Good-Faith Reliance Saves Broad Provider Email Warrants; Government Review Permitted When Coextensive with a Provider’s CSAM Hash Search

Case: United States v. Gregory Allen Williamson (11th Cir. June 30, 2026) (per curiam) (not for publication)
Core topics: Fourth Amendment; private search doctrine; electronic service provider (ESP) CSAM scanning; NCMEC CyberTipline; warrant particularity; Leon good-faith; Franks challenges

1. Introduction

This appeal arose from a child-exploitation investigation triggered by Yahoo’s automated hash-matching detection of child sexual abuse material (“CSAM”) in an email account, followed by Yahoo’s human moderation review and a CyberTipline report to the National Center for Missing and Endangered Children (“NCMEC”). Law enforcement then (1) reviewed the reported files, (2) obtained a warrant for the Yahoo account, and (3) obtained and executed a residential warrant, uncovering extensive CSAM and evidence linking the defendant, Gregory Allen Williamson, to the account and the production/distribution conduct.

Williamson’s appeal centered on suppression. He argued: (a) Yahoo and NCMEC functioned as government agents when reviewing his account; (b) law enforcement exceeded the scope of any private search; (c) the Yahoo warrant violated the Fourth Amendment’s particularity requirement and was not saved by the good-faith exception; and (d) the residential warrant was infected by reckless misrepresentations/omissions requiring relief under Franks v. Delaware.

2. Summary of the Opinion

The Eleventh Circuit affirmed. The court held:

  • Yahoo was not a government agent when it scanned for CSAM and performed human review; statutory reporting duties under 18 U.S.C. § 2258A did not convert Yahoo’s voluntary scanning into state action.
  • The court did not decide whether NCMEC is a government actor, because—even assuming it were—NCMEC’s review did not exceed the scope of Yahoo’s private search.
  • Detective Keller’s review of the seven files did not exceed the scope of Yahoo’s search.
  • Even if the Yahoo warrant was broad, the Leon good-faith exception applied; the warrant was not so facially deficient that officers could not reasonably rely on it.
  • The residential warrant survived Franks: Keller’s mistake describing NCMEC labels (“CP (Unconfirmed)” vs. “Child Pornography”) and alleged omission about login status were not material to probable cause.

3. Analysis

3.1. Precedents Cited

A. Private search doctrine and “government agent” analysis

  • United States v. Jacobsen, 466 U.S. 109 (1984): The doctrinal anchor. The court reiterated that the Fourth Amendment does not apply to searches by private individuals/entities not acting as government agents, and that government review is assessed by whether it exceeds the scope of the private search. The panel used Jacobsen to frame both the Yahoo question (state actor or not) and the scope question (coextensiveness).
  • United States v. Steiger, 318 F.3d 1039 (11th Cir. 2003): Provided the Eleventh Circuit’s two-factor test for when a private actor becomes a government agent: (1) government knowledge/acquiescence in the intrusive conduct, and (2) the private actor’s purpose (assisting law enforcement vs. furthering its own ends). The panel treated Steiger as the controlling test and rejected importing § 1983 state-action doctrine.
  • United States v. Ford, 765 F.2d 1088 (11th Cir. 1985): Added the consideration whether the government “openly encouraged or cooperated in the search.” The panel used it to underscore the absence of government instigation or collaboration with Yahoo’s scanning/review.
  • United States v. Simpson, 904 F.2d 607 (11th Cir. 1990): Clarified that the relevant inquiry is not general awareness that a carrier/provider conducts searches, but whether the government knew of and acquiesced in the particular search challenged. The panel used Simpson to rebut Williamson’s argument that statutory reporting obligations imply government knowledge of Yahoo’s specific search.
  • United States v. Young, 350 F.3d 1302 (11th Cir. 2003): Reaffirmed that government agents may replicate a private search without a warrant if they remain within its parameters. The panel relied on Young to validate Detective Keller’s review of the same files Yahoo flagged and reviewed.
  • United States v. Castaneda, 997 F.3d 1318 (11th Cir. 2021): Cited for two related propositions: (1) law enforcement may use information from a private party even if unlawfully obtained by that party, and (2) private motives (including self-interest) can defeat “government agent” status. The panel used Castaneda to emphasize that Yahoo’s non-profit motive or lack of direct profit does not transform its scanning into government action.
  • United States v. Henry, 447 U.S. 264 (1980): Raised by Williamson by analogy (confidential informant theory). The panel distinguished it as a Sixth Amendment jailhouse-informant case not addressing attribution of a provider’s search to the government under the Fourth Amendment.
  • Washington v. Veterans of Foreign Wars of U.S., 196 F. App'x 777 (11th Cir. 2006) (unpublished): Mentioned to reject Williamson’s attempt to import § 1983 “state action” tests; the panel stated Steiger governs the Fourth Amendment agent inquiry.

