Online Grooming Warning Signs

A UK guide for parents, carers and safeguarding professionals

Online grooming can begin with something that looks harmless – a new friend request, a friendly message in a game lobby, or a supportive DM after a young person shares that they are feeling low. However, the aim is often the same: to build trust, create secrecy and gain control so the child can be exploited. In the UK, grooming can involve adults and sometimes other young people, and it can escalate fast, especially when contact shifts onto encrypted messaging or private chat features.

This guide is designed to be practical and easy to use. It focuses on early warning signs, the common pathway grooming can take across apps and platforms, and the steps to take immediately if you suspect a child is being targeted. It also covers ‘sextortion’ (financially motivated sexual extortion), which has grown into a major online threat. For UK reporting, you will see clear routes including CEOP reporting, your child’s school or setting, and the police via 999 or 101.

Spotting the Pattern: Online Grooming Warning Signs

It is normal for children and teenagers to want privacy online. It is also normal for them to test identities, friendships and boundaries as they grow. The challenge is recognising when that ‘normal privacy’ shifts into ‘fear-based secrecy’ caused by manipulation – and when a pattern begins to form.

Online grooming warning signs tend to show up in three places:

• Patterns of contact – who they are speaking to, how often and how private it is.
• Changes in the child – mood, sleep, confidence, anger, anxiety, withdrawal.
• Signs of control – secrecy rules, isolation, threats, pressure for images, or money demands.

It helps to remember one simple safeguarding truth: grooming is a process. You are rarely trying to spot a single ‘smoking gun’ message. Instead, you are watching how the overall picture changes over time.

If you only take one idea from this guide, make it this: act on gut concern plus patterns, not on certainty. You do not need proof to seek advice, report to safeguarding leads, or submit a CEOP report. Early action can prevent escalation.

What Is Online Grooming?

Online grooming is a process where someone builds a relationship with a child online to manipulate them into doing something that benefits the groomer and harms the child. That harm may be sexual, emotional, financial or all three at once. Grooming is not defined by a single message or one app. It is defined by the pattern: attention, trust, isolation and control.

In UK safeguarding terms, grooming is a form of child sexual exploitation (CSE) when the goal is sexual contact, sexual images, sexual acts, or exploitation for other people’s sexual gratification. It can also overlap with criminal exploitation, where a young person is pressured to do tasks, share accounts or move money. It can happen in DMs, comments, group chats, live streams and in-game voice chat.

A key point for adults is that grooming often looks like ‘friendship’ from the outside. Young people might describe it as:

• “They get me.”
• “They actually listen.”
• “They’re the only one who understands.”
• “I can trust them more than people in real life.”

That is why early signs are usually about shifts in behaviour, secrecy and emotional pressure, rather than an obvious sexual message that appears on day one.

Grooming commonly follows a loose pattern, though the timeline varies:

• Contact – the groomer finds a way in: a follow, a friend request, a game invite, a reply to a vulnerable post.
• Connection – attention, flattery, intense conversation, mirroring interests, ‘checking in’ constantly.
• Control – secrecy, moving platforms, isolating the child, manipulating feelings, testing boundaries.
• Coercion – sexual content, threats, blackmail, demands, in-person meeting plans, or money requests.

A child can be groomed even if they never meet the person offline. Harm can include sexual images being shared, pressure to perform sexual acts on camera, emotional distress, anxiety, and fear of exposure. In sextortion, threats about sharing images are used to demand money, more images or access to accounts.

Online Grooming Warning Signs Checklist

Grooming warning signs are easiest to spot when you look for clusters, not single behaviours. One new app does not prove grooming. But several changes happening together, especially after a new online contact, should trigger a calm, curious response and closer checking.

Here is a focused checklist. Treat it like a ‘traffic light’ tool: the more boxes you tick, the more urgent it is to act.

Communication and device patterns

• Sudden intense messaging at odd hours, including late at night.
• New contacts they cannot or will not explain.
• Multiple accounts on the same platform, or ‘backup’ profiles.
• Rapid switching between apps and chat features.
• Notifications muted or messages disappearing.
• Secretive use of headphones, voice chat or whispering on calls.

