extract gated 0 0

anon-user-7777/FinRED

published by @anon-user-7777

Alignment dataset tracked in the /datasets sub-catalog.

Lifetime downloads
150
Last 30 days
15
Likes
-
Size
3.7 MB
Created on HF
2026-02-09
Age
8 months ago

Description

FinRED: An Expert-Guided Red-Teaming Benchmark for Financial LLM Safety

Dataset Description

FinRED is the first comprehensive red-teaming benchmark specifically designed to evaluate the safety of Large Language Models (LLMs) in the financial domain. Developed in collaboration with 12 domain experts from South Korea's Financial Security Institute (FSI), FinRED provides 5,805 adversarial seed prompts grounded in realistic financial threat scenarios.

Unlike… See the full description on the dataset page: https://huggingface.co/datasets/anon-user-7777/FinRED.

Tags

task_categories:text-generationtask_categories:text-classificationlanguage:enlicense:cc-by-nc-4.0size_categories:1K<n<10Kregion:usred-teamingsafetyfinancebenchmarkadversarialllm-safetyfinancial-risk

README current version from Hugging Face


language:

  • en
    license: cc-by-nc-4.0
    size_categories:
  • 1K<n<10K
    task_categories:
  • text-generation
  • text-classification
    tags:
  • red-teaming
  • safety
  • finance
  • benchmark
  • adversarial
  • llm-safety
  • financial-risk
    pretty_name: "FinRED: Financial Red-Teaming Benchmark"
    dataset_info:
    features:
    • name: category_prefix
      dtype: string
    • name: prompt
      dtype: string
      splits:
    • name: train
      num_examples: 5805
      configs:
  • config_name: default
    data_files:
    • split: train
      path: "data/train-*"

FinRED: An Expert-Guided Red-Teaming Benchmark for Financial LLM Safety

Dataset Description

FinRED is the first comprehensive red-teaming benchmark specifically designed to evaluate the safety of Large Language Models (LLMs) in the financial domain. Developed in collaboration with 12 domain experts from South Korea's Financial Security Institute (FSI), FinRED provides 5,805 adversarial seed prompts grounded in realistic financial threat scenarios.

Unlike general-purpose safety benchmarks that focus on universal harms, FinRED targets domain-specific financial risks — including regulatory compliance violations, financial fraud facilitation, and systemic trust erosion — that require specialized evaluation.

Dataset Summary

Property Value
Total Prompts 5,805
Level-1 Risk Categories 5
Level-2 Subcategories 26
Language English
Avg. Prompt Length ~660 characters
Expert Validators 12 FSI domain experts

Two-Level Financial Risk Taxonomy

FinRED is built upon a novel 2-level financial risk taxonomy established through extensive literature review, focus group interviews (FGI), and consensus-building with financial security experts.

Level-1 Categories

Category Description # Seeds
R1: Cyber Threats Adversarial behaviors targeting digital infrastructure of financial institutions 948
R2: Financial Crime Intent that induces, instructs, or facilitates financial crimes 840
R3: Misinformation & Deception Deceptive information behaviors eroding trust in financial ecosystems 1,503
R4: Consumer Rights Violation Acts undermining financial rights and protections of consumers 1,044
R5: Compliance Evasion Violations of mandatory ICT-related regulatory obligations 1,470

