RAG-CT is a novel defense mechanism that identifies malicious queries in Retrieval-Augmented Generation (RAG) systems, preventing personally identifiable information (PII) leakage. It analyzes entropy and margin distributions to detect and mitigate PII extraction attacks on LLMs, outperforming existing defenses without modifying the underlying LLM or retriever.