Emotional and behavioural changes

• Mood swings after going online: excited then suddenly low or angry.
• Withdrawal from family time, hobbies or friends.
• Anxiety when away from their phone, or panic when it pings.
• Irritability if asked basic questions about who they are talking to.
• Changes in sleep – staying up late, tiredness or hiding devices at night.

Boundary and safety red flags

• Talking about an online ‘relationship’ that feels intense or adult-like.
• Sexualised language that is new for them.
• New secrecy rules like “Don’t tell anyone” or “You wouldn’t understand.”
• Sudden cash, gifts or top-ups with unclear origin.
• Plans to meet someone they have only met online.

Escalation signs

• Threats – explicit or implied: “I’ll ruin you”, “I’ll tell your parents.”
• Blackmail linked to images, videos or private information.
• Demands for money, gift cards, crypto or ‘favours’.
• Fear of exposure – “My life will be over if anyone finds out.”

If a child shows distress, self-harm thoughts, or you believe they are at immediate risk, treat it as urgent. You can still be calm and supportive, but do not delay reporting.

For extra guidance on recognising grooming patterns, the NSPCC grooming signs guide and Childline’s advice on online grooming are clear and UK-focused.

Changes in Behaviour After Online Contact

Many parents and carers describe the ‘before and after’ feeling. A child seems fine, then a new online contact appears and the atmosphere in the house changes. This matters because grooming creates emotional hooks. The child may feel special, chosen or needed, and then feel anxious when they cannot respond.

Changes you may notice include:

• A different emotional rhythm – big highs from messages, then sudden lows when contact stops.
• Protectiveness over their phone – taking it to the bathroom, sleeping with it, or reacting sharply if someone walks by.
• Reduced appetite or appetite spikes – stress can do both.
• More arguments – especially around screen time, privacy and ‘trust’.
• New worries about reputation – asking unusual questions about embarrassing posts, screenshots or school gossip.

It helps to remember that behaviour changes can have many causes. A safeguarding response is not about proving grooming in one conversation. It is about noticing patterns, making it safer for the child to talk, and taking steps that reduce risk while you gather information.

A useful way to frame it is: “What changed, and what was happening online at the time?”

Try a simple timeline exercise with yourself:

• When did you first notice the change?
• What apps did they start using more?
• Did they start a new school term, join a new game or follow new accounts?
• Did they post about feeling low, lonely or stressed before the new contact appeared?
• Did they suddenly start asking for privacy in ways they never did before?

This isn’t about interrogation. It helps you understand the context so you can respond with calm accuracy rather than fear.

Secrecy, and Multiple Accounts and Devices

Secrecy is a common grooming tool because it creates a private world where the groomer can control the narrative. It can also be a sign of normal adolescence, so you are looking for secrecy that is intense, defensive or linked to emotional distress.

Some specific patterns that often show up in grooming situations include:

Multiple accounts

A child may have:

• A ‘main’ account for family and school friends.
• A ‘private’ account for a smaller group.
• A ‘burner’ account used for risky chats, hidden from parents and friends.

Multiple accounts are not automatically harmful. Many teenagers separate audiences. The risk rises when accounts are used to hide adult contacts, sexual content or secret relationships.

Second devices and hidden access routes

Groomers sometimes encourage young people to use:

• Old phones ‘without SIMs’ on Wi-Fi.
• Tablets or consoles for messaging.
• School-issued laptops with different restrictions.
• A friend’s phone for calls or photo sharing.

Children may also use web versions of apps, hidden folders, secret email addresses, or cloud albums.

Disappearing messages and encrypted chats

Features like disappearing messages, self-destructing media and end-to-end encryption are not ‘bad’ on their own. They exist for privacy. But they are attractive to groomers because evidence can vanish quickly.

What matters is the combination:

• A child becomes secretive.
• They are messaging intensely.
• They are anxious or distressed.
• They refuse to show who they are speaking to.
• They use disappearing features more than before.

If you are in a safeguarding role, also consider household dynamics. A child who feels judged or punished may hide more. Your tone and approach can either widen secrecy or reduce it.