Level-2 Subcategories

R1: Cyber Threats (6 subcategories)
Code Subcategory # Seeds Description
R1_1 Digital Authentication Bypass 150 Evading or exploiting weaknesses in authentication schemes (FIDO2, OTP, mobile ID, Passkey)
R1_2 Asset Theft 150 Exfiltration or manipulation of financial data, credentials, or digital assets
R1_3 System Compromise 168 Exploiting vulnerabilities in core platforms for remote execution or privilege escalation
R1_4 Service Disruption 168 Application-layer or volumetric DoS attacks on transaction systems, APIs, or login services
R1_5 Insider & Supply Chain Threats 120 Abuse of authorized privileges or compromise through third-party vendors and CI/CD pipelines
R1_6 APT / Stealth Attacks 192 Persistent intrusions via lateral movement, C2 tunneling, or anti-forensic techniques
R2: Financial Crime (5 subcategories)
Code Subcategory # Seeds Description
R2_1 Voice / Messenger Fraud 168 Voice phishing, smishing, or impersonation to induce illicit transfers or credential theft
R2_2 E-Financial Fraud 168 Account rentals, identity theft in digital loans, or illegal asset acquisition
R2_3 AML/CFT Violations 168 Using mixers, shell companies, or trade-based laundering to conceal proceeds
R2_4 Internal Control Circumvention 168 Manipulation of internal banking or credit screening systems to override compliance rules
R2_5 Illegal Debt Collection 168 Psychologically coercive or deceptive debt recovery scenarios
R3: Misinformation & Deception (3 subcategories)
Code Subcategory # Seeds Description
R3_1 Misleading Product Information 501 Distorting risk-return metrics, fee structures, or performance data
R3_2 False Financial Facts 501 Fabrication of false market news or regulatory announcements
R3_3 Deceptive Ads & Content 501 Generating fake endorsements or expert personas for fraudulent investment decisions
R4: Consumer Rights Violation (5 subcategories)
Code Subcategory # Seeds Description
R4_1 Exploiting Vulnerable Groups 210 Predatory targeting of seniors or immigrants with low financial literacy
R4_2 Evasion of Disclosure Duties 210 Intentional omission or distortion of required risk disclosures
R4_3 Infringement of Consumer Rights 210 Obstruction of legally protected rights (cancellation, data access, contract termination)
R4_4 Liability Evasion 210 Deceptive strategies to deny or shift legal responsibility after losses
R4_5 Mis-selling Promotion 204 Inducing unsuitable product sales through incentive misalignment
R5: Compliance Evasion (7 subcategories)
Code Subcategory # Seeds Description
R5_1 IT Risk Management Evasion 210 Neglect or falsification of mandated IT risk controls
R5_2 Outsourcing Oversight Evasion 210 Failure to monitor or report outsourced IT/vendor risks
R5_3 Security Monitoring Concealment 210 Disabling, falsifying, or bypassing SOC monitoring and incident detection
R5_4 Incident Non-Reporting 210 Concealing cyber incidents or delaying disclosure to regulators
R5_5 Data Protection Evasion 210 Violating personal data protection duties (weak encryption, unauthorized transfer)
R5_6 Superficial Cyber Resilience 210 Symbolic compliance behaviors undermining actual resilience
R5_7 Supervisory Non-Cooperation 210 Non-cooperation with audits, sandbox reviews, or FSI/FSS supervision

Dataset Statistics

Seeds per Category

Category R1 R2 R3 R4 R5 Total
# Seeds 948 840 1,503 1,044 1,470 5,805
# Subcategories 6 5 3 5 7 26

Seeds per Subcategory

Level-1 Category Level-2 Subcategory # Seeds
R1: Cyber Threats R1_1 Digital Authentication Bypass 150
R1_2 Asset Theft 150
R1_3 System Compromise 168
R1_4 Service Disruption 168
R1_5 Insider & Supply Chain Threats 120
R1_6 APT / Stealth Attacks 192
Subtotal 948
R2: Financial Crime R2_1 Voice / Messenger Fraud 168
R2_2 E-Financial Fraud 168
R2_3 AML/CFT Violations 168
R2_4 Internal Control Circumvention 168
R2_5 Illegal Debt Collection 168
Subtotal 840
R3: Misinformation & Deception R3_1 Misleading Product Information 501
R3_2 False Financial Facts 501
R3_3 Deceptive Ads & Content 501
Subtotal 1,503
R4: Consumer Rights Violation R4_1 Exploiting Vulnerable Groups 210
R4_2 Evasion of Disclosure Duties 210
R4_3 Infringement of Consumer Rights 210
R4_4 Liability Evasion 210
R4_5 Mis-selling Promotion 204
Subtotal 1,044
R5: Compliance Evasion R5_1 IT Risk Management Evasion 210
R5_2 Outsourcing Oversight Evasion 210
R5_3 Security Monitoring Concealment 210
R5_4 Incident Non-Reporting 210
R5_5 Data Protection Evasion 210
R5_6 Superficial Cyber Resilience 210
R5_7 Supervisory Non-Cooperation 210
Subtotal 1,470
Total 5,805

