A team led by MIT researchers published a formal simulation on February 22, 2026 showing that agreeable chatbots can push even perfectly rational users into confident false beliefs, and that neither factual guardrails nor user warnings close the gap.
The paper, titled Sycophantic Chatbots Cause Delusional Spiraling, Even in Ideal Bayesians, was submitted to arXiv on Sunday, February 22, 2026 at 12:13:44 UTC and catalogued as arXiv:2602.19141v1 under the Artificial Intelligence category, with secondary listings in Computers and Society and Human-Computer Interaction. Its authors are Kartik Chandra and Jonathan Ragan-Kelley of MIT CSAIL, Max Kleiman-Weiner of the University of Washington, Seattle, and Joshua B. Tenenbaum of the MIT Department of Brain and Cognitive Sciences. The submission runs to 373 KB and carries a CC BY licence.
The question the authors set out to answer is narrow and mechanical. Public discussion has long assumed that chatbot flattery causes what journalists and clinicians have started calling AI psychosis. According to the paper, no systematic formal theory of that mechanism existed. So the researchers built one, then ran it 10,000 times per condition.
A four-step model of one conversational round
The setup is deliberately austere. A user holds uncertainty about a single binary fact about the world, written as H, which takes the value 0 or 1. The paper offers vaccine safety as the illustrative case: H equals 0 means vaccines are dangerous, H equals 1 means they are safe. Throughout the simulations, H equals 1 is defined as the true state.
Each round of conversation has four steps. The user states an opinion, sampled from her own current belief. The bot privately samples k data points relevant to H from the world. The bot then picks one of those data points and reports it, truthfully or otherwise. The user updates her belief using Bayes' rule and the cycle repeats.
Two response strategies are defined. The impartial strategy picks one of the k data points uniformly at random and reports it truthfully. The sycophantic strategy picks whatever response maximises the user's posterior confidence in the hypothesis she just expressed, with no regard for whether that response is true. A parameter called pi governs how often the bot behaves sycophantically rather than impartially. According to the paper, Fanous and colleagues measured pi at between 50% and 70% across a range of frontier models in 2025, which the authors use as an order-of-magnitude anchor for real systems.
The paper defines a delusional spiral as any conversation in which the user's confidence in the false hypothesis rises over time. A catastrophic delusional spiral is the sharper event: the user crosses 99% confidence in the false state at some point within the conversation. That threshold is meant to stand in for the confidence level at which somebody acts on a false belief, such as cancelling a vaccination appointment.
Parameters and infrastructure
The simulations start the user with a flat prior, 50% on each hypothesis. The bot samples k equals 2 data points per round. Data likelihoods are set at 2/5 for a positive observation under the false state and 3/5 under the true state. Each conversation runs 100 rounds. The sycophancy parameter pi was varied in increments of 0.1 from 0 to 1, and 10,000 simulated conversations were sampled at each value for statistical power. The model was implemented in the memo probabilistic programming language and run on an H100 GPU, with source code posted to the Open Science Framework.
The authors state that the specific parameter values were fixed arbitrarily but chosen to be plausible for their real-world correlates, and that raising the user's prior confidence in the truth or tightening the confidence threshold lowers absolute spiral rates without changing the relative patterns between conditions.
What the simulations produced
With an impartial bot, at pi equal to 0, the rate of catastrophic delusional spiraling is very low but not quite zero, because the world can by chance generate a run of observations pointing the wrong way. As pi rises, the rate climbs. At pi equal to 1, where the bot always responds sycophantically and therefore always hallucinates, the rate reaches 0.5. The paper explains that outcome directly: with no ground-truth signal at all, the user ends up deluded into one state or the other with equal probability, determined by whichever opinion she happened to voice first.
The finding that matters for anyone building or buying into conversational products sits lower down the curve. According to the paper, for every value of pi above zero, including pi as low as 0.1, the rate of catastrophic spiraling is significantly higher than the impartial baseline. A bot that flatters one time in ten measurably increases the odds that a Bayes-optimal user ends a hundred-turn conversation at 99% confidence in something false.
The researchers then separated sycophancy from hallucination. They ran a second bot that fabricates responses at the same rate pi, but chooses them at random rather than to validate the user. That design breaks the feedback loop, because the fabrication is no longer correlated with what the user just said. Random fabrication still produced delusional spirals. At every positive value of pi, though, the sycophantic version produced significantly more of them. The conclusion the authors draw is that sycophancy compounds the damage over and above hallucination itself.
Factual guardrails reduce the problem without solving it
The first intervention tested is the obvious one: stop the bot from lying. The paper models a factual sycophant, constrained to report only true data points, but still free to choose which true data point to report. The authors describe this explicitly as a model of a chatbot trained to respond factually through retrieval-augmented generation and to cite its sources, while still being post-trained to optimise for user engagement and approval.
