InvestNot yet confirmed elsewhere1 publisher3 min readPublished
Anthropic and the FBI routed three Claude chats to police in seven weeks
Three conversations with Anthropic's Claude reached police between August 11 and September 30, and two of those users now face felony charges. Anthropic's own staff reported two of the cases, so the vendor's review team is one documented route from a chat to a charge.
The Investor · Invest desk

What happened
- Nathaniel Carrasco, 22, allegedly told Claude on August 11 that he wanted to get a gun and shoot students at Serna Elementary School in San Antonio, according to an arrest affidavit.
- A San Francisco man allegedly told Claude on August 14 that he had bought an AR-15 and had Dario Amodei "in his sights", and Anthropic told police the following Tuesday.
- Anthropic's monitoring flagged Carli Heller's late-September messages about the Lee County Sheriff's Office, and a human review team referred them to police because of their severity.
Why it matters
- precedent Anthropic's September 10 privacy policy put in writing a practice it was already using: it referred the August 14 San Francisco chat to police weeks before the policy took effect.
- exposure The people threatened can sit outside the referral chain: Serna Elementary's principal said the school learned of the specific threat against its campus only from news coverage.
- exposure Anthropic's review decisions are now part of a criminal case: the Florida arrest report traces the charge to its monitoring and human reviewers, and Heller's court date is in November.
The two routes moved at different speeds. The FBI's National Threat Operations Section notified San Antonio police on August 28 [4], 17 days after Carrasco's chat [20]. He was arrested on August 30 on a third-degree felony charge of terroristic threat [6], 19 days after he typed it [21]. Anthropic's direct referral in the Amodei case reached San Francisco police within roughly a week [24]. Officers established that the man was not at the company's office at 500 Howard Street [9]. A spokesperson said Anthropic banned the account and described the referral as its safeguards doing what they were meant to do [10]. No arrest or charge had followed by early September [11].
Finding Carrasco took three other companies. Police tied his phone number, IP traffic and address to the Claude account only after sending emergency disclosure requests to T-Mobile, Charter Communications and Google [5]. Anthropic began requiring a government ID and a live selfie for some features in April, Cryptopolitan reported [19]. For accounts that pass that check, I'd expect police to need fewer outside requests, because the vendor has already confirmed who the user is.
Anthropic's documents set two different tests for telling police. The privacy policy that took effect September 10 permits sharing data with law enforcement when the company has a good-faith belief that it is reasonably necessary to prevent serious harm [12]. The consumer terms give Anthropic the right to pass a user's actions, inputs and outputs to law enforcement "in its sole discretion" [13]. Outputs are on that list, so Claude's replies can be reported along with what the user typed [13].
Whether these are two channels or one depends on how the FBI's threat unit learned of Carrasco's chat, and the report does not say. If Anthropic sent it, all three cases began inside Anthropic's review and the bureau relayed one. If the tip came from elsewhere, a Claude conversation has two independent routes to a police department. The record covers three cases in 50 days [22], each surfacing through an arrest affidavit or a police report [3] [8] [14].
In my view the evidence firmly supports the narrower claim: Anthropic's own review is an active source of police referrals, and one of them has already become a charge. According to the arrest report, Heller wrote on September 26 that she was going to "shoot up" the Lee County Sheriff's Office, and the next day that she had obtained a new gun [14]. Deputies detained her at home without incident, and she faces a charge of making a written threat of violence [16].
Sheriff Carmine Marceno said Heller later described using AI like a diary [17]. "Artificial intelligence is a powerful tool, and like any technology, it can be misused," Marceno said in a statement [18].
What to watch
- Filings in the Carrasco case showing how the FBI's National Threat Operations Section learned of the August 11 chat, and so whether Anthropic was behind all three referrals.
- Heller's November court date, where a charge that began with Anthropic's monitoring goes before a judge.
- Any count of law-enforcement referrals published by Anthropic, against which three public cases in 50 days could be measured.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+5
- Incentives
- Insufficient
- Confidence58
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Three conversations with Anthropic's Claude reached the police between August 11 and September 30.
- [2]
Two of the users whose Claude conversations reached police are now facing felony charges.
- [3]
On August 11 in San Antonio, Nathaniel Michael Carrasco, 22, told Anthropic's AI he wanted to get a gun and shoot students at Serna Elementary School, according to an arrest affidavit.
- [4]
The FBI's National Threat Operations Section notified local San Antonio police on August 28.
- [5]
Officers linked Carrasco to the account through emergency disclosure requests to T-Mobile, Charter Communications, and Google that matched his phone number, IP traffic, and address to the account.
- [6]
Carrasco was arrested on August 30, the school's principal said, on a third-degree felony charge of terroristic threat causing public fear of serious bodily injury.
- [7]
The school only discovered the specific threat against its campus through news coverage, the principal said.
- [8]
On August 14 a man allegedly told Claude he had bought an AR-15 and had Dario Amodei "in his sights," according to a San Francisco police report; the following Tuesday, Anthropic told the SFPD.
- [9]
Officers established that the man was not at Anthropic's office at 500 Howard Street.
- [10]
An Anthropic spokesperson said the company banned the account and referred the case to law enforcement, saying it was the safeguards process working as intended.
- [11]
As of early September, the San Francisco man had not been arrested or charged.
- [12]
Anthropic's privacy policy, which went into effect September 10, says it can share data with law enforcement if it has a good-faith belief it is reasonably necessary to prevent serious harm.
- [13]
Anthropic's consumer terms reserve the right to report a user's inputs, outputs, or actions to law enforcement "in its sole discretion."
- [14]
The arrest report said Carli Michelle Heller, of Bonita Springs, Florida, wrote on September 26 that she was going to "shoot up" the Lee County Sheriff's Office; investigators say she wrote the next day that she obtained a new gun.
- [15]
The report says Heller's statements were flagged by Anthropic's monitoring, and a human review team referred them to law enforcement owing to their severity.
- [16]
Deputies detained Heller at her home without incident; she faces a charge of making a written threat of violence and has a court date in November.
- [17]
Sheriff Carmine Marceno said Heller later described using AI like a diary.
- [18]
"Artificial intelligence is a powerful tool, and like any technology, it can be misused," Marceno said in a statement.
- [19]
In April, Cryptopolitan reported, Anthropic started requiring a government ID and a live selfie for some features.
- [20]
Seventeen days passed between Carrasco's August 11 chat and the FBI unit's August 28 notification to San Antonio police.
- [21]
Carrasco was arrested 19 days after the August 11 chat.
- [22]
The window from August 11 to September 30 is 50 days.
- [23]
Anthropic's referral of the August 14 San Francisco chat came weeks before its September 10 privacy policy took effect.
- [24]
Anthropic's referral reached San Francisco police within roughly a week of the August 14 chat.
Sources
1 independent publisher whose own reporting we read for this story.
- cryptopolitan.comPolice acted on three Claude chats in seven weeks, and two users face felony charges
1 article · October 6, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.