Signs of Sexting Pressure or Coercion

Not all sexting is coercive, but grooming often uses sexual content as a control tool. The early stage can look like ‘flirty’ messages or jokes, then it shifts into pressure and threats.

Watch for these signs:

• Sudden sexualised talk that feels out of character.
• Body image anxiety linked to selfies, filters and constant checking.
• Requests for privacy like “Don’t come in”, “Don’t look at my screen”.
• Deleting photos or hiding galleries.
• Fear after taking a photo – panic, shaking, crying or shutting down.
• Language like “I had to”, “They’ll be mad if I don’t”, “I owe them”.

Groomers often use ‘proof’ tactics:

• “If you love me, you’ll send something.”
• “Everyone does it.”
• “You’re childish if you won’t.”
• “I’ve already sent you something, now it’s your turn.”

They may also use fake urgency:

• “Quick, before I go offline.”
• “I’m upset, you need to make it up to me.”
• “If you don’t do it now, I’ll find someone else.”

If you suspect coercion, it helps to separate the child from blame. Shame is a major barrier to disclosure. A child needs to believe they will not be punished for telling you.

UK support and removal routes can matter here. The IWF Report Remove tool helps under-18s report nude images of themselves that may have been shared, so platforms can work to remove or block them. For general reporting of harmful content, the UK Safer Internet Centre reporting hub can help route concerns.

Grooming Through Gaming Chats

Gaming is social, and many young people talk to strangers through cooperative play. Grooming can happen in text chat, voice chat, party systems, and even through ‘looking for group’ features. It can also move quickly to DMs on social apps once a connection is made.

Groomers may exploit common gaming dynamics:

• They offer help to level up, win matches or join elite groups.
• They praise the child’s skill and make them feel valued.
• They create a ‘team loyalty’ vibe: “We don’t snitch”, “We keep it in the squad”.
• They isolate the child into private parties or late-night sessions.
• They encourage the child to share social handles for ‘easier comms’.

Warning signs specific to gaming contexts include:

• A child starts playing with one person constantly and becomes distressed if they cannot join.
• They move from public matches to private voice chats with someone you have never heard of.
• They begin receiving digital gifts, skins, in-game currency or top-ups without a clear source.
• They hide voice chat conversations, whisper, or always wear headphones.
• They react strongly if you ask basic questions about who is in the party.

It is also worth knowing that grooming through gaming can be a stepping stone rather than the end goal. The groomer may not start by being sexual. They may start as a ‘mentor’, then gradually push boundaries and move the child into a different platform that is more private.

For a UK view on how online safety rules apply to gaming services, Ofcom’s explainer on the Online Safety Act and gaming is a useful background read for professionals.

Gifts, Money and ‘Favours’ Online

Gifts are a grooming classic, but in modern online spaces they can be subtle and easy to miss. A groomer may send:

• Small mobile top-ups.
• Gift cards for games or online stores.
• In-game items, skins or battle passes.
• Payments via apps, sometimes framed as ‘help’ or ‘support’.

Gifts create a sense of debt, even when the child did not ask for them. Later, the groomer might say:

• “I’ve done so much for you.”
• “You owe me.”
• “I’ve got receipts. Your parents will find out.”
• “Just do this one thing.”

Sometimes gifts are used to test boundaries before coercion starts. Other times they are used as a reward after a sexual image is sent, which can quickly shift into exploitation and blackmail.

Practical warning signs include:

• Unexpected cash, vouchers or online purchases.
• New premium subscriptions or skins with no clear payment source.
• A child becoming defensive about money or refusing to explain.

If you suspect a child has been paid for sexual images or acts, treat it as safeguarding and report. It does not matter if the child thinks they agreed. Children cannot consent to exploitation.

Sexualised Language and Boundary Testing

Grooming often involves ‘boundary testing’ to see how far a child can be pushed and how likely they are to disclose. This can look like jokes, dares, memes or ‘truth or dare’ games that become sexual.

