Google DeepMind is worried about what happens when millions of agents start to interact
DeepMind is funding research on the risks that could emerge when millions of AI agents interact online without human oversight.
Intelligence analysis by GPT-5.4 Mini

Google DeepMind and partners are putting $10 million into research on multi-agent safety, worried that widely deployed AI agents could amplify scams, prompt injections, and cyberattacks when they start acting together at scale.
DeepMind thinks lots of AI helpers talking to each other could cause trouble, like tiny messengers spreading lies or bad commands at huge speed. It is like a busy playground where one bad whisper can spread to everyone unless adults set rules.
Analysis
Google DeepMind is funding a new push to study what happens when large numbers of AI agents interact online. Rohin Shah, who leads the company’s AGI safety and alignment research, says the spread of agents that can act without direct human oversight creates a new class of risk, especially once they can follow instructions from other agents.
To support that work, Google DeepMind, Schmidt Sciences, ARIA, the Cooperative AI Foundation, and Google.org are backing a $10 million funding pool for researchers studying multi-agent systems and ways to prevent unsafe outcomes. Shah says the point is to build a real research field outside industry labs, since academia can look further ahead and tackle problems that are not yet urgent inside companies.
The concern is not some abstract future scenario. Shah and James Fox of Schmidt Sciences say the dangers are likely to look like existing online harms, but scaled up by automation: scams, prompt injections, and cyberattacks. A prompt injection can turn an agent into something like self-guiding malware if it is tricked by malicious text in a document or message.
Both researchers argue that the only reliable way to understand the risks is to run realistic simulations. Studying a single agent, or even a small group, will not reveal what happens when huge numbers of agents begin interacting in a shared digital environment. The article also notes that some researchers see agent swarms as a possible path toward more general intelligence.
The broader message is that safety work needs to catch up with deployment. Fox says the digital commons is too important to drift into chaos, and Angel warns that agents break old security assumptions because they can reason, improvise, and be hijacked in ways traditional software cannot.
Key points
- Google DeepMind and partners are funding $10 million of research into multi-agent safety.
- The concern is what happens when many AI agents act together online without direct human oversight.
- Researchers want realistic sandbox simulations because single-agent studies may miss the real risks.
- The article points to scams, prompt injections, and cyberattacks as likely failure modes.
- Security experts say agents break older assumptions because they can reason, improvise, and be hijacked.
If the research works, it could help create safety rules before agents are everywhere in the economy. That might make it easier to use AI agents for useful tasks without turning the internet into a bigger target for scams and attacks.
If these risks are underestimated, many interacting agents could spread malicious instructions, scams, or cyberattacks faster than humans can notice. The article also suggests safety researchers may chase exotic future risks while ignoring simpler problems that are already here.