B. Digital hashing and provider detection context

  • United States v. Sotelo, 130 F.4th 1229 (11th Cir. 2025): Quoted for an explanation of hash values as “digital fingerprints” and how matching permits identification of known CSAM without opening the file. The panel used Sotelo to contextualize Yahoo’s detection process.

C. Warrant particularity, overbreadth, and exclusionary-rule limits

  • United States v. Khanani, 502 F.3d 1281 (11th Cir. 2007): Cited for the purpose of the particularity requirement—preventing general exploratory searches. The panel used it to frame Williamson’s overbreadth attack on the Yahoo warrant.
  • United States v. Travers, 233 F.3d 1327 (11th Cir. 2000): Recognized that evidence seized under a warrant violating the particularity requirement may be suppressed.
  • Herring v. United States, 555 U.S. 135 (2009): Cited to stress that exclusion is reserved for sufficiently culpable police conduct where deterrence benefits outweigh costs; exclusion is aimed at deliberate, reckless, grossly negligent, or systemic negligence.
  • United States v. Leon, 468 U.S. 897 (1984): The central good-faith doctrine. The panel walked through Leon’s four situations where good faith does not apply and concluded none were present as to the Yahoo warrant.
  • United States v. Morales, 987 F.3d 966 (11th Cir. 2021): Used to emphasize that magistrates determine probable cause and warrant form, and to structure the analytic step of whether an officer’s reliance was reasonable once no Leon exception applies.
  • United States v. Martin, 297 F.3d 1308 (11th Cir. 2002): Cited for de novo review of good-faith applicability and for describing when a warrant is so facially deficient that officers cannot presume validity.
  • United States v. Robinson, 336 F.3d 1293 (11th Cir. 2003): Cited for allocation of the burden (government bears it) and the proposition that the government may meet it by reference to facts in the affidavit.
  • United States v. Blake, 868 F.3d 960 (11th Cir. 2017): The closest analog. The panel used Blake to (a) compare narrower email warrants to broader social-media warrants and (b) justify resolving the case on good-faith grounds even if the warrant’s breadth raised particularity concerns.
  • United States v. McCall, 84 F.4th 1317 (11th Cir. 2023): Reinforced that even warrants lacking temporal limitations and seeking extensive account data can still fall under good faith; also supplied the “all but the most unusual circumstances” principle that officers may rely on court orders.

D. Franks challenges to warrant affidavits

  • Franks v. Delaware, 438 U.S. 154 (1978): The governing framework for challenging affidavit veracity. The panel applied the “materiality” focus: even if there were errors, the remaining (and corrected) affidavit still established probable cause, defeating entitlement to a Franks hearing and suppression.
  • United States v. Barsoum, 763 F.3d 1321 (11th Cir. 2014): Extended Franks to intentional or reckless omissions; the panel used it to address Williamson’s omission theory and reject it as immaterial.

