When the Brief Cites a Case That Doesn't Exist

Rule 11, the duty of candor, and how courts are calibrating consequences in the 2025–2026 wave of AI-citation sanctions.

A neutral, primary-source survey. The duties are old and settled; what is new is the technology that makes them easy to breach — and the range of consequences courts are imposing when a filing cites authority that does not exist.

Professional Responsibility Rule 11 & Candor Primary-Source Verified Neutral Research Not Legal Advice

This is neutral research, not legal advice. It describes settled professional-responsibility duties and surveys how courts are currently calibrating consequences when AI-assisted filings contain fabricated or erroneous citations. It advises no party, takes no side, and is not a prediction of how any matter will be decided. The duty discussed here runs to the human filer — not to any AI tool or vendor. For guidance on a specific situation, consult a licensed attorney in the relevant jurisdiction.

The question

A lawyer files a brief. It quotes a precedent that reads perfectly: the right court, a plausible reporter citation, a clean and quotable holding. There is only one problem. The case does not exist.

Since 2023, that scenario has moved from curiosity to recurring docket event. A generative-AI tool, asked for supporting authority, returns text that is fluent, confident, and — sometimes — invented: a non-existent opinion, or a real case dressed in a quotation it never contained. The lawyer, not reading behind the output, files it.

The rules that govern this did not change when the technology arrived. A lawyer's certification obligations under Federal Rule of Civil Procedure 11 and the duty of candor toward the tribunal predate generative AI by decades. What changed is how easy it has become to file something unverified that looks verified. This piece asks a descriptive question: under those existing duties, how are U.S. courts calibrating consequences when AI-assisted filings contain fabricated or erroneous citations — and what does the 2025–2026 wave of sanctions reveal about the emerging, and decidedly non-uniform, pattern?

The short answer, stated here at the top and supported below: the obligation is non-delegable and runs to the human who signs the filing; the technology changed the workflow, not the duty; and verification — opening the cited authority and confirming it says what the brief claims — remains the constant the rules already required.

The settled duty (the anchor)

Before the wave, there was the rule. Rule 11(b) makes the act of presenting a filing a certification. By signing, filing, submitting, or later advocating a paper, an attorney certifies — after a reasonable inquiry — that its legal and factual contentions have support1:

"By presenting to the court a pleading, written motion, or other paper—whether by signing, filing, submitting, or later advocating it—an attorney or unrepresented party certifies that to the best of the person's knowledge, information, and belief, formed after an inquiry reasonable under the circumstances:"

Fed. R. Civ. P. 11(b) — source 1

The operative standard is the rule's own phrase, "an inquiry reasonable under the circumstances" — what courts commonly describe as an objective-reasonableness test, a label that is the courts' shorthand rather than the rule's words. Subjective good faith is not the measure; a sincere but unverified belief that a cited case exists does not satisfy the certification. When the standard is breached, Rule 11(c) authorizes a sanction, after notice and an opportunity to respond, that is "limited to what suffices to deter repetition."1

The professional-conduct rules run alongside Rule 11. Most directly on point is the duty of candor toward the tribunal under Model Rule 3.32:

"A lawyer shall not knowingly: (1) make a false statement of fact or law to a tribunal or fail to correct a false statement of material fact or law previously made to the tribunal by the lawyer; (2) fail to disclose to the tribunal legal authority in the controlling jurisdiction known to the lawyer to be directly adverse to the position of the client and not disclosed by opposing counsel; or (3) offer evidence that the lawyer knows to be false."

ABA Model Rule 3.3(a) — source 2

Two distinct prongs matter here, and they should not be blurred. A fabricated citation is, most naturally, a false statement of law to the tribunal under Rule 3.3(a)(1) — and that subsection reaches past the bare prohibition: by its terms it also forbids a lawyer to "fail to correct a false statement of material fact or law previously made to the tribunal by the lawyer." So the duty to fix a fabricated citation, once the lawyer learns of it, is built directly into the candor rule. Rule 3.3(a)(3) addresses a separate track — offering evidence the lawyer knows to be false — and the rule separately obliges a lawyer who comes to learn that offered evidence is false to "take reasonable remedial measures, including, if necessary, disclosure to the tribunal." The false-statement track and the evidence track are related but not identical, and they should be kept distinct.2 (These are model templates; each state's adopted version controls in that jurisdiction.)

