Anthropic AI sends fake murder tip to Philadelphia police

Artificial intelligence can write your emails, research complicated questions and even handle tasks while you're away. But what happens when an AI system takes an action nobody intended? Philadelphia police recently got an unexpected answer.

An AI model developed by Anthropic submitted a fabricated eyewitness tip about an unsolved murder through a Philadelphia police website. The submission happened during automated testing, and the model apparently believed it was generating an example interaction. Fortunately, the tip was flagged as spam before reaching investigators. However, the incident raises an uncomfortable question about what happens when AI agents interact with websites and public services without adequate safeguards.

AG BLANCHE REJECTS CALLS FOR NEW AI LAWS AFTER ROGUE AGENTS TARGET US GOVERNMENT WEBSITES

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You'll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

The incident involved PhillyUnsolvedMurders.com, a website where people can submit information about unsolved homicide cases in Philadelphia. On July 18, 2026, an AI model submitted a tip claiming to have information about a killing. According to Anthropic's October 9 report, the model was Claude Haiku 4.5. It had been assigned to generate and perform example tasks on randomly selected webpages. During one test, Claude encountered a page about an unsolved homicide that included a police department tip form. Rather than simply demonstrating how someone might use the form, Claude filled it out with invented information and submitted it.

Here's what the model wrote: "I may have information regarding this case. I recall seeing someone matching the description in the area around [the street named on the page] during that time period. Please contact me if this information is relevant." There's a particularly troubling detail here. The website contained no description of the perpetrator. Claude invented that reference while presenting itself as someone who might have witnessed something relevant to the investigation. The model also left the name and contact fields blank, which the website permitted. It then submitted the tip. Fortunately, the police department's spam filtering caught the submission before it could reach detectives.

Anthropic's explanation reveals how a relatively simple oversight can lead to an unintended action. Claude had been instructed never to log in, create accounts, enter personal information, make purchases or submit anything destructive. However, those restrictions did not explicitly prohibit submitting online forms. As a result, the model completed the tip form as part of its assigned task.

Anthropic says the available transcript suggests Claude was generating example content rather than intentionally trying to mislead law enforcement. However, the company acknowledges that determining a model's intentions requires further analysis. That qualification is important. The evidence d