E. Exclusionary rule framing

  • Murray v. United States, 487 U.S. 533 (1988): Cited for the basic statement that the exclusionary rule prohibits use of evidence seized during or as a result of unlawful searches; the panel ultimately did not need extended exclusionary-rule analysis for the residential search because it found the warrant constitutional.

F. Standards of review

  • United States v. Zapata, 180 F.3d 1237 (11th Cir. 1999): Mixed question standard for suppression rulings (facts for clear error; law de novo).
  • United States v. Bervaldi, 226 F.3d 1256 (11th Cir. 2000): Facts viewed in light most favorable to prevailing party (government).

3.2. Legal Reasoning

A. Yahoo as a private actor despite statutory reporting duties

The opinion’s first pillar is the private-search and agency analysis under Steiger. Even though 18 U.S.C. § 2258A imposes mandatory reporting once a provider has “actual knowledge” of apparent violations, the panel emphasized two limiting features:

  • No statutory duty to proactively search: the reporting duty is triggered by actual knowledge; the statute does not compel scanning.
  • No government instigation of this specific search: the record lacked evidence that government officials directed, encouraged, or cooperated in Yahoo’s review of Williamson’s account.

On purpose/motivation, the panel credited evidence that Yahoo scans to protect users and maintain platform safety—an independent business interest. The court treated that independent purpose as defeating “government agent” status even if cooperation with law enforcement is a predictable consequence of compliance and reporting.

B. NCMEC: the court avoids the state-actor issue via scope

Williamson urged that NCMEC’s federal funding and CyberTipline role make it a government actor. The Eleventh Circuit sidestepped the constitutional classification question because the controlling inquiry under Jacobsen was scope: Yahoo attested it viewed the files and had already reviewed the seven images; NCMEC reviewed six of those same files. Therefore, even if NCMEC were treated as governmental, it did not exceed Yahoo’s private-search parameters.

Key move: constitutional avoidance through the private-search “scope” limitation—if the government (or assumed government actor) stays coextensive with the private search, there is no additional Fourth Amendment intrusion to suppress.

C. Law enforcement review: evidentiary sufficiency without identifying the exact moderator

Williamson argued the government could not prove scope because it did not call the specific Yahoo/NCMEC reviewers or identify which moderator viewed which file. The panel rejected any categorical “named reviewer” requirement. It deemed sufficient: (1) testimony describing Yahoo’s moderation process (human review before reporting), (2) Yahoo’s report affirmation that it viewed each file, and (3) Keller’s testimony that he only reviewed the seven reported images before seeking warrants.

D. Yahoo warrant breadth vs. good faith

The Yahoo warrant sought wide categories (all emails, media files, calendars/contacts, search history). The panel acknowledged the breadth and compared it to Blake—narrower email warrants on one end, expansive social-media warrants on the other. Yet the court followed Blake and McCall to resolve the suppression issue through Leon good faith:

  • The warrant identified the account to be searched and the categories to be seized; it was not “so facially deficient” that officers could not presume it valid (Leon; Martin).
  • No showing that the judge was misled, abandoned the judicial role, or that probable cause was wholly lacking.
  • Under McCall, reliance on a court order is objectively reasonable absent unusual circumstances—none appeared here.

Notably, the panel did not definitively bless the warrant’s breadth as “particular enough”; it held suppression unavailable because the good-faith exception “saves the fruits” even if particularity were debatable.

E. Residential warrant: immaterial label error and immaterial omission

On the residential warrant, the panel applied Franks and Barsoum with a strong materiality focus. It assumed arguendo there was an error (misstating NCMEC “CP (Unconfirmed)” as “Child Pornography”) but held probable cause remained because:

  • The affidavit still included at least one image categorized as “apparent child pornography” and
  • Contained graphic descriptive detail of illegal CSAM in multiple files independent of NCMEC’s labels.