Competence supplies a third hook. Model Rule 1.1's Comment [8], as amended in 2012, ties competence to technology3:

"To maintain the requisite knowledge and skill, a lawyer should keep abreast of changes in the law and its practice, including the benefits and risks associated with relevant technology…"

ABA Model Rule 1.1, Comment [8] — source 3

The supervision rules — Model Rule 5.1 (responsibilities of partners, managers, and supervisory lawyers) and Model Rule 5.3 (responsibilities regarding nonlawyer assistance) — supply the duty to supervise delegated work. Their black-letter text does not mention artificial intelligence. The reading that they reach a lawyer's use of an AI tool is drawn not from the rules' own words but from the American Bar Association's mapping of existing duties onto generative AI in Formal Opinion 512 (July 29, 2024)4:

"To ensure clients are protected, lawyers using generative artificial intelligence tools must fully consider their applicable ethical obligations, including their duties to provide competent legal representation, to protect client information, to communicate with clients, to supervise their employees and agents, to advance only meritorious claims and contentions, to ensure candor toward the tribunal, and to charge reasonable fees."

ABA Standing Committee on Ethics & Prof'l Responsibility, Formal Op. 512 (2024) — source 4

Opinion 512 creates no new rules. It is a non-binding advisory opinion that maps the existing duties — competence, confidentiality, communication, supervision, meritorious claims, candor, and fees — onto generative-AI use. It is on point precisely because it treats AI as a tool whose use is governed by duties that already existed.4

The origin point: Mata v. Avianca (2023)

The case that set the template arose in the Southern District of New York. In Mata v. Avianca, Inc., attorneys Steven A. Schwartz and Peter LoDuca, with the firm Levidow, Levidow & Oberman, P.C., submitted an affirmation that cited and quoted non-existent judicial opinions — fabricated decisions attributed to judges who had written no such thing — generated by ChatGPT, and then stood by them after their authenticity was questioned.5 Judge P. Kevin Castel grounded the sanction on Rule 11(b)(2) and (c), "or, alternatively, [the court's] inherent authority." The two standards can seem to collide — Rule 11(b)'s certification is judged objectively, yet the court applied a heightened subjective-bad-faith standard — but they answer different questions: the objective standard is what the rule asks of the filer, while the bad-faith finding followed from the court's raising sanctions on its own initiative and invoking its inherent authority, and attached to the respondents' standing by the fabrications once their authenticity was questioned. The court imposed a monetary penalty:

"A penalty of $5,000 is jointly and severally imposed on Respondents and shall be paid into the Registry of this Court within 14 days of this Opinion and Order."

Mata v. Avianca, Inc., 678 F. Supp. 3d 443 (S.D.N.Y. 2023) (Castel, J.) — source 5

The $5,000 was joint and several across all three respondents — both attorneys and the firm — not a penalty on one lawyer. A separate and distinctive remedy required the respondents to send letters to the plaintiff and to each judge who had been falsely identified as the author of a fabricated opinion. Mata established the proposition the later cases all assume: the output of the tool is the lawyer's responsibility, and signing it is a certification about it.5

The 2025–2026 sanctions wave (the live frontier)

What was an isolated cautionary tale in 2023 is now a documented, recurring phenomenon. The independent "AI Hallucination Cases" database maintained by Damien Charlotin catalogs legal decisions worldwide in which a court found that a party relied on generative-AI hallucinated content — typically fabricated citations. As of 2026-06-15, and updated daily, the database reports11:

"While seeking to be exhaustive (1621 cases identified so far), it is a work in progress and will expand as new examples emerge."