Common boundary-testing tactics include:

• Normalising sexual talk: “Everyone talks like this.”
• Desensitising with explicit memes or porn links.
• Checking reactions: “Are you innocent?” “Can you handle adult talk?”
• Gradual escalation from flirting to explicit requests.
• Splitting adults from the child: “Your parents are strict, they wouldn’t get it.”

Signs a child may be experiencing this include:

• Using sexual slang they did not use before.
• Suddenly acting embarrassed or distressed about their body.
• Asking unusual questions about sex, age gaps or “is this illegal?”
• Moving away from family areas to watch or message privately.

If you are a safeguarding professional, it can help to remember that a child may show mixed feelings: excitement, curiosity, fear and shame can exist at the same time. That does not mean the child is safe. It means they are being emotionally pulled in different directions.

Threats, Blackmail and Sextortion Signs

Sextortion is often fast and frightening. It can begin with a flirty chat, a request for a nude, or even a fake video call where the offender records the screen. Then the threat arrives: “Pay or I’ll send this to your followers, your school, your family.”

The UK National Crime Agency has a clear public overview of sextortion and what to do, including advice not to pay and to report.

Signs a child may be being blackmailed include:

• Panic attacks, shaking, crying after checking messages.
• Sudden refusal to go to school or social activities.
• A child urgently asking for money, gift cards or bank details.
• Deleting accounts, changing usernames or trying to ‘wipe’ devices.
• Obsessive checking of social media, worried about what others can see.
• Statements like “You don’t understand, they’ll ruin me” or “I can’t tell anyone.”

Offenders may also threaten to:

• Send images to classmates.
• Tag a child in public posts.
• Claim the child is ‘a predator’ to flip shame onto them.
• Use AI-edited images or fake screenshots to increase fear.

If a child is being sextorted, one of the most protective things you can do is reduce isolation. The offender relies on secrecy and shame. A calm adult response that says “You are not in trouble, we will deal with this together” can stop the situation from spiralling.

New Older ‘Friend’ on Social Media

A new older ‘friend’ can be an obvious red flag, but groomers often hide age gaps by pretending to be younger, using stolen photos, or claiming to be ‘almost 18’. Some groomers also use younger intermediaries, where a teen or young adult helps recruit younger children.

Patterns that can indicate risk include:

• The new contact quickly becomes ‘important’ to the child.
• They are unusually attentive, messaging constantly and asking for private info.
• They push for secrecy and try to undermine parents or trusted adults.
• They ask for photos, live snaps or video calls early on.
• They offer gifts or ‘help’ with money, confidence or mental health.

Also watch for changes in the child’s social media behaviour:

• New suggestive selfies.
• A focus on ‘looking older’.
• Increased use of disappearing content.
• Sudden blocking of family members or hiding stories from adults.

In safeguarding work, it is useful to remember that groomers often target vulnerability, not just age. That vulnerability might be loneliness, bullying, identity questions, family stress, or wanting approval. A child does not need to be ‘reckless’ to be at risk.

Apps and Platforms Used for Grooming

Grooming can happen on almost any platform that allows messaging, media sharing or live interaction. Instead of focusing on one ‘dangerous’ app, focus on risk features:

• Private messaging and DMs.
• Disappearing content.
• Anonymous accounts or weak identity checks.
• Large group chats that can be used to spot vulnerable users.
• Voice chat and live streaming.
• Easy sharing of usernames across platforms.

Common spaces where grooming starts or moves through include:

• Social media DMs on mainstream platforms.
• Encrypted messaging apps where content is harder to monitor.
• Live streaming with real-time pressure and audience dynamics.
• Gaming chat systems and party voice chat.
• Community servers linked to games or hobbies.
• File sharing and cloud albums used to exchange images.

A useful practical approach is to map a child’s online ecosystem. Many young people do not use ‘one app’. They use a chain:

1. Public platform for discovery.
2. DMs for private chat.
3. Encrypted app for secrecy.
4. Video call for sexual content or threats.
5. Payment app or gift cards for extortion.

If you suspect grooming, ask yourself: “Where did it start, and where did it move next?”

For parents who want practical platform-by-platform safety advice, Internet Matters’ guides for parents can be helpful because they focus on settings, privacy and conversation starters rather than fear.

