ChatGPT Uploads Sent Corey Hickey to Prison for Life

Two photos Corey Hickey uploaded to ChatGPT were enough to start a Georgia case that ended in five consecutive life terms. The chatbot flagged the stills, the National Center for Missing and Exploited Children sent a CyberTip, and a Putnam County jury later convicted the 38-year-old Eatonton man on 31 counts.

Ocmulgee Judicial Circuit District Attorney T. Wright Barksdale’s office said Hickey sexually abused his roommate’s 7-year-old daughter over a six-month period, recorded the abuse on his phone, and put two of those images into ChatGPT. The software did not run a detective squad. It did what U.S. platforms are built to do once they see apparent child sexual abuse material: it made a report.

Two Images, Then a Life Sentence

Chief Judge Alison T. Burleson sentenced Hickey on May 21, 2026, to two life terms without parole, to run one after the other, then three life terms with the possibility of parole, also consecutive, then 220 years. Prosecutors said they believe it is the longest prison sentence in the Ocmulgee Judicial Circuit.

The path to that stack of terms started with a CyberTip, not a knock on a neighbor’s door. Barksdale’s office said the images were flagged in ChatGPT and later reached NCMEC. NCMEC forwarded the tip to the Georgia Bureau of Investigation’s Child Exploitation and Computer Crimes Unit, the home of the state’s Internet Crimes Against Children task force.

Hickey had been living with the roommate’s family. Chief Assistant District Attorney Alley Mauldin said they lived together for about nine months and that the roommate’s family trusted him. The child had not told anyone what was happening. The first outside alarm was the chatbot report.

The Gmail Address on His ChatGPT Account

Mauldin said investigators tied the ChatGPT account to Hickey through his own Gmail address. She said they also used facial recognition to identify the child and the likely adult in the stills. Special Agent Ethan Brown of the GBI’s internet child-exploitation unit led the work.

They ran facial recognition and figured out who the victim was and who the defendant was most likely to be, which turned out to be Corey Hickey because he used his own Gmail address linked to his Chat GPT account.

Alley Mauldin, chief assistant district attorney, Ocmulgee Judicial Circuit

Mauldin said Brown pulled Google records and got emergency orders because agents believed the child was in imminent danger. She said Hickey had used a friend’s hotspot when he uploaded the images. Within three days, she said, Brown had him in custody.

THE PUTNAM COUNTY TIMELINE

1. October 2025: The GBI’s Child Exploitation and Computer Crimes Unit opens a case after a NCMEC CyberTip about possible production, possession, and distribution of child sexual abuse material.
2. October 29, 2025: Agents arrest Hickey at a construction job site in Baldwin County and book him in the Putnam County Jail on three counts of sexual exploitation of children.
3. May 18, 2026: Jury selection begins in Putnam County Superior Court in Eatonton.
4. May 21, 2026: After a four-day trial, the jury returns guilty verdicts on all 31 counts; Judge Burleson imposes the five life terms and 220 years.

The Putnam County Sheriff’s Office, the GBI office in Milledgeville, and the GBI Cyber Crime Center helped on the arrest. Assistant District Attorney Carter Harwell tried the case with Mauldin. Hickey, who worked on and off in construction, was 38.

Jurors Needed 45 Minutes on 31 Counts

After the arrest, Brown seized the phone. Mauldin said a download found more than 4,800 images and videos of child sexual abuse material, and that 658 of those files showed this victim. Agents also found more than 400 images on his Google Drive. Extra warrants followed for rape, aggravated child molestation, and child molestation.

The child was interviewed at the Crescent House in Macon. Mauldin said that on the first visit, the girl did not know why she was there until staff showed her sanitized photographs Hickey had taken. A little more than a month later, after the phone videos were in hand, she went back and described the abuse.

THE 31-COUNT INDICTMENT

The jury heard four days of trial and deliberated about 45 minutes on May 21. Hickey did not take the stand. Chief Public Defender Kristin Waller called no defense witnesses. Mauldin said she left evidence out on purpose because the full haul would have been too much to take in, and that she narrowed the case to the files that carried the most weight.

Mauldin also said Hickey asked ChatGPT how to keep the child from telling anyone she was being abused, and that he uploaded pictures of her “to create images from them.” Those prompts did not have to be the legal trigger. OpenAI’s public rule is that an attempt to generate or upload child sexual abuse material is enough for a NCMEC report and a ban.

How ChatGPT Sends a CyberTip to NCMEC

ChatGPT accepts images, videos, and other files so the model can look at them. OpenAI says any user who tries to generate or upload child sexual abuse material, or child sexual exploitation material, is reported to NCMEC and banned from its services. The Child Safety Team says it reports uploads and requests, then files extra “supplemental” reports when there is evidence that abuse is still going on, so NCMEC can move those cases first.

ChatGPT allows users to upload images, videos, and files so the model can interact with and analyze the content. We have observed that some users upload CSAM and ask the model to generate detailed descriptions of what is depicted in the material.

OpenAI, Combating Online Child Sexual Exploitation and Abuse, September 29, 2025

That pattern sits close to what prosecutors described in Eatonton: stills of a real child, fed into the same product people use to edit and talk about pictures. OpenAI says it catches known files with hash matching and Thorn’s CSAM classifier on uploads, including material that has not been seen before. A human reviewer on the child-safety staff sees the file only after a classifier flags it.