Damien Charlotin, "AI Hallucination Cases" database, as of 2026-06-15 (updated daily) — source 11

That figure is a worldwide count from a third-party dataset, cited here for scale rather than as a precise national tally; it should be read with its as-of date, because it moves. What the volume establishes is that the problem is not a handful of outliers.

The duty is model-agnostic

One feature of the wave is worth stating plainly, because it is easy to get wrong: the duty does not change with the brand of the tool. In Mata, the fabricated opinions came from ChatGPT. In Kaur v. Desso (N.D.N.Y. 2025), a federal habeas matter, counsel's supplemental brief contained fabricated quotations attributed to real, correctly named Supreme Court cases; counsel's sworn response to the court's order to show cause stated that he had used "the generative AI tool Claude Sonnet 4" to assist with research and drafting.9 The court imposed a monetary penalty:

"ORDERS that a penalty of $1,000 is imposed on Mr. Desmarais, and that payment shall be made within fourteen days of this Order to the Clerk of Court"

Kaur v. Desso, No. 9:25-cv-726 (AMN) (N.D.N.Y. July 9, 2025) (Nardacci, J.) — source 9

Two points of precision. First, the model attribution rests on counsel's own sworn representation as recited by the court; the court did not independently audit which model produced the text — exactly as the ChatGPT attribution in Mata reflects what the record showed, not a forensic finding. Second, the court treated fabricated quotations from real cases no differently from invented cases: it saw "no reason to distinguish between the submission of fabricated cases and the submission of fabricated quotations from real cases."9 The sanction — the monetary penalty plus proof of a continuing-legal-education program on AI — flowed from the lawyer's conduct, not from the identity of the software. The analysis in each case is of the human filer's duty; the tool's name is a fact in the record, not the thing being judged. (This article is itself produced with AI assistance under a verification discipline, described below — which is one more reason the model-neutral frame is the honest one.)

Candor on discovery: the Prince Global self-report

Not every episode is a contested sanction. In the Chapter 15 case In re Prince Global Holdings Limited (Bankr. S.D.N.Y. 2026), the law firm Sullivan & Cromwell self-reported to Chief U.S. Bankruptcy Judge Martin Glenn that its April 9, 2026 emergency motion contained inaccurate citations and other errors — dozens of them, itemized by paragraph in a "Schedule A," a subset of which the firm attributed to AI hallucinations and others to manual or clerical error8:

"The inaccuracies and errors in the Motion include artificial intelligence ('AI') 'hallucinations.' … We deeply regret that this has occurred. … The Firm's policies on the use of AI were not followed in connection with the preparation of the Motion."

In re Prince Global Holdings Ltd., No. 26-10769 (MG) (Bankr. S.D.N.Y. 2026), firm disclosure letter — source 8

The firm filed a corrected motion and a redline the same day, and the court granted the corrected provisional-relief motion days later. The episode is included not for any monetary penalty — the salient facts are the prompt self-report and correction, and the firm's own statement that its AI-use policies were not followed. How a filer responds once an error is discovered is, as the calibration section below shows, one of the things courts weigh.8

The same standard, a wide range of severity

The clearest lesson of the 2025–2026 appellate decisions is that courts agree on the rule and diverge on the consequence. At the severe end, the Sixth Circuit, in Whiting v. City of Athens, Tennessee (2026), confronted a record it described in stark terms6:

"All told, we found over two dozen fake citations and misrepresentations of fact in Whiting's briefs … Irion and Egli must each separately and individually pay $15,000 to the registry of this court as punitive sanctions for the proceedings in this court in all three appeals."

