Skip to content

InvestNot yet confirmed elsewhere1 publisher3 min readPublished

Anthropic and the FBI routed three Claude chats to police in seven weeks

Three conversations with Anthropic's Claude reached police between August 11 and September 30, and two of those users now face felony charges. Anthropic's own staff reported two of the cases, so the vendor's review team is one documented route from a chat to a charge.

The Investor · Invest desk

How we use AISend a correction

Illustration accompanying Anthropic and the FBI routed three Claude chats to police in seven weeks
Generated illustration

What happened

  • Nathaniel Carrasco, 22, allegedly told Claude on August 11 that he wanted to get a gun and shoot students at Serna Elementary School in San Antonio, according to an arrest affidavit.
  • A San Francisco man allegedly told Claude on August 14 that he had bought an AR-15 and had Dario Amodei "in his sights", and Anthropic told police the following Tuesday.
  • Anthropic's monitoring flagged Carli Heller's late-September messages about the Lee County Sheriff's Office, and a human review team referred them to police because of their severity.

Why it matters

  • precedent Anthropic's September 10 privacy policy put in writing a practice it was already using: it referred the August 14 San Francisco chat to police weeks before the policy took effect.
  • exposure The people threatened can sit outside the referral chain: Serna Elementary's principal said the school learned of the specific threat against its campus only from news coverage.
  • exposure Anthropic's review decisions are now part of a criminal case: the Florida arrest report traces the charge to its monitoring and human reviewers, and Heller's court date is in November.

The two routes moved at different speeds. The FBI's National Threat Operations Section notified San Antonio police on August 28 [4], 17 days after Carrasco's chat [20]. He was arrested on August 30 on a third-degree felony charge of terroristic threat [6], 19 days after he typed it [21]. Anthropic's direct referral in the Amodei case reached San Francisco police within roughly a week [24]. Officers established that the man was not at the company's office at 500 Howard Street [9]. A spokesperson said Anthropic banned the account and described the referral as its safeguards doing what they were meant to do [10]. No arrest or charge had followed by early September [11].

Finding Carrasco took three other companies. Police tied his phone number, IP traffic and address to the Claude account only after sending emergency disclosure requests to T-Mobile, Charter Communications and Google [5]. Anthropic began requiring a government ID and a live selfie for some features in April, Cryptopolitan reported [19]. For accounts that pass that check, I'd expect police to need fewer outside requests, because the vendor has already confirmed who the user is.

Anthropic's documents set two different tests for telling police. The privacy policy that took effect September 10 permits sharing data with law enforcement when the company has a good-faith belief that it is reasonably necessary to prevent serious harm [12]. The consumer terms give Anthropic the right to pass a user's actions, inputs and outputs to law enforcement "in its sole discretion" [13]. Outputs are on that list, so Claude's replies can be reported along with what the user typed [13].

Whether these are two channels or one depends on how the FBI's threat unit learned of Carrasco's chat, and the report does not say. If Anthropic sent it, all three cases began inside Anthropic's review and the bureau relayed one. If the tip came from elsewhere, a Claude conversation has two independent routes to a police department. The record covers three cases in 50 days [22], each surfacing through an arrest affidavit or a police report [3] [8] [14].

In my view the evidence firmly supports the narrower claim: Anthropic's own review is an active source of police referrals, and one of them has already become a charge. According to the arrest report, Heller wrote on September 26 that she was going to "shoot up" the Lee County Sheriff's Office, and the next day that she had obtained a new gun [14]. Deputies detained her at home without incident, and she faces a charge of making a written threat of violence [16].

Sheriff Carmine Marceno said Heller later described using AI like a diary [17]. "Artificial intelligence is a powerful tool, and like any technology, it can be misused," Marceno said in a statement [18].

What to watch

  • Filings in the Carrasco case showing how the FBI's National Threat Operations Section learned of the August 11 chat, and so whether Anthropic was behind all three referrals.
  • Heller's November court date, where a charge that began with Anthropic's monitoring goes before a judge.
  • Any count of law-enforcement referrals published by Anthropic, against which three public cases in 50 days could be measured.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence62
Adoption
Insufficient
Hype gap+5
Incentives
Insufficient
Confidence58
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    Three conversations with Anthropic's Claude reached the police between August 11 and September 30.

    ReportedSupportedView cited source
  2. [2]

    Two of the users whose Claude conversations reached police are now facing felony charges.

    ReportedSupportedView cited source
  3. [3]

    On August 11 in San Antonio, Nathaniel Michael Carrasco, 22, told Anthropic's AI he wanted to get a gun and shoot students at Serna Elementary School, according to an arrest affidavit.

    ReportedSupportedSource: Arrest affidavit, as reported by CryptopolitanView cited source

Sources

1 independent publisher whose own reporting we read for this story.

  1. cryptopolitan.com

    1 article · October 6, 2026

    Police acted on three Claude chats in seven weeks, and two users face felony charges

Share your take

Let Clarity write the post for you.

Signed-in readers get a short post drafted on this story in the register they choose — narrative, analytical, or a direct position — editable to the last word before it goes anywhere. The share buttons at the top of this story work without an account.

Topics and entities

Follow any of these and your For You feed starts watching them — no settings page required.

Loading related stories