ChatGPT Tip Helped Drive a Georgia Child Abuse Life Sentence

The ChatGPT tip in the Corey Hickey case shows how an AI upload can become a child safety report: prosecutors say the tool flagged at least two illegal images, sent a CyberTipline report to the National Center for Missing and Exploited Children, and led Georgia investigators to a phone with more evidence.

On May 21, 2026, a Putnam County jury convicted Hickey, 38, on 31 counts. T. Wright Barksdale III, district attorney for Georgia’s Ocmulgee Judicial Circuit, said the judge imposed two life sentences without parole, three life sentences with parole eligibility and 220 years in prison to run consecutively.

The Tip That Started a Criminal Case

The public record begins with a cyber tip. The Georgia Bureau of Investigation (GBI, the state agency that handled the cybercrime inquiry) said it began investigating Hickey’s online activity in October 2025 after receiving a report from the center about possible production, possession and distribution of child sexual abuse material (CSAM, illegal material depicting child sexual exploitation). The Georgia Bureau of Investigation arrest notice says Hickey was charged with three counts of sexual exploitation of children and booked into the Putnam County Jail.

Prosecutors later said the case widened after agents confirmed the images were taken in Putnam County and seized Hickey’s phone. A forensic review of that device uncovered numerous videos, leading to additional warrants for rape, aggravated assault and child molestation. The original online alert became the doorway to a local evidence case.

The indictment shows the shift. Prosecutors said jurors convicted Hickey on three counts of rape of a child under 10, four counts of aggravated child molestation, three counts of child molestation and 21 counts of sexual exploitation of children. That mix matters because it ties the online upload to alleged in-person abuse, device evidence and a full trial record.

The AI Report Chain Has Four Hands

The technology piece can sound instant: upload, flag, report, arrest. The working chain is slower and more human. The case moved through a four-hand relay involving a company safety system, a national clearinghouse, state investigators and local prosecutors.

The CyberTipline report process at NCMEC says staff review tips and work to find a potential location so reports can be made available to the proper law enforcement agency. That routing function is why the same pipeline can serve a social network, a cloud service, a messaging app or an AI product.

That division of labor is easy to miss. The company can detect and report. The center can triage and route. Investigators still need warrants, devices, interviews and forensic work before a prosecutor can ask a jury for a conviction.

The Scale Behind One Tip

One Georgia prosecution landed inside a reporting system that now handles industrial-scale volume. The latest CyberTipline data from NCMEC says the service received 21.3 million reports in 2025, and provider reports included 61.8 million images, videos and other files.

• 21.3 million reports reached the CyberTipline in 2025.
• 61.8 million files were attached to electronic service provider reports.
• 107,817 reports were submitted by OpenAI to the center from July to December 2025, according to OpenAI child safety reporting totals.

The data also shows why generative AI has become a child safety category of its own. NCMEC said 2025 reports included 1.5 million with a generative AI nexus, though it noted that more than 1.1 million came from Amazon AI Services detections tied to potential CSAM inside training datasets and did not include actionable offender or victim information.

That caveat is important. A report can describe a known image, a new upload, a cloud storage hit, an attempted generation or a training-data detection. Law enforcement value depends on what comes with the alert: account details, timestamps, location signals, preserved files and enough context to identify a suspect or protect a child.

Detection Happens Before a Courtroom

The case answers a common tech question in blunt terms: uploads to AI services are subject to safety checks when they involve suspected child exploitation. OpenAI says its rules bar users from exploiting, endangering or sexualizing anyone under 18, and that its systems monitor for child safety violations.

Our Child Safety Team reports all instances of CSAM, including uploads and requests, to NCMEC

That line appears in OpenAI’s child exploitation safety post, which also says the company uses hash matching for known material and Thorn’s CSAM classifier for potentially novel material. Thorn is a child safety technology nonprofit whose tools are used by platforms trying to identify abuse material at scale.

AI-specific abuse adds another layer. The same service can receive an old illegal image, a newly produced file, an attempt to generate abusive content or a request asking the model to describe an uploaded file. Detection has to sort those cases quickly, then hand the highest-risk ones to a human process that can preserve evidence and escalate urgent threats.

Prosecutors Still Needed Local Evidence

A CyberTipline report can start the knock on the door, but prosecutors still have to prove crimes under state law. In Hickey’s case, the proof described by prosecutors moved from the AI upload to physical jurisdiction, a seized phone and a broader digital review.

• Location: investigators confirmed the images tied to the tip were taken in Putnam County.
• Device evidence: Hickey’s phone was seized after his arrest and reviewed forensically.
• Cloud evidence: prosecutors said more than 400 additional images were found on his Google Drive.
• Charging decision: the case grew from three initial sexual exploitation charges into a 31-count indictment.

Prosecutors said law enforcement found over 4,800 images and videos of child abuse material on the phone. That volume did not replace the jury’s job. It gave prosecutors a body of local evidence that could be tested in court, tied to a device and placed beside the testimony and forensic work needed for conviction.

The Google Drive detail also shows why these cases rarely stay inside one product. A single tip can point to a handset, then to cloud storage, then to accounts, timestamps and other services. For investigators, the first alert is often a map fragment, not the whole map.

The Privacy Trade-Off Sits in the Same File

The safety win carries a privacy tension that deserves plain language. AI companies invite users to upload files, images and videos for help, but some categories of content trigger monitoring, account action and legal reporting. The boundary is drawn around suspected harm, yet the mechanism still depends on scanning user-provided material.

The company’s U.S. privacy policy for uploaded content says user content can include prompts and uploaded files, images, audio and video. It also says personal data may be used to comply with legal obligations and protect the rights, privacy, safety or property of users, the company or third parties.

That is the bargain every large platform now has to defend. Weak detection leaves children exposed and lets offenders use mainstream services as cover. Overbroad systems can create false alarms, chill lawful use and put sensitive material in front of reviewers. The hard standard is not just catching more. It is catching better, with secure handling, clear escalation and records a court can understand.

The Alert Is Only the First Rescue

The deepest fact in the Georgia case is that an online report surfaced alleged offline abuse. Prosecutors said the victim was a 7-year-old child known to Hickey, and the uploads gave investigators a path into a case that was larger than the two images that triggered the alert.

NCMEC says its staff review tips, seek a potential location and make reports available to appropriate law enforcement. The GBI said its inquiry was part of the Internet Crimes Against Children (ICAC, a U.S. Department of Justice-backed task force program) effort housed with the state agency’s child exploitation unit. In practice, that means child safety work moves across company systems, nonprofit analysts, state investigators and county courtrooms.

For readers who suspect online child exploitation, the practical route remains direct reporting through the CyberTipline or local law enforcement rather than confronting a suspect or circulating material. The Georgia case shows why: the evidence has to be preserved, routed and handled by people trained to protect both the child and the case.

A model can refuse an upload in milliseconds, but the child is protected only when the report reaches someone with a badge.