Online grooming: the four-step pattern, and the rule that breaks it
This is the hardest subject on the site to discuss with a child and the easiest to reduce to a single rule. The pattern is consistent, and the point of failure is always the same one.
Warnings about strangers do not work here, because the person is not a stranger by the time it matters; that is the whole method. What does work is teaching the sequence, so a child recognises step three while it is happening, not step four afterwards.
The four steps, in order
It begins with something shared: a game, a fandom, an interest a child is enthusiastic about and does not get much adult attention for. Contact is ordinary and welcome.
Then the attention becomes generous — time, praise, sympathy, sometimes small gifts of in-game currency. A child who feels unheard elsewhere is not being naive to value this; they are responding to it exactly as anyone would.
Then the conversation moves to a private channel, away from the group where it started. And then, at some point, comes a request to keep something between the two of them. That fourth step is the mechanism, and it is where the pattern becomes recognisable.
The rule that interrupts it
Anyone who asks a child to keep a conversation secret from their family is, by that fact alone, the problem, regardless of who they claim to be or how kind they have been. That is the rule, and it is short enough to be remembered under pressure.
It works because it does not require a child to judge intentions, spot a lie or identify an adult pretending to be a peer. It gives them one observable trigger, and the trigger arrives before anything else does.
Why it usually starts in a game
Games are where children talk to people they have not met, doing something together, with voice chat that feels incidental, not social. The usual caution never engages because it does not feel like talking to a stranger.
This is the practical case for setting communication to friends-only on consoles and platforms before content ratings. That argument is made on the setup guides and on every platform page there. It does not remove the risk, and it removes the open lobby, which is where most first contact happens.
How to raise it without frightening anyone
Do not open with danger. Open with the mechanism: some people online are very nice on purpose, and the way to tell is whether they ever ask you to keep them a secret. Children take that well because it hands them a tool instead of a fear.
Then make the promise explicit: telling you about it never costs them the game, the account or the friendship they thought they had. A child who believes those are forfeit will keep the conversation to themselves, and that bought time is the one resource this sequence cannot do without.
What an adult might notice
A new online friendship that has become important quickly. A device turned away or closed when you come in. Knowledge of a game, a topic or a place that did not come from you. Gifts of in-game currency with no clear source. Being upset after time online but unwilling to say why.
None of these is proof and all of them are worth a calm question. The single most useful one is not accusatory: who is the person you have been playing with, and what do you like about them?
What to do
- Teach the one rule: anyone asking for secrecy from family is the problem.
- Set communication to friends-only on consoles and platforms, before content ratings.
- Keep the promise that telling never costs them the account or the game.
- If it has happened: screenshot everything, do not delete, do not confront the account.
- Report to the platform and to the police; this is not a school matter.
- Any request for images involving a child is a police matter immediately, without exception.
Questions about grooming
Is my child too young for this conversation?
If they talk to anyone online who is not a classmate, they are old enough for the rule about secrecy. That version needs no discussion of anything frightening, which is exactly why it is the one to lead with.
Should I confront the account?
No. It warns the person, it can lead to evidence being deleted, and it takes the matter out of the hands of people who can act on it. Screenshot, report, and let the platform and the police work.
What if the person is another child?
It still gets reported, and the pattern still matters more than the age. Requests for images between children are also a serious matter and are handled by the police rather than the school.
Can parental controls prevent this?
They reduce the surface: friends-only contact removes the open lobby where most first contact happens. They cannot prevent it, because the contact usually comes through a channel a child was allowed to use. The rule is the part that scales.
My child is embarrassed and does not want to say what happened.
Then start with what they are willing to say, and make it clear the embarrassment is not the problem you are solving. Shame is what the pattern uses to buy time; removing it is the useful adult contribution.
Where do I report it?
To the platform, and to the police or your country’s child-protection reporting line. Do not wait for certainty; reporting a suspicion is what those lines exist for.