2026

With the rapid development of Large Language Models (LLMs), research related to LLM-based persuasion has become a hotspot in the field. However, existing studies mostly focus on enhancing LLM agents’ persuasive capabilities, while generally neglecting the issue of their vulnerability to persuasion. In this paper, we analyse the root causes of LLM agents’ vulnerability to persuasion and find that it mainly stems from two contradictions and limitations. First, the purpose of catering to human preferences in pre-training phase conflicts with the need to resist manipulation in persuasion scenarios. Second, LLMs are often restricted to play a helpful assistant during training, and the singularity of this personality setting makes it unusually easy to develop targeted persuasion techniques for them. To eliminate LLMs’ vulnerability to persuasion, we propose the Backfire-R1 framework, which helps LLMs build persuasion resistance and better align with user objective by enabling them to learn the reasoning logic of humans with different personalities in persuasion scenarios. Comprehensive experimental results show that, the proposed method significantly improves the persuasion robustness of LLM agents, reducing the opinion shift score by 62.36% while not impairing the model’s general capabilities. Code is now available at: https://github.com/super-jw/Backfire-R1.