The asserted omission—uncertainty whether the account was logged in on September 8, 2020—was likewise immaterial because the affidavit already disclosed the last recorded login was September 5, 2020, and adding “we don’t know the September 8 login status” would not negate probable cause.

3.3. Impact

A. Practical reinforcement for CSAM-tip pipelines

The decision strengthens (at least persuasively, given its non-publication status) the operational legality of the common ESP→NCMEC→law-enforcement pipeline:

  • Providers remain private actors when they voluntarily scan and then comply with § 2258A reporting after obtaining “actual knowledge.”
  • Suppression attacks aimed at NCMEC’s quasi-public role may fail where NCMEC’s actions do not exceed the provider’s review, allowing courts to avoid deciding the harder NCMEC state-actor question.

B. Warrant drafting and litigation consequences

  • Particularity challenges may be channeled into good-faith disputes: even broad account warrants can be upheld via Leon absent glaring facial defects or officer misconduct.
  • Affidavit “label” mistakes may not be material when the affidavit independently describes the contraband with specificity; defendants will need to show that correcting the label would actually defeat probable cause, not merely improve accuracy.

C. Future pressure points

The opinion leaves open issues likely to recur:

  • NCMEC’s constitutional status (government actor or not) remains unresolved here, encouraging future litigants to focus on cases where NCMEC (or law enforcement) arguably viewed more than the provider did.
  • Overbreadth in cloud warrants: while good faith continues to rescue broad warrants, repeated reliance on Leon may incentivize litigants to attack systemic practices (to fit within Herring’s “recurring or systemic negligence” language) rather than isolated overbreadth.

4. Complex Concepts Simplified

  • Hash matching (CSAM detection): A “hash” is a unique digital fingerprint of a file. If an attachment’s hash matches a known CSAM hash, the provider can identify it as a duplicate without opening it (as described in United States v. Sotelo).
  • Private search doctrine: If a private party searches something on its own, the government may generally look at what the private party already exposed without a warrant—so long as the government does not go beyond what the private party already searched (United States v. Jacobsen; United States v. Young).
  • Government “agent” test: A private party becomes a government agent for Fourth Amendment purposes when the government is sufficiently involved (knowledge/acquiescence) and the private party’s purpose is to help law enforcement rather than its own interests (United States v. Steiger).
  • Particularity requirement: A warrant must describe what is to be searched and seized with enough specificity to prevent a general rummaging (United States v. Khanani).
  • Good-faith exception (Leon): Even if a warrant is flawed, evidence often won’t be suppressed if officers reasonably relied on a judge-issued warrant and none of the four Leon disqualifiers applies.
  • Franks hearing: A procedure to challenge a warrant affidavit’s truthfulness. Relief requires showing intentional/reckless falsity or omission and that the corrected affidavit would lack probable cause (Franks v. Delaware; United States v. Barsoum).
  • NCMEC labels (“Apparent Child Pornography” vs. “CP (Unconfirmed)”): These are internal categorizations reflecting confidence about whether the file meets the federal definition and whether the depicted subject’s age is clear; the court treated the labels as less important than the affidavit’s underlying descriptions and at least one clearly qualifying file.

5. Conclusion

The Eleventh Circuit’s decision in United States v. Gregory Allen Williamson consolidates three suppression-resistant themes in CSAM investigations: (1) ESP CSAM scanning and moderation—followed by § 2258A reporting—does not, without more, convert the provider into a government agent; (2) courts may avoid deciding whether NCMEC is a government actor when NCMEC’s review is coextensive with the provider’s private search; and (3) even broad account warrants may survive suppression via Leon good faith, while Franks attacks fail absent materiality—i.e., absent a showing that correcting the misstatement or adding the omitted fact would negate probable cause.

Note on precedential status: The opinion is marked “NOT FOR PUBLICATION.” Its reasoning may still be cited for persuasive value subject to applicable rules, but it does not carry the same precedential force as a published Eleventh Circuit opinion.