Explainer
Why AI detectors get it wrong so often
AI detectors and AI watermarks are routinely discussed as though they were the same technology. They are not related at all, and confusing them leads people to trust results that deserve very little confidence.
01How a detector actually decides
Most detectors are classifiers trained on examples of human and machine text. They look at statistical properties of the writing: perplexity, roughly how surprising each word is given the previous ones, and burstiness, how much sentence length and complexity vary across a passage.
Model output tends to score low on perplexity and low on burstiness, because sampling favours probable continuations and produces even, regular prose. The detector reports the probability that a passage came from a model, and that number is an estimate about a style, not evidence about an author.
02Why the errors are not random
Any writing that is clear, even and conventional scores as machine-like. Technical documentation, legal drafting, academic abstracts and instructional writing all share those properties because the genre demands them.
The best-documented harm falls on people writing in a second language, who often use simpler constructions and more predictable vocabulary — exactly the profile a detector reads as artificial. Studies have repeatedly found substantially higher false-positive rates for non-native English writers, which makes detector output an unfair basis for an accusation.
The reverse error is just as easy. Asking a model to vary its sentence structure lowers a detector's confidence considerably, so the people most motivated to evade are the least likely to be caught.
03How watermarking differs
A watermark is deliberately placed at generation time by the party running the model, and detected with a key. Where present and where the key holder runs the check, it is far more reliable than a classifier, because it is looking for a signal it planted rather than guessing from style.
The limits are different too. A watermark cannot exist in text produced by a model that does not implement one, and detection keys are generally not public, so third parties cannot run the check themselves. A classifier will happily give anyone a verdict on any text, which is precisely why unreliable verdicts are so widespread.
Questions
Can a detector prove I used AI?
+
No. It produces a probability estimate based on stylistic features, not evidence about authorship. Treating a percentage from a classifier as proof is a misuse of the tool, and its own documentation usually says so.
Does removing invisible characters change a detector's score?
+
Almost never. Classifiers analyse word and sentence patterns, and invisible characters are not part of that analysis. A small number of naive tools do flag their presence separately, which is a different check from the classifier itself.
What should I do if wrongly flagged?
+
Show your process rather than argue the score. Draft history, version control, notes and revision timestamps all evidence how the work was made. Many institutions now accept that detector output alone is not sufficient grounds for an allegation.