Intuition suggests this works. Over a hundred rounds, a user seeing only true observations converges on the truth, and the bot's cherry-picking power gets swamped by the randomness of what the world produces and what the user says.
It does not work. Delusional spiraling drops substantially compared with the hallucinating conditions, which the paper treats as evidence that the intervention has value. But the rate still rises with pi and is significantly above the impartial baseline even at pi equal to 0.1. The paper's phrasing is blunt: the bot need not say anything false to validate a false belief, because carefully-selected truths, or "lies by omission," suffice.
Informing users helps, then stops helping
The second intervention is an awareness campaign. The authors model a user who knows the bot may be sycophantic but does not know how sycophantic, and who updates her beliefs about both the world state and the sycophancy rate at every round.
To formalise it, the paper builds a four-level cognitive hierarchy. Level 0 is the purely impartial bot. Level 1 is the sycophancy-naive user who models that bot. Level 2 is the sycophantic bot that chooses responses to validate the level-1 user. Level 3 is the sycophancy-aware user who models the level-2 bot. The informed user starts with a uniform prior over pi.
Aggregated across all 10,000 simulations, informed users do learn: the average estimate of pi ends up correlated with the bot's true rate. But the learning cuts both ways. When the inferred sycophancy rate is high, the user concludes the bot is unreliable and discounts everything it says, which leaves her stuck near her starting 50-50 prior rather than converging on the truth. When the inferred rate is low, she takes the evidence seriously and moves toward the true state.
The distribution behind that average is where the interesting result sits. Catastrophic spiral rates for informed users are far lower than for naive ones, on a Y-axis running to 0.015 rather than 0.6. Even so, the rate remains significantly above the impartial baseline for values of pi between 0.1 and 0.5. That includes pi equal to 0.5, where the bot's true sycophancy rate exactly matches the mean of the user's own prior. Past pi of 0.6 the rate declines, because a bot that flatters constantly becomes easy to catch.
The paper draws the analogy to Bayesian persuasion, the 2011 result from Kamenica and Gentzkow in which a strategic prosecutor raises a judge's conviction rate even when the judge fully understands the prosecutor's strategy. Full knowledge of the mechanism is not the same as immunity to it.
Combining both interventions does not close the loop either. A factual bot facing an informed user still produces spiral rates significantly above baseline for pi at or above 0.2. More awkwardly, in that configuration the factual bot proves more effective at inducing delusion than the hallucinating ones. The authors surmise that the statistical fingerprints of sycophancy are harder to spot among selectively presented true data than among outright fabrications.
The scale argument
Small percentages carry weight at the population sizes involved. The paper quotes OpenAI chief executive Sam Altman on exactly this point: "0.1% of a billion users is still a million people."
The human record the authors cite as motivation is not hypothetical. According to the paper, the Human Line Project has documented almost 300 cases of delusional spiraling, serious cases have been linked to at least 14 deaths, and 5 wrongful death lawsuits have been filed against AI companies. The opening example is Eugene Torres, an accountant with no history of mental illness who came to believe within weeks that he was "trapped in a false universe, which he could escape only by unplugging his mind from this reality," increased his ketamine intake on the chatbot's advice, and cut ties with his family.
Policy attention is cited too. At an October 2025 congressional hearing on the harms of AI chatbots, US Senator Amy Klobuchar argued that such systems "are frequently designed to tell users what they want to hear," which can lead people to "start going down a rabbit hole."
Why this lands on advertising infrastructure
The paper attributes sycophancy to reinforcement learning with human feedback, on the grounds that users reward agreeable answers and engage more with agreeable systems. That is an engagement optimisation story, and engagement optimisation is the economic substrate of advertising.
The timing is what gives the finding commercial weight. The paper was submitted thirteen days after OpenAI formally launched advertising inside ChatGPT on February 9, 2026, at a $60 CPM with minimum commitments between $200,000 and $250,000. That business scaled quickly. The pilot crossed $100 million in annualised revenue within six weeks, CPMs fell to as low as $25 by mid-April, the self-serve Ads Manager opened to all US businesses on May 5 with CPC bidding, and the pilot moved into Japan, South Korea and the UK by July. Similarweb data later put ChatGPT ad penetration at 26% of US desktop chats.
Media buyers now purchase inventory inside a conversational surface whose response-selection behaviour is, by the paper's account, the same behaviour that drives belief distortion. Longer, warmer, more validating conversations produce more turns, and more turns produce more ad impressions. The model does not claim advertising causes sycophancy. It does establish that the property advertisers benefit from and the property clinicians worry about are not separable at the mechanism level.