How to Talk to a Child About Grooming

The way you talk can either open the door or slam it shut. If a child thinks they will be punished, have their phone taken forever, or be judged, they are less likely to disclose. Groomers rely on that fear.

Start with a few principles:

• Lead with safety, not blame.
• Be curious, not accusatory.
• Name the tactic, not the child’s behaviour.
• Offer help quickly, then listen.

Here are conversation prompts that tend to work better than direct grilling.

Gentle openers

• “You seem a bit stressed after you’ve been online. What’s been going on?”
• “I’ve noticed you’re getting lots of messages late at night. How does that feel?”
• “Sometimes people online pretend to be someone they’re not. Has anyone made you feel uncomfortable?”
• “If someone online ever asked for something sexual, you could tell me and you wouldn’t be in trouble.”

Questions that map risk without panic

• “How did you meet them?”
• “What do they call you?”
• “Do they ever ask you to move to another app?”
• “Do they want to keep your chats secret?”
• “Have they asked for photos, voice notes or video calls?”

Statements that reduce shame

• “People who groom kids are good at manipulation. It’s not your fault.”
• “Even if you shared something, we can still get help and stop it from spreading.”
• “You don’t have to handle this on your own.”

If the child is a teenager, it also helps to respect autonomy while being clear about safeguarding. You can say:

“I’m not here to read every message. I am here to keep you safe. If someone is trying to control you or threaten you, that’s not a private issue. That’s a safety issue.”

For educators and safeguarding teams, be mindful of the environment. A disclosure in a corridor is unlikely. Private, calm, time-limited spaces and a trusted adult make disclosure more likely.

What to Do if You Suspect Grooming

When you suspect grooming, it is tempting to grab the phone and start scrolling. However, the most protective response is structured. You want to keep the child safe, avoid tipping off the offender, preserve evidence, and trigger the right safeguarding and law enforcement routes.

A practical immediate plan is:

1. Stay calm and reassure the child
   Say clearly: “You are not in trouble. I’m glad you told me.”
2. Check immediate safety
   If there is an imminent meeting planned, threats of violence, or a child is in immediate danger, call 999.
3. Do not negotiate with the offender
   Do not message the suspect yourself, and do not pay money. In sextortion, paying often leads to more demands.
4. Limit further contact in a controlled way
   If safe to do so, help the child stop responding and avoid sending anything else. Depending on risk, you may need to block, report and adjust privacy settings, but first consider evidence preservation.
5. Preserve evidence
   Save key messages, usernames, profile links, images, dates, times, and any payment requests. More on this is below.
6. Report to the right places
   In the UK, reporting usually means CEOP, the police, and your child’s school or safeguarding lead if relevant.
7. Get emotional support in place
   A child may be frightened, ashamed or panicking. If they are distressed, support them to talk to a trusted adult, school safeguarding staff, or services like Childline or the NSPCC Helpline.
8. Increase offline supervision temporarily
   This is not about punishment. It is about safety. Consider moving devices out of bedrooms overnight, keeping doors open during calls, and having regular check-ins.

Safeguarding professionals should follow organisational procedures immediately, including recording, DSL escalation, and referral to children’s social care when thresholds are met. If the alleged offender is linked to a setting, follow LADO processes.

How to Report to CEOP 

If you are worried a child is being groomed online or sexually exploited, you can report directly to CEOP. The easiest route for most families is the CEOP safety centre reporting page. CEOP sits within the National Crime Agency and specialises in protecting children from sexual exploitation and abuse.

CEOP reports are appropriate when:

• An adult is contacting a child in a sexual way.
• Someone is pressuring a child for sexual images or acts.
• A child has been tricked or manipulated into sexual behaviour online.
• You suspect sexual exploitation, coercion or blackmail involving sexual content.

When making a report, include as much detail as you can without delaying if you are short on time:

• Usernames, display names and profile links.
• The platform and any linked accounts.
• Dates and times of key messages.
• Screenshots or saved chat exports (if you have them).
• Any threats made, including threats to share images.
• Any attempts to meet offline, including location and timing.
• Any payments requested or made.

