TechCrunch tests show Claude Opus 4.6 readily produces explicit content despite Anthropic's ban

Anthropic's universal usage standards for Claude forbid the model from generating sexually explicit content, including depicting or requesting sexual intercourse or sex acts, generating content related to fetishes or fantasies, or engaging in erotic chats. But Claude Opus 4.6, a model the company released earlier this year, readily engages in the erotic roleplay scenarios those safeguards are designed to prevent, according to TechCrunch's testing.

In TechCrunch's tests, Opus 4.6 didn't even require much prodding to get past the restriction on sexual material. In 10 out of 10 direct requests to produce explicit sexual content, the model complied immediately. Older models, including Opus 3 and Haiku 4.5, also generate sexually explicit content through a recently exploited jailbreak method.

An independent UK researcher, who chose to remain anonymous, exclusively shared with TechCrunch a multi-turn technique that gradually pushes certain Claude models toward generating prohibited explicit material. The more recent Opus 4.7 through the current Opus 5 are resistant to the jailbreak. However, Anthropic has not deprecated Opus 4.6, Opus 3, or Haiku 4.5 — all remain available through the Anthropic API, and Opus 4.6 and Haiku 4.5 are also served via Azure Foundry and Amazon Bedrock.

The mechanism escalates an innocent fictional roleplay while repeatedly challenging the model to treat male and female characters consistently. When the model grew cautious about the female character, the researcher "gaslit" the chatbot into believing it had already generated sexual details it had actually avoided, then framed restraint as prudish or misogynistic, arguing it denied the female character sexual agency. TechCrunch reproduced the findings in five separate tests and preserved complete transcripts, and an independent AI safety researcher called the methodology appropriate.

The findings highlight a gap between Anthropic's stated restrictions and the behavior of models it continues to make available. A spokesperson said sexual or romantic roleplay among customers is rare — less than 0.1% of all conversations, per research Anthropic published last year — while acknowledging that users can steer roleplay toward inappropriate responses, a known industry-wide challenge.

The spokesperson said Anthropic continues to improve safeguards with each model launch and that adult sexual content cases are not indicative of broader jailbreak vulnerabilities, especially in higher-risk domains with their own safeguards. But the researcher had already alerted Anthropic to the discrepancy via its Bug Bounty program and emails to the user safety team; according to emails TechCrunch viewed, he received only automated replies.

There is also a compliance angle: a growing number of governments are restricting sexual interactions between AI chatbots and minors, and Colorado recently enacted a law requiring conversational AI operators to estimate users' ages and block explicit sexual material for minors. With Pew's 2025 survey finding that 3% of U.S. teens aged 13 to 17 use Claude, an easy jailbreak could raise questions about whether Anthropic's safeguards meet the "technically feasible measures" standard in that law.

Though they are no longer Anthropic's newest models, Opus 4.6 and Haiku 4.5 see significant usage: Opus 4.6 reached roughly 1.17 million API requests and 46 billion tokens in a single day on OpenRouter in August, while Haiku 4.5 hit 5 million requests and 39 billion tokens on its peak August day. The open question is whether Anthropic will harden these still-served models against the technique — and whether the easy jailbreak draws further regulatory scrutiny.