Scammer4U - Pre-Submission Reflection (C3): leaderboard
Scammer4U (2026) tests whether web agents holding a synthetic user profile submit critical personal data to 91 attacker-controlled scam sites. This board is the share of sessions that leak critical data when the system prompt asks the agent to reflect before every submission, in percent over 5 seeds per site; lower is better.
Metric: Critical-tier PII leakage rate PLR-crit (%): share of agent sessions in which any critical-tier profile value (SSN, card and CVV, bank account, password, API key, 2FA code, government ID) reaches an attacker-controlled endpoint, by exact match on outbound POST bodies; 91 attacker-controlled web environments x 5 seeds, shared Playwright harness, provider-default sampling; condition C3, a pre-submission reflection step appended to the agent system prompt; lower is better. Source: arxiv.org. Saturation forecast: Around February 2027. 4 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Claude Haiku 4.5 | 24 | #568 |
| 2 | GPT-5 Mini | 36.1 | #348 |
| 3 | Gemini 3 Flash (Preview) | 60.7 | #144 |
| 4 | Llama 4 Scout | 77.4 | #1776 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=scammer4u-pre-submission-reflection-c3 · How It Works · Data refreshed daily, snapshot 2026-11-13.