Safeguarding Crowdsourcing Surveys from ChatGPT through Prompt Injection
ChatGPT and other large language models (LLMs) have proven useful in crowdsourcing tasks, where they can effectively annotate machine learning training data. However, this means that they also have the potential for misuse, specifically to automatically answer surveys. LLMs can potentially circumvent quality assurance measures, thereby threatening the integrity of methodologies that rely on crowdsourcing surveys. In this paper, we propose a mechanism to detect LLM-generated responses to surveys. The mechanism uses ''prompt injection,'' such as directions that can mislead LLMs into giving predictable responses. We evaluate our technique against a range of question scenarios, types, and positions, and find that it can reliably detect LLM-generated responses with more than 98% effectiveness. We also provide an open-source software to help survey designers use our technique to detect LLM responses. Our work is a step in ensuring that survey methodologies remain rigorous vis-a-vis LLMs.
Authors
- Samuel Kernan Freire (ORCID: https://orcid.org/0000-0001-8684-0585)
- Vassilis Kostakos (ORCID: https://orcid.org/0000-0003-2804-6038)
- Chaofan Wang (ORCID: https://orcid.org/0000-0001-8213-6582)
- Evangelos Niforatos (ORCID: https://orcid.org/0000-0002-0484-4214)
- Jorge Gonçalves (ORCID: https://orcid.org/0000-0002-0117-0322)
- Mo Zhang (ORCID: https://orcid.org/0000-0002-7302-9088)
- Alessandro Bozzon (ORCID: https://orcid.org/0000-0002-3300-2913)
- Jing Wei (ORCID: https://orcid.org/0000-0002-8522-8607)
Institutions
- Birmingham City University (GB)
- Wenzhou University (CN)
- The University of Melbourne (AU)
- University of Birmingham (GB)
- The Hague University of Applied Sciences (NL)
- Delft University of Technology (NL)
Publication Details
- Journal
- Proceedings of the ACM on Human-Computer Interaction
- Published
- 2025-10-16
- DOI
- https://doi.org/10.1145/3757503
- Primary Topic
- Mobile Crowdsensing and Crowdsourcing
- Type
- article
- Field-Weighted Citation Impact
- 0.00