This is part two of Protecting Our Children. Part one set out the shape of the threat and the reporting routes, which are worth having to hand before you read this one.

Ask a parent to imagine the moment an online predator makes contact with their child, and almost everyone imagines the same scene. A stranger, obviously adult, saying something obviously wrong. It is a useful scene, because a child who met it would recognise it instantly and so would you.

It is not what happens. The first message is kind. Often it is funnier and more interested in your child than anything else they will read that day. That is not incidental to the crime, it is the crime's opening move, and the entire structure that follows depends on it.

I am going to describe that structure, because you cannot notice a pattern you have never had described. I am deliberately keeping it at the level of shape rather than script. Every element here already appears in published guidance from the NSPCC, the NCA and CEOP, and none of it is a manual.

Where it starts is wherever they already are

Part one made the point that these networks do not sit on some separate internet. The police data says the same thing in numbers. Of the 7,263 sexual communication with a child offences recorded by UK forces in the year to November 2025, where the platform could be identified 40% happened on Snapchat, with WhatsApp and the Meta apps behind it. Europol's description of The Com's recruiting grounds is social media, messaging apps and gaming platforms, in that order and all at once.

There is no exotic location to block. Contact begins in a game lobby, a Discord server about a game, a comment reply, a follow request, a friend-of-a-friend group chat. In the com-network cases specifically, it frequently begins in a space organised around something the child is genuinely interested in, and the person making contact is genuinely knowledgeable about it. They have to be. It is how they got in.

The first move is attention

What follows is not seduction in any form a parent would recognise. It is attention, at a volume the child is not getting elsewhere.

Someone listens. Someone remembers what they said last week. Someone takes their opinion about something seriously, agrees that their parents do not understand, tells them they are more mature than the people around them. For a fourteen-year-old having a thin year, this is not creepy. It is the best thing in the week.

And it is aimed. The material HOPE not hate recovered from inside these groups is explicit that members deliberately seek out young people who are struggling — those with mental health difficulties, those already isolated, those who have said online that they feel worthless. One internal document advises targeting people who are depressed, in terms I will not reproduce. Young LGBT+ people are singled out, as are children who have already been abused, because both groups have a reason to keep a secret and a reason to believe nobody will take their side.

I want to be careful about how that lands, because it can be read as a reason to watch a struggling child harder. It is not. It is a reason to know that the weeks when a child is low are the weeks when a new and very attentive online friend deserves a gentle question, and to make sure that in those weeks the child has more than one place to get attention.

Then the conversation moves somewhere quieter

At some point the contact moves. Off the platform where it started, onto something more private, more ephemeral, or simply somewhere the child's parents have never heard of. The reason given is always reasonable, and often the child suggests it themselves.

What actually changes is that the conversation is now unobserved and unlogged, and that the child and the new friend now share a small secret. Not a shameful one yet. Just a private one. The secrecy is the product. Everything after this is built on the fact that there is now a place your child talks that you do not know about, and that keeping it that way already feels like loyalty.

The first thing they ask for is small

This is the part that surprises people most. The first request is never the serious one. It is trivial, deniable, and often not sexual at all. A photograph of a bedroom. A hand. A silly video. Something the child can say yes to without any alarm going off, because no alarm should go off.

Then reciprocity does the work. Something is sent the other way. The asks get slightly larger, at a pace calibrated so that no single step feels like a step. In the financial extortion cases, the escalation is fast: the NCA has recorded organised groups going from first contact to blackmail in under an hour. In the com-network cases it is often slower and much worse, because the objective is not money.

And then the kindness stops

The moment there is one item of leverage — one image, one video, one message that the child would be mortified for anyone to see — the entire relationship inverts, usually within minutes.

In financially motivated sextortion, which is the version most British families will meet, the demand is money and the threat is distribution to the child's contact list. The offenders are usually organised, usually overseas, and are not sexually motivated at all. It is a business, and the child is a transaction.

In the com-network cases the demand is escalation itself. Status inside those groups is earned by the severity of what a member can make someone else do, so the leverage is spent on forcing the child into progressively worse acts: producing more material, harming themselves, harming a sibling or a pet, recruiting or coercing another child. Each act produces new leverage. That is the mechanism, and it is why the NCA describes victims aged as young as eleven being driven into things no eleven-year-old arrives at on their own.

Every part of this is designed to stop them telling you

Here is the thing I most want a parent to take away, because it reframes what you are actually up against.

The coercion does not primarily rely on the threat of exposure. It relies on the child's certainty that telling an adult would be worse. That certainty is manufactured, deliberately and early, out of four ingredients.

Every hour a child spends inside that calculation is an hour the offender gets to keep working. The single most valuable thing you can do — more valuable than any control in part five of this series — is to demolish the calculation in advance, on an ordinary day, when nothing is wrong.

The one sentence, said early

Say some version of this out loud, before anything ever happens, and say it more than once so it is available to be remembered under stress.

If anything ever goes wrong online, you can tell me. You will not lose your phone, you will not be in trouble, and I will not be angry. We will just sort it out.

Then, and this is the difficult half, mean it. If a child tests that promise with something small and the phone goes anyway, the promise is spent, and the next disclosure — the one that matters — will not come.

What you might actually notice

None of these signs is diagnostic. Adolescents are secretive, moody and attached to their phones as a matter of ordinary development, and a parent who treats each of these as evidence will produce a child who hides everything, which is precisely the outcome the offender wants. What matters is change, and clusters.

The pattern to look for is not one of these. It is a child whose online life has narrowed to one relationship they will not discuss, whose mood tracks that relationship, and who has become defensive rather than embarrassed when asked about it. Embarrassment is normal. Fear is not.

What not to do the moment you suspect it

Do not seize the device. I understand the instinct completely and it is wrong for three separate reasons: it destroys the evidence that a police investigation needs, it ends your visibility of what is happening, and it confirms to the child the exact prediction the offender has been making for weeks. If you take nothing else from this part, take that.

Do not confront the contact yourself, do not message them, and do not tell them you are a parent. It tips off an offender who can then delete, block, and move, and in the com-network cases it can escalate the pressure on the child rather than relieve it.

Do not delete anything. Part three deals with the first hour in detail, because that hour is where most of the damage is either contained or multiplied.

And do not treat every online friendship as a predator. The overwhelming majority are exactly what they appear to be, and children have real friendships in these spaces that matter to them enormously. A parent who cannot tell the difference between a friend and a threat will eventually be told about neither.

Next in the series: the first hour — what to do, in what order, when a child tells you they are being extorted, and why the instinct to pay is the one that makes it worse.