WHAT OPENAI SAYS IT DOES NEXT

• The scan: Hash lists and Thorn’s classifier run against uploads, and the company’s own models watch for abuse in text and images.
• The ban: The account is shut off, and staff watch for new accounts opened to dodge the ban.
• The report: A CyberTip goes to NCMEC and can include user data, victim data, and the illegal files.
• The follow-up: If abuse looks current, OpenAI sends a supplemental report so NCMEC can treat the case as a priority.

Federal law sits under that workflow. A provider that gets actual knowledge of apparent child sexual abuse material must notify NCMEC as soon as reasonably possible after obtaining actual knowledge. The statute does not force a company to hunt through every private file on its own. Once a classifier, a hash hit, or a reviewer sees apparent abuse, the duty to report turns on. NCMEC then reviews the tip and sends it to the police agency that can act, which in this case was the GBI unit in Georgia.

OpenAI Filed 182,844 CyberTips in 2025

Hickey’s two stills were a tiny slice of a reporting stream that grew fast as ChatGPT took more photos. OpenAI’s own child-safety tallies show 947 CyberTipline reports and 3,252 pieces of content in the first half of 2024, then 75,027 reports and 74,559 pieces in the first half of 2025, then 107,817 reports and 107,667 pieces from July to December 2025.

OPENAI REPORTS TO NCMEC

Add the two 2025 halves and the sum is 182,844 reports, which matches NCMEC’s 2025 electronic-service-provider table of 182,844 reports attributed to OpenAI. A year earlier, that same NCMEC table listed OpenAI at 32,079. Google’s 2025 line on the table was 1,461,378. OpenAI is not in the handful of firms that NCMEC says accounted for more than 75 percent of all industry tips.

The national pipe is much larger. NCMEC’s CyberTipline, which opened in 1998, took in 21.3 million reports in 2025, including 21,181,300 from companies and 170,193 from the public. Staff marked more than 53,000 of those reports as urgent or as involving a child in imminent danger. Among the year’s trends, NCMEC counted more than 400,000 generative-AI reports, a category that includes people who upload real abuse files and try to get a model to describe, edit, or expand them.

Uploading a Photo Can Trigger a CyberTip

People paste tax forms, medical scans, and family pictures into chat products because the box feels like a private notebook. It is not. A consumer chatbot that accepts photos is an electronic service with classifiers on the door, and a hit can leave the chat and enter a police file without a warrant first. Iowa counties have already warned workers that ChatGPT keeps their files; the Hickey case is what that architecture looks like when the file is illegal and a child is still in the house.

Hickey also left more than 400 images on Google Drive, a product that has reported child sexual abuse material to NCMEC for years. In this investigation, the door that opened was ChatGPT. The Gmail address on the account, the Putnam County origin of the stills, and the three-day sprint to an arrest are what a complete CyberTip is supposed to enable. NCMEC still flags companies whose reports lack a usable location; OpenAI was not on that 2025 list.

The child had not disclosed the abuse to anyone before the GBI arrived. Agents then showed her sanitized stills from the same phone the chatbot had already reported, and the case that began with two uploads ended in five life terms.

Frequently Asked Questions

Does ChatGPT Report Illegal Image Uploads to Police?

OpenAI sends those reports to NCMEC’s CyberTipline, not to a local precinct on its own. NCMEC reviews each tip and, in 2025, referred more than 18.8 million reports to law enforcement while marking more than 4.5 million as informational because they lacked enough detail to act.

Does Federal Law Require ChatGPT to Scan Every Photo?

No. The reporting statute requires a provider to act after it has actual knowledge of apparent child sexual abuse material; NCMEC notes there is no legal mandate for companies to search proactively or to put any particular field in a tip. OpenAI still chooses to scan uploads with hashes and a Thorn classifier, which is how knowledge can form inside ChatGPT in the first place.

What Sentence Did Corey Hickey Receive in Putnam County?

Judge Burleson imposed two life sentences without parole, consecutive to each other, then three life sentences with the possibility of parole, also consecutive, then 220 years. He had first been booked on October 29, 2025, on three sexual-exploitation counts, months before the 31-count indictment went to a jury.

Can a Text Prompt Alone Trigger a CyberTip?

OpenAI says it reports “uploads and requests,” and its usage rules ban grooming of minors as well as child sexual abuse material, including material that is partly or fully generated by a model. In the Hickey case, prosecutors described both image uploads and questions about keeping the child silent; the stills are the files the office said ChatGPT flagged and sent toward NCMEC.

Disclaimer: This article is news reporting and analysis of a completed criminal case and of public company and NCMEC reporting rules. It is for information only and is not legal advice, is not a guide to criminal procedure, and is not a how-to on platform monitoring or on any sex offense. Readers who need advice about reporting duties, preservation orders, defense strategy, or related civil claims should consult a licensed attorney in the relevant jurisdiction. Counts, dates, and reporting totals reflect the court record, prosecutor statements, OpenAI disclosures, and NCMEC tables cited above and can change if an appeal or a later transparency report revises them.