-12.