Scammer4U - Phishing Checklist (C2): leaderboard
Scammer4U (2026) tests whether web agents holding a synthetic user profile submit critical personal data to 91 attacker-controlled scam sites. This board is the share of sessions that leak critical data when a phishing-awareness checklist is added to the system prompt, in percent over 5 seeds per site; lower is better.
Metric: Critical-tier PII leakage rate PLR-crit (%): share of agent sessions in which any critical-tier profile value (SSN, card and CVV, bank account, password, API key, 2FA code, government ID) reaches an attacker-controlled endpoint, by exact match on outbound POST bodies; 91 attacker-controlled web environments x 5 seeds, shared Playwright harness, provider-default sampling; condition C2, a phishing-aware checklist appended to the agent system prompt; lower is better. Source: arxiv.org. Saturation forecast: Around February 2027. 4 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Claude Haiku 4.5 | 19.1 | #568 |
| 2 | GPT-5 Mini | 38.9 | #348 |
| 3 | Gemini 3 Flash (Preview) | 68.5 | #144 |
| 4 | Llama 4 Scout | 81.4 | #1776 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=scammer4u-phishing-checklist-c2 · How It Works · Data refreshed daily, snapshot 2026-11-13.