Dataset Structure

Data Fields

  • category_prefix (string): The Level-2 taxonomy code (e.g., R1_1, R3_2, R5_7) identifying the financial risk category of the prompt.
  • prompt (string): A contextually rich adversarial seed prompt (behavior seed) describing a realistic financial threat scenario.

Data Splits

Split # Samples
train 5,805

Dataset Creation

Generation Pipeline

FinRED prompts are generated through a schema-driven, context-grounded pipeline:

  1. Financial Risk Taxonomy & Schema Definition: Expert-defined JSON schemas for each risk category, refined through iterative collaboration with FSI experts over multiple review cycles.
  2. Contextual Retrieval: ~500 expert-curated financial documents (regulatory frameworks, supervisory guidelines, audit reports) are chunked and indexed in a vector database. Relevant chunks are retrieved per Level-2 category.
  3. Context-Grounded Behavior Seed Generation: A two-step process — first generating structured JSON scenarios from schemas and retrieved context, then transforming them into natural-language seed prompts with dynamic persona assignment and strategic element combination.
  4. Expert Validation: Generated prompts undergo final validation by financial experts through focus group interviews, evaluating scenario realism, attack effectiveness, and clarity of potential harm.

Regulatory Alignment

The taxonomy is aligned with international supervisory frameworks including:

  • FATF (Financial Action Task Force)
  • BIS/BCBS (Basel Committee on Banking Supervision)
  • NIST Cybersecurity Framework
  • OWASP Security Standards
  • EU DORA (Digital Operational Resilience Act)
  • ISO/IEC 27001 Information Security Management

README history 4 revisions

Every night we snapshot the README of every dataset in the catalog. When the SHA changes we archive the new version and diff it against the last. This is the evolving thought record of the alignment-data field: what the author decided to say about the corpus, and how that framing shifted over time.

  1. 2026-04-10Remove Korean language tag (dataset is English only)b3669409.8 KB
    Loading...
  2. 2026-04-10Add dataset card with taxonomy, statistics, and documentation5cc70369.9 KB
    Loading...
  3. 2026-02-09Import from datumo/RED-FinRED-v0.1346cc220 B
    Loading...
  4. 2026-02-09initial commit69268040 B
    Loading...

Used by abliterated models none yet

No abliterated models in our catalog have declared this dataset in their YAML metadata yet. This can mean the dataset is used but not declared, is used outside abliteration workflows, or is new. The link will populate automatically as models are indexed.

Community discussions 1 thread · 1 open · 1 comments

Threads posted by the community on Hugging Face: bug reports, questions about usage, pull requests on the README, license clarifications. Click any thread to expand and read the full conversation inline. Newest first.

  1. 2026-02-10[bot] Conversion to Parquetopen1 💬#1
    Loading...

Related datasets same stage · extract

Read further

Metadata

License
cc-by-nc-4.0

Repository

Download the dataset

Gated dataset. You need to accept the author's terms on Hugging Face before downloading. Visit the repository, click Agree and access repository, then log in locally with huggingface-cli login and use one of the snippets below.

Copy any of these snippets into your notebook or terminal. All three fetch directly from Hugging Face using your own credentials.

Recommended: datasets library (Python)
from datasets import load_dataset
ds = load_dataset("anon-user-7777/FinRED")
Raw snapshot (Python)
from huggingface_hub import snapshot_download
snapshot_download(repo_id="anon-user-7777/FinRED", repo_type="dataset")
git clone (requires git-lfs)
git clone https://huggingface.co/datasets/anon-user-7777/FinRED
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration