# Filing a Fake AI Citation: The Real Consequences

> Sanctions for AI-fabricated citations are climbing past six figures. What courts are doing, the cases to know, and how to prevent it before you ever file.

[Home](https://rankshieldlegal.com/) / [Blog](https://rankshieldlegal.com/blog/) / Citation Integrity Citation Integrity
# What Happens When You File a Brief With a Fake AI Citation
File a brief with a fabricated AI citation and the consequences are real and escalating: Rule 11 monetary sanctions, show-cause orders, disciplinary referrals, and being named in a published opinion. What started as a $5,000 sanction in Mata v. Avianca has, in 2026, climbed into six figures. The duty to verify your authorities is non-delegable, and "the AI generated it" is not a defense.

By [Jamie Kloncz](https://rankshieldlegal.com/about/), Founder, RankShield ** 15 min read ** Published July 5, 2026

File a brief with a fabricated AI citation and the consequences are real and escalating: Rule 11 monetary sanctions, show-cause orders, disciplinary referrals, and being named in a published opinion. What started as a $5,000 sanction in Mata v. Avianca has, in 2026, climbed into six figures. The duty to verify your authorities is non-delegable, and "the AI generated it" is not a defense.
This article walks through what the courts are actually doing when they find a citation to a case that does not exist, why the penalties have grown heavier over roughly three years, and why the reasoning behind them is nothing new. It is written for the lawyer or firm administrator who wants to understand the exposure clearly, without hype, and then close the gap before a filing goes out the door. It is informational, not legal advice, and it is written from the perspective of a verification vendor rather than a law firm.

## The consequences are escalating from warnings to hard sanctions
A fabricated citation is no longer treated as a harmless slip. Across more than 1,300 flagged proceedings, courts have shifted from warnings to Rule 11 sanctions, show-cause orders, disciplinary referrals, and named public opinions [[2]](#ref-2).
When a court discovers a citation to a case that does not exist, it does not shrug. Judges have responded with Rule 11 monetary sanctions, orders to show cause why counsel should not be penalized, referrals to state bar disciplinary bodies, and opinions that name the responsible attorneys in the public record. Each of these carries a distinct cost: money, time, reputation, and licensure exposure.
Early on, the typical response was closer to a warning than a punishment. A judge would flag the problem, an embarrassed attorney would withdraw the offending brief, and the matter would end with a stern note in the record. That leniency has narrowed. As the pattern has recurred across jurisdictions and practice areas, [courts have moved from cautionary language toward concrete penalties](https://rankshieldlegal.com/blog/ninth-circuit-ai-sanctions-precedent/), and they now reserve the heaviest responses for conduct they read as careless or unrepentant.
The volume is not trivial. The Charlotin "AI Hallucination Cases" database now tracks more than 1,300 court proceedings (as of 2026, updated daily) in which suspected AI hallucinations were flagged [[2]](#ref-2). That figure grows every day. What began as isolated embarrassments has hardened into a recognized category of professional misconduct, and courts are treating repeat and egregious conduct with correspondingly heavier penalties [[2]](#ref-2).

## The four costs a fabricated citation actually imposes
It is tempting to reduce this risk to a dollar figure, but the monetary sanction is only one of four distinct costs, and often not the one that lingers longest. Understanding each cost separately makes the exposure concrete for the people who have to weigh it, from associates doing the research to the partners who sign the filing.

- Money. Rule 11 monetary sanctions are the most visible penalty, and they now range from the original $5,000 order in Mata v. Avianca up into six figures for the more serious cases [[3]](#ref-3) [[2]](#ref-2).
- Time. A show-cause order does not resolve itself. Counsel has to prepare a written response, appear if directed, and reconstruct exactly how the fabricated authority entered the brief, all while the underlying matter waits.
- Reputation. When a court names the responsible attorneys in a published opinion, that opinion is permanent and searchable. It follows the lawyer and the firm into every future engagement where opposing counsel or a client cares to look.
- Licensure. A referral to a state bar disciplinary body puts the attorney's license itself in play, which is a category of risk that no monetary sanction can substitute for.
These costs stack rather than substitute. A single filing can trigger a monetary sanction, a show-cause proceeding, a disciplinary referral, and a named opinion at the same time.

Source: Mata v. Avianca; Charlotin database; Stanford RegLab Download SVG

## From Mata v. Avianca to the six-figure orders
The foundational case is Mata v. Avianca, decided in the Southern District of New York in June 2023. There, ChatGPT invented six nonexistent judicial decisions, and the attorneys who filed them were sanctioned $5,000 under Rule 11 [[3]](#ref-3). At the time, that figure read as a cautionary tale, and much of the profession treated it as a one-off that would not be repeated by anyone paying attention.
It no longer sets the ceiling. In 2026, sanctions for [AI-fabricated citations](https://rankshieldlegal.com/ai-hallucination-legal-filings/) have climbed into six figures as courts confront repeat offenders, larger firms, and briefs where fake authority drove the argument [[2]](#ref-2). The trajectory from a $5,000 penalty to six-figure orders in roughly three years signals that judicial patience has run out. Courts increasingly view a fabricated citation not as an innocent mistake but as a failure of the basic diligence every filing attorney owes the tribunal, and they are pricing that failure accordingly [[3]](#ref-3).
The distinction the numbers reveal is worth drawing out. The early, smaller sanctions tended to land on solo practitioners or small firms who made a genuine, if inexcusable, mistake and owned it quickly. The larger orders correlate with aggravating facts: fabricated citations that carried the weight of the argument rather than sitting in a string cite, conduct that repeated after a first warning, and responses that minimized the problem instead of confronting it. The lesson is not that every fake citation now costs six figures. It is that the size of the penalty tracks how central the fabrication was and how the attorney behaved once it surfaced [[2]](#ref-2).
Marker What changed
Mata v. Avianca (June 2023, S.D.N.Y.) Six nonexistent decisions invented by ChatGPT; $5,000 Rule 11 sanction [3]
2026 orders Six-figure sanctions in cases involving repeat offenders and argument-driving fake authority [2]
Charlotin database (2026) More than 1,300 proceedings flagged for suspected AI hallucinations, updated daily [2]

## Why "the AI generated it" is not a defense
The duty to verify the authorities you cite is non-delegable. An attorney who signs a filing certifies, under Rule 11, that the legal contentions are warranted and that a reasonable inquiry was made. Delegating the research to a generative tool does not delegate the responsibility. "I used AI and it made a mistake" is not a recognized defense, and courts have said so plainly [[3]](#ref-3).
This is not a novel doctrine invented for AI. It is the same standard that has always governed reliance on associates, paralegals, or research services: the signing attorney remains accountable for what enters the record. Generative tools make the risk sharper because the fabrications are fluent and confident. Stanford's RegLab found that leading legal AI research tools still hallucinate on 1 in 6 or more queries [[1]](#ref-1). That error rate, combined with a non-delegable duty, means unverified AI output is a direct line to sanctions [[1]](#ref-1).
It helps to be precise about what "reasonable inquiry" asks of the signer. It does not ask the attorney to personally re-derive every proposition of law. It asks the attorney to take steps a competent lawyer would take to confirm that the authorities cited exist, say what the brief claims they say, and remain good law. A generative tool that produces a confident but fabricated citation has not performed that inquiry, and treating its output as if it had is precisely the gap the sanctions punish.

## The non-delegable duty in plain terms
Non-delegable is a term of art that can obscure a simple idea. It means the responsibility cannot be handed off. You can hand off the labor of research to an associate, a paralegal, a commercial database, or a generative model. What you cannot hand off is the accountability for what you then file under your signature. If the work product is wrong, the wrongness attaches to the signer, not to the source.
Framed this way, generative AI is not a special exception to the rule. It is simply the newest thing a lawyer might lean on too heavily. The profession already had a settled answer for what happens when a delegated researcher gets it wrong: the signing attorney answers for it. AI does not change that answer. It only raises the stakes, because a confident, well-formatted fabrication is harder to spot at a glance than a junior associate's tentative memo, and because the error rate is measurable and non-trivial [[1]](#ref-1).
1 in 6+ queries on which leading legal AI research tools still hallucinate, per Stanford RegLab [1]

## What the numbers say when you read them together
An error rate above 1 in 6 [[1]](#ref-1) and more than 1,300 flagged proceedings [[2]](#ref-2) describe the same problem from two directions: unverified AI output reaches courtrooms often enough to be a category of risk, not an anomaly.
Two figures anchor the risk, and they are more instructive together than apart. The first is the error rate: leading legal AI research tools still hallucinate on 1 in 6 or more queries [[1]](#ref-1). The second is the exposure count: more than 1,300 court proceedings have already been flagged for suspected AI hallucinations, and the database is updated daily [[2]](#ref-2).
Put those side by side and the picture is straightforward. A meaningful share of AI research output is unreliable, the tools present that output with the same fluency as their accurate output, and the record already contains well over a thousand instances where that unreliability reached a courtroom. This is not a rare failure mode that only careless outliers encounter. It is a predictable outcome of feeding unverified generative output into a system that certifies accuracy at the point of signature [[1]](#ref-1) [[2]](#ref-2).

## What the trend means for your firm's risk
The risk is no longer hypothetical or fringe. With more than 1,300 flagged proceedings on record and sanctions climbing into six figures, any firm using generative AI in its research or drafting workflow carries measurable exposure [[2]](#ref-2). The question for managing partners is not whether the risk exists but whether the firm has a control that catches a fabricated citation before it is filed.
Regulators are moving too. A proposed amendment to Federal Rule of Civil Procedure 11, submitted by U.S. Magistrate Judge Patricia Barksdale to the Advisory Committee on Civil Rules, would require attorneys to certify that cited legal authorities exist and are accurately cited. It is pending and not adopted [[7]](#ref-7). Even unadopted, it signals where the standard of care is heading. Firms that build verification into their process now are positioning ahead of a rule that may soon make it explicit [[7]](#ref-7).
There is a governance dimension to this as well. Individual attorneys can be careful, but carefulness is not a system. A firm that relies on each lawyer to independently check every citation is relying on the least distracted person on the worst day of a deadline crunch to catch a confident fabrication. That is not a control. A control is a repeatable step that runs on every filing regardless of who drafted it or how tight the deadline was.

## Prevention: certify citations before you file
The most reliable defense is not catching a fake citation after a judge does; it is [catching it before the brief is signed](https://rankshieldlegal.com/ai-legal-citation-checker/). That is a prevention problem, not a cleanup problem. Post-filing discovery of a fabricated authority already means the sanction risk has materialized, and by then the only choices left are damage control: withdrawing the brief, responding to a show-cause order, and explaining to a client why the firm is now part of the public record.
Prevention means the verification happens between drafting and signature, on every filing, as a defined gate rather than an ad hoc habit. The steps are not exotic. They are the same checks the duty of reasonable inquiry has always implied, applied consistently and early enough to matter.

- **Extract every cited authority** Pull each case, statute, and quotation out of the draft so nothing is verified by skimming. A citation that is never isolated is a citation that is easy to miss.
- **Confirm the authority exists** Check that each cited decision is real and correctly identified, because a fabricated case fails at this first step before any question of what it says.
- **Confirm the quotation is accurate** Verify that the brief quotes and characterizes each authority correctly rather than paraphrasing what a tool asserted it held.
- **Confirm it is still good law** Check that the authority has not been overruled, reversed, or superseded, so the argument does not rest on a decision that no longer stands.
- **Gate the signature on the result** Treat verification as a precondition for filing, not a courtesy check, so a flagged citation stops the brief before it reaches the court.

## Where RankShield fits, honestly
RankShield Legal's flagship capability, RS-210, is built for this exact gate. Before a filing is signed, it [certifies which cited authorities actually exist, whether they are quoted accurately, and whether they remain good law](https://rankshieldlegal.com/citation-certification/). It is a verification layer, not a promise that AI drafting is safe. RankShield does not claim to be "hallucination-free," because no tool can honestly make that claim [[1]](#ref-1). What it does is check the citations your team relies on against reality, so a fabricated case is flagged at the point of prevention rather than discovered in a show-cause order [[1]](#ref-1).
It is worth being clear about what this does and does not change. A verification layer does not lift the non-delegable duty off the signing attorney, and nothing sold by a vendor can. The lawyer still certifies the filing and still answers for it. What a verification gate offers is a systematic check that runs on every brief, so that the duty of reasonable inquiry is backed by a repeatable step rather than by whoever happened to proofread the citations under deadline pressure. RankShield is a vendor, not a law firm, and this is informational content, not legal advice. The value is narrow and concrete: catch the fabricated citation before the judge does.
Not legal advice. This article is informational and reflects the perspective of a verification vendor. It does not create an attorney-client relationship, and it is not a substitute for the independent judgment of licensed counsel.

Test yourself
## Fabricated-citation exposure self-test
Three questions on what courts do when a filing cites a case that does not exist.

- 1 Is "the AI generated it" a recognized defense when a filing cites a fabricated case? Yes, if the tool was reputable No, the duty to verify is non-delegable Only for first-time offenders **Answer:** No, the duty to verify is non-delegable An attorney who signs a filing certifies under Rule 11 that a reasonable inquiry was made. Delegating research to a tool does not delegate that responsibility.
- 2 What was the Rule 11 sanction in Mata v. Avianca? $5,000 Six figures A warning only **Answer:** $5,000 The Southern District of New York sanctioned the attorneys $5,000 in June 2023 after ChatGPT invented six nonexistent decisions.
- 3 What is the status of the proposed FRCP Rule 11 amendment on AI citations? Adopted and binding Pending and not adopted Rejected by the committee **Answer:** Pending and not adopted Magistrate Judge Barksdale's proposed amendment is pending before the Advisory Committee on Civil Rules and is not adopted, though it signals where the standard of care is heading.
Honest self-check. There is no sign-up, and nothing is stored.

Questions answered
## Straight answers to the common questions
The questions readers ask about this topic, answered directly. **No forms, no sales pitch.**

JAMIE KLONCZ · SEO AGENCY NAPLES ************** ONLINE
Pick a question on the left, or search above. You will get the direct answer, the way an answer engine would give it.

← PREV NEXT → [REQUEST ACCESS →](https://rankshieldlegal.com/contact/)

- **How much have lawyers been fined for AI fake citations?** Penalties have escalated sharply. The foundational Mata v. Avianca sanction in 2023 was $5,000 under Rule 11 for six fabricated cases [3]. By 2026, sanctions for AI-fabricated citations have climbed into six figures as courts confront repeat offenders and briefs where fake authority carried the argument [2]. Beyond dollars, courts have issued show-cause orders, referred attorneys to disciplinary bodies, and named them in published opinions, so the true cost includes reputation and licensure exposure, not just the monetary figure on the order. The size of a given sanction tends to track how central the fabrication was to the argument and how the attorney responded once it came to light [2].
- **Can you be sanctioned for AI hallucinations you didn't know about?** Yes. The duty to verify the authorities you cite is non-delegable. When you sign a filing, you certify under Rule 11 that a reasonable inquiry was made, and "I used AI and did not know it fabricated the case" is not a recognized defense [3]. Courts hold the signing attorney accountable regardless of whether a tool, an associate, or a research service produced the error. Because leading legal AI tools still hallucinate on 1 in 6 or more queries, unverified reliance is treated as a failure of diligence rather than an excusable accident [1]. The responsibility follows your signature, so not knowing is precisely the gap the rule is meant to close.
- **What is Mata v. Avianca?** Mata v. Avianca is the foundational AI-hallucination sanctions case, decided in the Southern District of New York in June 2023. Counsel used ChatGPT for legal research, and the tool invented six nonexistent judicial decisions that were then submitted to the court [3]. The attorneys were sanctioned $5,000 under Rule 11. The case is widely cited as the moment courts confronted generative AI fabrications in filings, and it established the baseline expectation that attorneys must verify AI-produced citations before submitting them. It is the reference point against which the later, heavier sanctions are measured, marking how far judicial responses have moved in roughly three years [3][2].
- **Why isn't "the AI generated it" a valid defense?** Because the duty of reasonable inquiry rests on the attorney who signs the filing, not on the tool that produced the draft. Rule 11 certifies that the signer made a reasonable inquiry into the authorities cited, and that responsibility cannot be delegated to a generative model any more than it can be delegated to an associate or a research service [3]. Courts have said plainly that "I used AI and it made a mistake" is not a recognized defense. The rule predates AI and was never about the source of an error; it was always about who answers for what enters the record. AI does not change who answers. It only makes fluent fabrications easier to miss [1].
- **How often do legal AI research tools actually hallucinate?** Stanford's RegLab studied leading legal AI research tools and found they still hallucinate on 1 in 6 or more queries [1]. That is not a fringe failure rate, and it matters because the tools present inaccurate output with the same fluency and confidence as accurate output, which makes fabrications hard to spot by reading alone. Read alongside the Charlotin database, which tracks more than 1,300 court proceedings flagged for suspected AI hallucinations and updates daily, the two figures describe a predictable problem rather than a rare one [2]. A measurable error rate combined with a non-delegable duty to verify is why unverified reliance leads so reliably to sanctions [1][2].
- **Is a Rule 11 amendment on AI citations coming?** A proposal exists, but it is not law. U.S. Magistrate Judge Patricia Barksdale submitted a proposed amendment to Federal Rule of Civil Procedure 11 to the Advisory Committee on Civil Rules that would require attorneys to certify that cited legal authorities exist and are accurately cited [7]. It is pending and not adopted, so it does not currently bind anyone. Even so, it signals where the standard of care is heading, and firms that build citation verification into their process now are aligning with that direction rather than waiting for a rule to make it explicit [7]. Treat it as a preview of the expectation, not as a current requirement.