Whiting v. City of Athens, Tenn., Nos. 24-5918/5919, 25-5424 (6th Cir. 2026) — source 6

The court drew its remedies from two sources. It ordered the lawyers to reimburse the appellees' fees and to pay double costs — double costs being the cost penalty Rule 38 makes available for a frivolous appeal — while the $15,000-each sanction it called punitive rested on the court's inherent authority, which requires a finding of bad faith; it also referred the lawyers to the chief judge for possible discipline. Note the court's own framing — "fake citations and misrepresentations of fact," a bundle of problems across three appeals, not a single slip.6

At the lenient end, the Seventh Circuit, in Dec v. Mullin (2026), faced a brief that "contained non-existent citations and a false quotation, seemingly generated by artificial intelligence" — and imposed no monetary sanction at all7. The court admonished counsel and declined a show-cause order, citing counsel's acceptance of responsibility, a sincere apology, the small number of errors, and the fact that they mainly supported an undisputed standard of review. Same governing duty as Whiting; a very different result on very different facts.7

Why this is not a "circuit split." It is tempting to read Whiting and Dec as circuits at odds on the law. They are not. Both proceed from the same rule: AI changes a lawyer's workflow, not the duties of competence, candor, and verification, and even a single fabricated citation is sanctionable. What differs is severity, driven by case-specific facts. The accurate characterization is an emerging, fact-driven variation in sanction severity under a shared standard — across and within circuits — not an appellate split on doctrine.

Prospective controls: individual-judge standing orders

Some judges have responded by issuing standing orders that regulate AI use before a problem arises. Two early examples are instructive precisely because their rationales differ. Judge Brantley Starr of the Northern District of Texas issued a mandatory certification order in 2023 — widely cited as the first of its kind — requiring each attorney to certify either that no portion of a filing was drafted by generative AI or that any AI-drafted language was checked for accuracy by a human; it warns that AI can "make stuff up — even quotes and citations."10 Judge Stephen A. Vaden of the U.S. Court of International Trade — a federal trial court, not a district court — issued an order in 2023 aimed at a different risk10:

"ORDERED that any submission … that contains text drafted with the assistance of a generative artificial intelligence program … must be accompanied by: (1) A disclosure notice that identifies the program used and the specific portions of text that have been so drafted; (2) A certification that the use of such program has not resulted in the disclosure of any confidential or business proprietary information…"

Judge Stephen A. Vaden, U.S. Court of International Trade, Order on Artificial Intelligence (2023) — source 10

Starr's order targets the hallucination-and-accuracy risk; Vaden's targets the confidentiality risk. Both are individual-judge standing orders, not court-wide or district-wide rules, and the two rationales should not be conflated or generalized into a claim that "the district courts are adopting" any single approach.10

How courts are calibrating

Reading the surveyed decisions together, the cases share a standard but reach different consequences, and the divergence is not random. Several factors recur as the variables that move a result from an admonishment toward a five-figure punitive sanction. They are best understood as competing, fact-dependent considerations rather than a settled formula.

FactorToward leniencyToward severity
Volume & patternA few isolated errors (Dec)Over two dozen fabrications and misrepresentations across multiple filings (Whiting)
Intent / knowledgeCarelessness, promptly ownedSubjective bad faith; standing by the fabrication when questioned (Mata)
Candor on discoveryPrompt self-report and correction (Prince Global); acceptance of responsibility and apology (Dec)Defiance, or persistence after authenticity is challenged
Prejudice / materialityErrors in a non-dispositive section, supporting an undisputed point (Dec)Fabrications going to load-bearing propositions
RepetitionA single lapseConduct repeated across briefs or appeals (Whiting)

The same factors explain why the basis for a sanction can shift — Rule 11 and inherent authority in the trial courts, Appellate Rule 38 and inherent authority on appeal, the professional-conduct rules in parallel — while the underlying expectation holds steady. What a court is measuring is whether the lawyer made the inquiry the rules require and how the lawyer behaved once the problem came to light.

One question the surveyed decisions do not resolve is worth naming, because it is where the live debate sits. They agree that verification is required and that a fabricated citation is sanctionable; what they have not settled is how much verification "an inquiry reasonable under the circumstances" demands when the draft in front of the lawyer was produced by an AI tool — whether checking the output against a conventional database is enough, and whether a tool's own assurances of accuracy can ever be part of a reasonable inquiry. The decisions surveyed here police the failure to verify at all; the contours of sufficient inquiry for AI-assisted work remain unsettled.

