
How to bypass Anthropic (and any other) AI Text Watermarks?
Here's my idea:
- preprocess the raw text to remove the most obvious signs of AI-generated content: em dashes, zero-width characters, exotic spaces, etc.
The next three steps tackle with core concept of watermarking: specific token-selection distribution. Here how that works:
- send the text to a translator (e.g. Google Translate) and translate it into an intermediate language
- translate text back from the intermediate to the original language
- optionally, rewrite the text using an LLM that is guaranteed not to watermark its output (e.g. an open-weighted model like DeepSeek-v4) to make the resulting text more readable (in case it was degraded during double translation) and to remove any remaining watermarks traces if they were somehow preserved.
I developed a simple application which automates that process. In the application you can select which steps to use and also customize each step (e.g. choosing a specific translator or rephrasing LLM).
Here`s the test results (used Google SynthID watermarking)
z-score:
watermarked text: 11.43
eng-germ-eng transtaled text: 5.68
eng-germ-eng translated + paraphrased text: 1.02
eng-cn-eng transtaled text: 4.10
eng-cn-eng translated + paraphrased text: 2.86
eng-ru-eng transtaled text: 4.19
eng-germ-eng translated + paraphrased text: 0.51
paraphrased only text: -1.18
And here's the link:
https://github.com/beatwad/AI-watermark-remover
Notebook with results can be found inside watermark_detector folder.