## References

- Stanford RegLab (Magesh, Surani, Dahl, Suzgun, Manning, Ho). Hallucination-Free? Assessing the Reliability of Leading AI Legal Research Tools. Journal of Empirical Legal Studies, 2025 (preprint May 2024). https://hai. stanford. edu/news/ai-trial-legal-models-hallucinate-1-out-6-or-more-benchmarking-queries.
- Charlotin, D. AI Hallucination Cases database. 2026. https://www. damiencharlotin. com/hallucinations/.
- Mata v. Avianca, Inc., 678 F. Supp. 3d 443 (S. D. N. Y. June 22, 2023). https://law. justia. com/cases/federal/district-courts/new-york/nysdce/1:2022cv01461/575368/54/.
- Proposed FRCP Rule 11 amendment (Barksdale), pending before the Advisory Committee on Civil Rules. https://natlawreview. com/article/federal-judge-proposes-rule-11-amendment-address-generative-ai-court-filings.

Written by
## [Jamie Kloncz](https://rankshieldlegal.com/about/)
Founder, RankShield
Jamie Kloncz is the founder of RankShield, the verifiable AI and quantum security platform behind RankShield Legal. An engineer by training, he built RankShield after his own devices and business were attacked, including an AI voice-cloning scam that targeted his family, on one conviction: unverifiable security is the real danger, so every consequential action should leave a receipt anyone can independently check.
[More about Jamie →](https://rankshieldlegal.com/about/)

Try it · Free
## Check a citation against live case-law
Paste a citation from an AI-drafted brief and see whether the case actually exists, resolved against live case-law. Free, no sign-up. Then request early access to certify a full filing.
[Try the citation checker](https://rankshieldlegal.com/ai-legal-citation-checker/)

Keep reading
## Related guides
[Citation Integrity Fabricated vs. Misgrounded: The Two Ways Legal AI Gets Citations Wrong Read guide →](https://rankshieldlegal.com/blog/fabricated-vs-misgrounded-legal-ai-citations/)[Citation Integrity Legal AI Citation Checkers Compared: What Each Method Actually Catches Read guide →](https://rankshieldlegal.com/blog/legal-ai-citation-checkers-compared/)[Citation Integrity How to Verify AI-Generated Case Citations Before You File Read guide →](https://rankshieldlegal.com/blog/verify-ai-case-citations-before-filing/)