If you are in a school or safeguarding setting, you may also use CEOP’s education resources to support staff and families. CEOP Education has specific guidance on financially motivated sexual extortion that can help you recognise patterns and respond quickly.

When to Call the Police 999/101

Knowing whether to call 999 or 101 can reduce hesitation.

Call 999 immediately if:

• A child is in immediate danger or about to meet the suspect.
• There are threats of violence.
• You believe the suspect is nearby or trying to arrange an immediate meeting.
• A child has self-harm thoughts or is at immediate risk.
• You suspect a live-streamed abuse situation is happening now.

Call 101 (non-emergency) if:

• The grooming is ongoing but there is no immediate physical danger right now.
• You need to report sextortion demands or blackmail.
• You have evidence of exploitation that has already happened and you need police involvement.
• You want advice about next steps while you also report to CEOP.

If you are unsure and the child is distressed, it is better to treat it as urgent. If you think they might harm themselves, do not leave them alone, and call 999.

For sextortion, also read the NCA sextortion advice, which is designed for quick practical action, including what not to do.

Preserving Evidence and Screenshots Safely

Evidence matters because it helps law enforcement identify offenders, connect reports, and act faster. At the same time, evidence handling should not increase harm or create new risks, especially when sexual images are involved.

Use these principles:

• Preserve first, then block.
• Do not forward sexual images.
• Store evidence securely.
• Keep a clear timeline.

Here is a step-by-step approach.

1) Capture the essentials
For messages, capture:

• The username and display name.
• The profile URL if possible.
• The date and time stamps.
• The content of key messages, especially threats or requests.
• Any payment demands, including account details or gift card instructions.

Screenshots are helpful, but where possible also use built-in export tools or chat download functions, because they can preserve metadata.

2) Avoid creating new copies of illegal images
If the child has sexual images of themselves on their device, it can be frightening. However, repeatedly sharing or forwarding those images can create legal and safeguarding complications.

Instead:

• Do not send the images to other people ‘for advice’.
• Do not upload them to cloud folders shared with multiple adults.
• If you need to show evidence to a safeguarding lead, follow your organisation’s policy and seek guidance from CEOP or the police.

For children, the Report Remove service can be a safer route to help prevent images from spreading, without the child having to share them publicly.

3) Keep a written log
In a simple note (paper or secure digital), record:

• Dates and times of contact.
• Platforms used.
• Any account changes.
• What actions you took, and when.
• Any disclosures the child made, using their words as closely as possible.

This log is useful for your CEOP or police report and helps professionals understand the sequence.

4) Secure devices
If you believe the device may hold evidence:

• Avoid factory resets.
• Avoid deleting whole chats.
• Consider turning off auto-delete features if safe.
• Keep the device in a safe place when not in use.

If the child is at risk of continuing contact, you may need temporary supervision measures, like devices being used in shared spaces, with a clear explanation that this is about protection, not punishment.

5) Report to the platform
Most apps have reporting features for exploitation, harassment and blackmail. Reporting can help trigger account action and preserve platform-side evidence. The UK Safer Internet Centre’s Report Harmful Content tool can also guide you to the right reporting route when content is harmful or illegal.

Conclusion

Online grooming is rarely obvious at the start. It grows through attention, secrecy and emotional pressure, and it can shift quickly across apps, DMs and gaming chats. That is why early warning signs matter. When you look for clusters – changes in behaviour, secrecy, boundary testing, gifts, and fear linked to online contact – you are more likely to spot grooming before it escalates into coercion or blackmail.

If you suspect a child is being groomed, your calm response is protective. Reassure them they are not in trouble, reduce contact safely, preserve evidence, and use UK reporting routes. Reporting to CEOP, contacting your setting’s safeguarding lead, and calling 999 or 101 when appropriate can stop harm and connect the child to specialist support.

Most importantly, keep the child out of isolation. Groomers rely on secrecy and shame. When a child feels believed, supported and protected, they are far more likely to disclose what is happening, and far less likely to be trapped into harmful choices by fear.