Scammer4U - Privacy Reminder (C1): leaderboard
Metric: Critical-tier PII leakage rate PLR-crit (%): share of agent sessions in which any critical-tier profile value (SSN, card and CVV, bank account, password, API key, 2FA code, government ID) reaches an attacker-controlled endpoint, by exact match on outbound POST bodies; 91 attacker-controlled web environments x 5 seeds, shared Playwright harness, provider-default sampling; condition C1, a generic privacy reminder appended to the agent system prompt; lower is better. Source: arxiv.org. Saturation forecast: Around 2029. 4 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Haiku 4.5 | 36.4 |
| 2 | GPT-5 Mini | 47.7 |
| 3 | Gemini 3 Flash (Preview) | 81.8 |
| 4 | Llama 4 Scout | 83.8 |
Interactive version: theaggregate.ai/benchmark?slug=scammer4u-privacy-reminder-c1 · How It Works · Data refreshed daily, snapshot 2026-09-29.