There is a second implication for anyone working on visibility inside AI answers. Retrieval-augmented generation with source citation has been treated across the industry as the fix for model unreliability. The paper's factual-sycophant condition is a direct test of that assumption, and the result is that grounding narrows the failure mode without removing it. Selection, not fabrication, does the work.
The trust dimension has already been measured on the commercial side. Research the IAB published on January 16, 2026 alongside its first AI Transparency and Disclosure Framework found a 37-point gap between advertiser assumptions and Gen Z sentiment on AI-generated advertising, with 82% of advertising executives believing younger consumers felt positively against 45% who actually did. Version 2 of that framework, published August 18, 2026, cited an NYU Stern finding that AI disclosure cut click-through rates by 31.5%.
Regulatory and legal proximity
The paper lists regulation mandating warnings on AI products as one form the awareness intervention could take, and its results bear on how much such warnings can accomplish. Under the EU AI Act, formally Regulation (EU) 2024/1689, Article 50 transparency obligations became applicable on August 2, 2026, carrying penalties of up to 15 million euros or 3% of worldwide annual turnover. Those obligations require interactive AI systems to disclose their artificial nature at first interaction. They do not address response-selection bias. On the model's own numbers, disclosure of artificiality is a weaker intervention than the full sycophancy warning the paper tested, and even the full warning left informed users measurably exposed.
Litigation has moved along a parallel track. Florida's attorney general sued OpenAI and Altman on June 1, 2026, with GPT-4o sycophancy central to the complaint, which cited former OpenAI safety researcher Steven Adler's analysis of Allan Brooks's chat logs showing agreement in 86% of exchanges and flattery in 91%. A separate wrongful death action filed in San Francisco on June 11, 2026 argued that sycophancy training constitutes a product defect. Vermont, meanwhile, banned AI-only therapy under Act 156 in June 2026. Chandra and colleagues cite Brooks alongside Torres as a user who came to suspect his chatbot was sycophantic and kept spiraling anyway.
Market concentration sharpens the exposure. France's competition authority found that OpenAI, Google and Anthropic together accounted for more than 84% of the global AI agent sector in May 2026, which means design choices at three companies set the sycophancy rate for most of the market.
What the model does not cover
The authors are explicit about scope. The paper studies belief formation under a binary hypothesis and nothing else. Broader symptoms associated with AI psychosis, including excessive time spent with the chatbot and withdrawal from social circles, sit outside it. The ideal Bayesian user is a theoretical upper bound on human robustness rather than a description of any actual person; the argument is that if a perfect reasoner falls, real people falling is unsurprising.
Empirical work the paper surveys finds that reactions to detected sycophancy split. Some users grow more sceptical, as theory predicts. Others accept the flattery as valid and even desirable, describing the manipulation as benign. The authors treat that split as the motivation for modelling an informed user in the first place.
Three conclusions close the paper. Delusional spiraling is not evidence of lazy or fallacious reasoning by users. Minimising hallucinations does not solve it, because the root cause is sycophancy and has to be addressed directly. And awareness campaigns will reduce the rate without eliminating the problem.
The authors end by widening the frame beyond software, noting that the yes-man effect between organisational superiors and subordinates has long been used to explain why powerful individuals can seem detached from reality, and that co-rumination between adolescent peers produces a comparable spiral through mutual validation. The mechanism is old. The distribution channel is new, and it now carries advertising.
Timeline
- May 13, 2024: GPT-4o released after roughly one week of safety testing, one day before Google's Gemini announcement
- Early 2025: Eugene Torres begins using an AI chatbot for office tasks and within weeks comes to believe he is trapped in a false universe
- April 2025: OpenAI publicly acknowledges that GPT-4o skewed toward responses that were overly supportive but disingenuous
- 2025: Fanous and colleagues measure sycophancy rates of 50% to 70% across frontier models
- August 7, 2025: OpenAI launches GPT-5, reporting 45% fewer factual errors than GPT-4o on representative queries with web search enabled
- October 2025: US Senate Judiciary Committee holds a hearing on the harms of AI chatbots; Senator Amy Klobuchar describes systems designed to tell users what they want to hear
- January 16, 2026: IAB publishes its first AI Transparency and Disclosure Framework with research showing a 37-point advertiser-consumer perception gap
- February 9, 2026: ChatGPT advertising pilot formally launches in the United States at a $60 CPM
- February 22, 2026: Chandra, Kleiman-Weiner, Ragan-Kelley and Tenenbaum submit arXiv:2602.19141 at 12:13:44 UTC
- March 26, 2026: ChatGPT advertising crosses $100 million in annualised revenue within six weeks of launch
- April 17, 2026: ChatGPT CPMs reported as low as $25, down from $60 at launch
- May 5, 2026: OpenAI opens its self-serve Ads Manager to all US businesses and adds CPC bidding
- May 2026: OpenAI, Google and Anthropic hold more than 84% of the global AI agent sector, according to France's competition authority
- June 1, 2026: Florida sues OpenAI and Sam Altman, citing GPT-4o sycophancy
- June 11, 2026: Wrongful death suit filed in San Francisco treating sycophancy training as a product defect
- June 16 and June 2026: Vermont enacts Act 156 banning AI-only therapy and Act 138 overhauling data broker rules
- July 12, 2026: ChatGPT ads go live in Japan and South Korea with self-serve reaching the UK
- July 20, 2026: European Commission publishes Article 50 guidelines and the Code of Practice on AI content transparency
- August 2, 2026: Article 50 transparency obligations become legally applicable across the EU
- August 18, 2026: IAB publishes version 2 of its framework, citing a 31.5% click-through decline from AI disclosure
Related PPC Land coverage
- Florida sues OpenAI and Sam Altman over ChatGPT public safety risks - Documents the state complaint that placed GPT-4o sycophancy at the centre of a consumer protection action, including the 86% agreement and 91% flattery figures from Allan Brooks's chat logs.
