This paper presents an overview of the NTIRE 2026 Challenge on Robust AI-Generated Image Detection in the Wild, held in conjunction with the NTIRE workshop at CVPR 2026. The goal of this challenge was to develop detection models capable of distinguishing real images from generated ones in realistic scenarios: the images are often transformed (cropped, resized, compressed, blurred) for practical usage, and therefore, the detection models should be robust to such transformations. The challenge is based on a novel dataset consisting of 108,750 real and 185,750 AI-generated images from 42 generators comprising a large variety of open-source and closed-source models of various architectures, augmented with 36 image transformations. Methods were evaluated using ROC AUC on the full test set, including both transformed and untransformed images. A total of 511 participants registered, with 20 teams submitting valid final solutions. This report provides a comprehensive overview of the challenge, describes the proposed solutions, and can be used as a valuable reference for researchers and practitioners in increasing the robustness of the detection models to real-world transformations.
Figure 3: TeleAI-TeleGuard method scheme. Pipeline of LPT. To achieve robust detection, the framework includes distortion simulation, foundation-model fine-tuning, and pairwise optimization.
Figure 4: INTSIG method scheme.
Model
Input
Core change
Weight
M1
2562
DINOv3-Huge baseline
0.3675
M2
2562
Incremental data expansion
0.0735
M3
2562
Stronger distortion augmentation
0.0490
M4
4482
High-resolution branch
0.2100
M5
3782
MetaCLIP2 Giant backbone
0.3000
Table 1: Summary of training paths and ensemble weights.
Table 3: Final results and rankings of the top-9 teams. Performance is reported on the open and hidden test sets using both clean ROC-AUC and Robust ROC-AUC. The final ranking is determined by the average Robust ROC-AUC across both splits.
Figure 6: Reagvis Labs method scheme. Overview of RAPID with staged logit fusion.
Model
Time (ms)
Peak VRAM (GB)
Fine-tuning
G4 (CLIP+GAPL)
∼ 37
2.6
LoRA r=32 (attn+MLP)
SigLIP-v2
∼ 26
1.8
LoRA r=32 (384px)
SRM ForensicCNN
∼ 5
0.1
full training (FP32)
EVA-02 (original)
∼ 25
1.3
LoRA r=32 + SwiGLU
EVA-02 (fixed)
∼ 25
1.3
LoRA r=32 retrain
G4_v2 (CLIP+GAPL)
∼ 37
2.6
LoRA continuation
Table 4: Per-branch inference cost and memory. Sequential loading keeps total peak memory below 4 GB.
Figure 7: UESTC method scheme.
Figure 8: PSU method scheme.
Encoder
Paradigm
d
Tune
Head
CLIP ViT-L/14
VL-Contrastive
1024
LN
MLP-512
SigLIP ViT-L/16
VL-Contrastive
1024
LN
MLP-512
EVA02-Large
VL-Contrastive
1024
LN
MLP-512
DINOv2 ViT-L/14
Self-Supervised
1024
F
Linear
ConvNeXt-Large
Supervised CNN
1536
F
MLP-512
EfficientNet-V2-L
Supervised CNN
1280
F
MLP-512
Table 5: PRISM encoder pool. d : feature dimension. LN: LayerNorm-only tuning. F: frozen encoder.
Figure 9: Shallow Real method scheme. Overall pipeline of the proposed model.
AI-generated image detection identifies synthetic or AI-edited images and develops methods that generalize across generators, domains, and image transformations.
Robust detection of AI-generated images in the wild remains challenging due to the rapid evolution of generative models and varied real-world distortions. We argue that relying on a single training regime, resolution, or backbone is insufficient to handle all conditions, and that structured heterogeneity across these dimensions is essential for robust detection. To this end, we propose HEDGE, a Heterogeneous Ensemble for Detection of AI-GEnerated images, that introduces complementary detection routes along three axes: diverse training data with strong augmentation, multi-scale feature extraction, and backbone heterogeneity. Specifically, RouteA progressively constructs DINOv3-based detectors through staged data expansion and augmentation escalation, RouteB incorporates a higher-resolution branch for fine-grained forensic cues, and Route~C adds a MetaCLIP2-based branch for backbone diversity. All outputs are fused via logit-space weighted averaging, refined by a lightweight dual-gating mechanism that handles branch-level outliers and majority-dominated fusion errors. HEDGE achieves 4th place in the NTIRE 2026 Robust AI-Generated Image Detection in the Wild Challenge and attains state-of-the-art performance with strong robustness on multiple AIGC image detection benchmarks.
Fei Wu, Dagong Lu, Mufeng Yao +2
Shanghai Jiao Tong University · INTSIG Information
AI-generated image detectors are often evaluated on benchmarks where real and synthetic images differ in content, quality, or generation artifacts, allowing models to rely on dataset-specific cues and fail on unfamiliar generators or processed images. Existing datasets provide limited support for evaluating these challenges jointly across diverse visual content. We introduce REALIS, a dataset of 1.43 million real and synthetic images generated by 42 modern text-to-image models, including the latest proprietary systems such as Nano Banana 2. REALIS combines prompts derived from real images, quality filtering, and stratified sampling to reduce class-specific shortcuts while preserving content diversity. We further introduce REALIS-Expert, a stress-test subset for high-quality synthetic images, where real and generated samples are selected with closely matched semantic and visual characteristics. We also propose a robustness protocol covering 35 transformations at five severity levels to analyze detector behavior under image processing. Based on REALIS, our benchmark evaluates pretrained detectors, fine-tuned models, and zero-shot vision-language models under generator and post-processing shifts. On the hardest processed split, the best pretrained conventional detector achieves 0.550 ROC-AUC, compared with 0.752 for the best REALIS-trained detector. REALIS provides a unified framework for measuring and improving the reliability of AI-image detectors under conditions that better reflect real-world use.
Aleksandr Gushchin, Khaled Abud, Georgii Bychkov +5
MSU Institute for Artificial Intelligence · Trusted AI Research Center RAS · Lomonosov Moscow State University
The rapid advancement of image generation models has made it increasingly difficult for people to distinguish AI-generated images from real ones. To prevent the potential risks associated with the misuse of fake images, AI-generated image detection has gained significant attention. Existing methods neglect the inherent differences between real and fake images, thus lacking robustness and generalization ability. In this work, we innovatively investigate AI-generated image detection using bit-planes, and introduce the bit-reversed image. We propose a simple yet effective pipeline consisting of construction of bit-reversed images, gradient-based patch selection and a convolutional classifier. Besides, we provide a theoretical analysis from the mathematical perspective to demonstrate the validity of our approach. We also introduce two challenging datasets for AI-generated image detection. Extensive experiments verify the effectiveness of our approach across different settings, including cross-generator generalization, cross-dataset generalization and zero-shot performance. Without bells and whistles, our approach outperforms existing methods on over 40 benchmarks, and is nearly 100 times faster than counterparts. The code is at https://github.com/renxi-seu/RAID.
Renxi Cheng, Jie Gui, Hongsong Wang
School of Cyber Science and Engineering, Southeast University, Nanjing 210096, China · Purple Mountain Laboratories, Nanjing 210000, China · Engineering Research Center of Blockchain Application, Supervision And Management (Southeast University), Ministry of Education, China +2