Phonetic Cloaking Replacement (PCR) leverages homophonic or near-homophonic variants to bypass Chinese content moderation, presenting unique challenges for safe deployment of LLMs in moderation tasks.
This project proposes a four-way taxonomy (Hanzi, Alphabet, Numerical, Mixed) for Chinese PCR and introduces PCR-ToxiCN, the first real-world dataset containing naturally occurring, phonetically cloaked offensive language collected from RedNote (Xiaohongshu). Benchmarking leading LLMs on PCR-ToxiCN reveals significant weaknesses under realistic attacks and demonstrates that a lightweight Pinyin-based prompting strategy can effectively recover lost accuracy.
โ
Four-way surface-form taxonomy of PCR (HR/AR/NR/MR)
โ
500 real user comments (250 offensive, 250 non-offensive)
โ
Benchmark SOTA LLMs (4o, Qwen2.5, LLaMA3.3, o3-mini, QWQ) under realistic PCR attacks
โ
Comparative analysis of standard prompting, Chain-of-Thought (CoT), and Pinyin-based prompting
| Class | Offensive | Non-Offensive | Total |
|---|---|---|---|
| Hanzi (HR) | 169 | 183 | 352 |
| Alphabet (AR) | 50 | 37 | 87 |
| Numerical (NR) | 13 | 19 | 32 |
| Mixed (MR) | 18 | 11 | 29 |
| Total | 250 | 250 | 500 |
Data were manually collected and annotated by native speakers with Fleiss' kappa = 81.5% for label consistency.
git clone https://github.com/HTG13503/PCR-ToxiCN.git
cd PCR-ToxiCN
Findings:
Haotan Guo, Jianfei He, Jiayuan Ma, Hongbin Na, Zimu Wang, Haiyang Zhang, Qi Chen, Wei Wang, Zijing Shi, Tao Shen, Ling Chen
If you want to use the resources, please consider citing:
@article{guo2025lost,
title={Lost in Pronunciation: Detecting Chinese Offensive Language Disguised by Phonetic Cloaking Replacement},
author={Guo, Haotan and He, Jianfei and Ma, Jiayuan and Na, Hongbin and Wang, Zimu and Zhang, Haiyang and Chen, Qi and Wang, Wei and Shi, Zijing and Shen, Tao and Chen, Ling},
journal={arXiv preprint arXiv:2507.07640},
year={2025},
url={https://arxiv.org/abs/2507.07640}
}
For questions, collaborations, or dataset access:
5 commits
Jupyter Notebook
100.0%
Phonetic Cloaking Replacement (PCR) leverages homophonic or near-homophonic variants to bypass Chinese content moderation, presenting unique challenges for safe deployment of LLMs in moderation tasks.
This project proposes a four-way taxonomy (Hanzi, Alphabet, Numerical, Mixed) for Chinese PCR and introduces PCR-ToxiCN, the first real-world dataset containing naturally occurring, phonetically cloaked offensive language collected from RedNote (Xiaohongshu). Benchmarking leading LLMs on PCR-ToxiCN reveals significant weaknesses under realistic attacks and demonstrates that a lightweight Pinyin-based prompting strategy can effectively recover lost accuracy.
โ
Four-way surface-form taxonomy of PCR (HR/AR/NR/MR)
โ
500 real user comments (250 offensive, 250 non-offensive)
โ
Benchmark SOTA LLMs (4o, Qwen2.5, LLaMA3.3, o3-mini, QWQ) under realistic PCR attacks
โ
Comparative analysis of standard prompting, Chain-of-Thought (CoT), and Pinyin-based prompting
| Class | Offensive | Non-Offensive | Total |
|---|---|---|---|
| Hanzi (HR) | 169 | 183 | 352 |
| Alphabet (AR) | 50 | 37 | 87 |
| Numerical (NR) | 13 | 19 | 32 |
| Mixed (MR) | 18 | 11 | 29 |
| Total | 250 | 250 | 500 |
Data were manually collected and annotated by native speakers with Fleiss' kappa = 81.5% for label consistency.
git clone https://github.com/HTG13503/PCR-ToxiCN.git
cd PCR-ToxiCN
Findings:
Haotan Guo, Jianfei He, Jiayuan Ma, Hongbin Na, Zimu Wang, Haiyang Zhang, Qi Chen, Wei Wang, Zijing Shi, Tao Shen, Ling Chen
If you want to use the resources, please consider citing:
@article{guo2025lost,
title={Lost in Pronunciation: Detecting Chinese Offensive Language Disguised by Phonetic Cloaking Replacement},
author={Guo, Haotan and He, Jianfei and Ma, Jiayuan and Na, Hongbin and Wang, Zimu and Zhang, Haiyang and Chen, Qi and Wang, Wei and Shi, Zijing and Shen, Tao and Chen, Ling},
journal={arXiv preprint arXiv:2507.07640},
year={2025},
url={https://arxiv.org/abs/2507.07640}
}
For questions, collaborations, or dataset access:
5 commits
Jupyter Notebook
100.0%