A paraphrasing attack is an edit or rewrite designed to keep the meaning of a text while changing its wording enough to weaken or remove a watermark signal. In AI text watermarking, the hidden marker is usually statistical, not visible, so attackers do not need to delete it directly; they can instead rewrite, summarize, translate, or re-generate the text through another model until the original pattern becomes harder to detect.
This matters because watermarking is often used for provenance, spam filtering, impersonation detection, and influence-ops triage. If a detector fails after paraphrasing, defenders may miss machine-generated content or overestimate the reliability of a match. Good defenses include watermark schemes built for robustness, testing against common rewrites, calibration to reduce false positives and false negatives, and using watermark results as one signal among logs, metadata, and other forensic checks rather than as proof on their own.