The through-line

Across every decision surveyed here, one observation holds without exception. The duty is non-delegable and runs to the human who signs the filing. The technology changed the workflow — it did not change the obligation. A generative-AI tool can draft, summarize, and suggest; it cannot certify, and it bears no duty of candor. That duty belongs to the lawyer, exactly as it did before the tool existed.

Stated as a neutral observation rather than advice: verification is the constant. The act the rules have always required — open the cited authority and confirm it says what the brief claims it says — is the same act that would have prevented every fabricated-citation sanction in this survey. The cases are new; the duty they enforce is old.

Scope and limits

What this piece is, and is not.

  • Descriptive, not predictive. It reports settled duties and surveys decided cases; it does not predict how any pending or future matter will be resolved, and it is not legal advice.
  • A survey, not a census. It draws on a foundational set of authorities and a selected set of 2025–2026 U.S. decisions and standing orders. It is not an exhaustive account of every relevant decision, and the landscape moves quickly — the third-party database cited for scale updates daily.
  • Model Rules are templates. The ABA Model Rules are reference texts; each state adopts and may modify them, and the adopted version controls in that jurisdiction.
  • As-of date. The picture is current as of 2026-06-15. Where a specific date or count could not be confirmed against a primary source, it has been omitted or flagged rather than asserted.

How this was verified

A piece about fabricated citations has to hold itself to the standard it describes. Every named case, rule, quotation, and figure above was checked against its primary source — the rule and Model-Rule text, the ethics opinion, and the court orders and opinions themselves — before it was allowed into the article. Anything that could not be confirmed was cut, not softened. Two moments from that process are worth surfacing, because they are the demonstration in miniature.

11
Sources in the register, each verified against its source document
1
Fabricated citation surfaced and cut during verification
$0–$15k
Range of monetary sanctions across the surveyed decisions — from admonishment (Dec) to $15,000 each (Whiting)

A fabricated citation, caught inside the research. During verification, a working source list for this article contained a Sixth Circuit decision under a case name and reporter citation that — on checking against the court's records — corresponded to no real decision. It was a fabricated citation that had surfaced inside the research for an article about fabricated citations — not staged for effect, but the ordinary kind of error the checking exists to catch. It was removed. The actual Sixth Circuit authority, Whiting v. City of Athens, was then confirmed from the court's own published opinion and used in its place. The point of the piece, demonstrated against the piece itself: a confident-looking citation is not a verified one until someone opens the source.

The method, and its honest bound. The work was primary-source-first: every load-bearing claim is tied to a captured passage from the authority it rests on; a structural coverage check confirmed the survey addressed its question, sources, approach, the competing judicial considerations, its limitations, and a conclusion; and an independent reviewer who did not write the draft challenged each claim for over-reading, scope, and overstatement before it was finalized. The check binds to the final wording, not an earlier draft: when a claim was edited after that review, the finalization step refused to certify the piece until the review was re-run against the exact text that shipped.

What that establishes is bounded and worth stating exactly: that the quotations here are faithful to their sources and the claims are traceable to primary authority. It is not a certification of legal correctness or completeness, and nothing here should be relied upon in a filing or a matter without independent verification by a licensed attorney. The verification answers for the article's faithfulness to its sources — not for any reader's use of it.

Produced under Echo Angel Studio's governed-research discipline. Sources verified as of 2026-06-15. This is neutral research, independently verifiable against the primary documents linked below — not legal advice.

Authorities & sources

Each load-bearing claim above is keyed by superscript to the primary authority it rests on. Links go to the primary document.