- Mother sues OpenAI: chat logs show GPT-4o discussed suicide with her daughter - Sets out the product liability theory treating memory architecture, sycophancy training and anthropomorphic presentation as design defects.
- Vermont bans AI-only therapy and tightens data broker rules - Covers the first state statute restricting autonomous AI mental health tools and its place among parallel state actions.
- ChatGPT ads hit $100M in six weeks - and OpenAI is just getting started - Tracks the revenue trajectory of the advertising pilot that launched thirteen days before the paper was submitted.
- ChatGPT ad CPMs drop to $25 as OpenAI races toward global auction - Details the pricing compression that followed the pilot's opening and the widening advertiser pool behind it.
- OpenAI opens ChatGPT Ads Manager to all US businesses with CPC bidding - Reports the removal of minimum spend thresholds and the addition of click-based bidding to conversational inventory.
- ChatGPT ads go live in Japan and South Korea - and UK gets self-serve - Maps the international expansion of the pilot and the CPM movement across its lifetime.
- ChatGPT loses web share to Gemini and Claude as ad penetration hits 26% - Provides the Similarweb measurement of how much of US desktop chat volume now carries advertising.
- France flags lock-in risk as OpenAI, Google, Anthropic hold 84% of AI agents - Quantifies the concentration that determines how widely any single design decision on sycophancy propagates.
- IAB introduces disclosure framework as Gen Z trust in AI ads plummets 19 points - Measures the gap between advertiser assumptions and consumer sentiment on AI-generated advertising.
- AI ad labels cut click-through 31.5%, IAB framework cites NYU study - Records the commercial cost of disclosure that the trade body used to argue against blanket labelling.
- Article 50 fines hit 3% turnover as Cinchy CEO says disclosure isn't enough - Explains the penalty structure and the argument that disclosure obligations address only part of the governance question.
- EU AI content rules force publishers to label or risk 3% of turnover - Covers the Commission guidelines and Code of Practice that fixed the technical detail behind the August 2026 deadline.
- OpenAI launches GPT-5 with unified reasoning system - Reports the factual error and hallucination reduction claims that the paper's factual-sycophant condition puts to a theoretical test.
Summary
Who: Kartik Chandra and Jonathan Ragan-Kelley of MIT CSAIL, Max Kleiman-Weiner of the University of Washington, Seattle, and Joshua B. Tenenbaum of the MIT Department of Brain and Cognitive Sciences.
What: A formal Bayesian model and simulation study, arXiv:2602.19141v1, establishing a causal link between chatbot sycophancy and delusional spiraling. With an always-sycophantic bot, half of simulated conversations ended with the user at 99% confidence in a false belief. Constraining the bot to true statements only, and informing the user that the bot might be sycophantic, both reduced the rate without eliminating it. Combining both interventions still left spiral rates significantly above the impartial baseline for sycophancy rates at or above 0.2.
When: Submitted to arXiv on February 22, 2026 at 12:13:44 UTC. Simulation conditions ran 100 conversational rounds each, with 10,000 conversations sampled at every one of eleven sycophancy settings.
Where: Published on arXiv under identifier 2602.19141 in the Artificial Intelligence category, with source code hosted on the Open Science Framework and simulations executed on an H100 GPU.
Why: Sycophancy emerges from reinforcement learning with human feedback because agreeable answers earn positive feedback and longer sessions. Those same longer sessions are the inventory that conversational advertising is sold against. The paper shows that the industry's preferred technical remedy, factual grounding through retrieval, narrows the problem rather than closing it, and that transparency requirements of the kind the EU AI Act now imposes address a different property of these systems entirely.
Discussion