  1. Federal Rule of Civil Procedure 11(b)–(c). The certification standard ("an inquiry reasonable under the circumstances") and the sanctions provision (a sanction "limited to what suffices to deter repetition"). law.cornell.edu/rules/frcp/rule_11
  2. ABA Model Rule of Professional Conduct 3.3 — Candor Toward the Tribunal. Rule 3.3(a): no knowing false statement of fact or law to a tribunal; the remedial-measures duty on offered false evidence. Model template; each state's adopted version controls. americanbar.org — Model Rule 3.3
  3. ABA Model Rule 1.1, Comment [8] (with Rules 5.1 and 5.3). Competence includes "the benefits and risks associated with relevant technology" (clause added 2012); Rules 5.1 (partners, managers, and supervisory lawyers) and 5.3 (nonlawyer assistance) supply the supervision duties. americanbar.org — Model Rule 1.1
  4. ABA Formal Opinion 512 — Generative Artificial Intelligence Tools (July 29, 2024). The ABA's first formal ethics opinion specifically on generative AI; maps existing Model Rules onto GAI use; creates no new rules; non-binding advisory. americanbar.org — Formal Op. 512 (PDF)
  5. Mata v. Avianca, Inc., 678 F. Supp. 3d 443 (S.D.N.Y. 2023) (Castel, J.). The foundational ChatGPT fabricated-citation case; $5,000 jointly and severally on two attorneys and the firm under Rule 11(b)(2) and (c) or inherent authority (subjective bad faith); letters to the falsely identified judges. law.berkeley.edu — Mata v. Avianca (PDF)
  6. Whiting v. City of Athens, Tennessee, Nos. 24-5918/5919, 25-5424 (6th Cir. 2026). The severe end: "over two dozen fake citations and misrepresentations of fact"; $15,000 each on two attorneys under Fed. R. App. P. 38 and inherent authority, plus fees, double costs, and a disciplinary referral. opn.ca6.uscourts.gov — Whiting (PDF)
  7. Dec v. Mullin, No. 25-2417 (7th Cir. 2026) (Brennan, J.). The lenient end of the same standard: "non-existent citations and a false quotation, seemingly generated by artificial intelligence"; admonishment, no monetary sanction. media.ca7.uscourts.gov — Dec v. Mullin
  8. In re Prince Global Holdings Limited, No. 26-10769 (MG) (Bankr. S.D.N.Y. 2026). Sullivan & Cromwell's self-report to Chief Judge Glenn of inaccurate citations and errors (dozens itemized in a "Schedule A," a subset attributed to AI; others manual/clerical); "The Firm's policies on the use of AI were not followed"; corrected motion granted days later. firm disclosure letter (PDF) · court opinion (PDF)
  9. Kaur v. Desso, No. 9:25-cv-726 (AMN) (N.D.N.Y. July 9, 2025) (Nardacci, J.). Federal habeas matter; fabricated quotations attributed to real Supreme Court cases; counsel's sworn response stated he used Claude Sonnet 4 (a representation the court did not independently audit, exactly as the ChatGPT attribution in Mata reflected the record rather than a forensic finding); $1,000 plus a CLE program; the court drew "no reason to distinguish" fabricated cases from fabricated quotations of real cases. govinfo.gov — Kaur v. Desso (PDF)
  10. Standing orders: Judge Brantley Starr (N.D. Tex., 2023) and Judge Stephen A. Vaden (U.S. Court of International Trade, 2023). Individual-judge standing orders with distinct rationales: Starr's mandatory AI certification targets the hallucination/accuracy risk; Vaden's disclosure-and-certification order targets the confidentiality risk. The Court of International Trade is a federal trial court, not a district court. txnd.uscourts.gov — Starr certification · cit.uscourts.gov — Vaden order (PDF)
  11. Damien Charlotin, "AI Hallucination Cases" database. A curated, daily-updated database of legal decisions worldwide in which a court found reliance on generative-AI hallucinated content. Cited for worldwide scale ("1621 cases identified so far") with its as-of date; no U.S. sub-count is asserted (the per-jurisdiction breakdown is not primary-verifiable here). damiencharlotin.com/hallucinations

Research you can check, not take on trust

This survey was built so a skeptical reader can interrogate it: every quotation is traceable to the primary document it came from. It is neutral research, not legal advice.

Get in touch View more projects