Parent Help Playbooks

What to Do When Your Child Is Talking to a Stranger Online

A complete parent response Playbook for unknown online contact, with urgency checks, conversation scripts, evidence guidance, platform reporting steps, escalation routes, and recovery planning.

Parent and child reviewing an unknown online message together
Parent action summary

Stay calm, keep the child communicating, assess immediate danger, preserve relevant account details, and use official block, report, and escalation channels.

Printable parent resources

Download and use these tools offline

Use the action sheet during the incident and the family worksheet for the follow-up conversation. Nothing you write is uploaded to TheOneSpy.

Is anyone in immediate danger?

If a child is missing, an in-person meeting is underway or imminent, a credible physical threat has been made, or anyone may be in immediate danger, contact local emergency services now. Do not rely only on a platform report.

Step 1

Assess the situation

Start by identifying what happened, whether contact is still active, what the person knows, and whether secrecy, sexual requests, money, threats, location sharing, or an in-person meeting are involved. The same situation may move from moderate to high or critical as new facts emerge.

Is the child missing, on the way to a meeting, or already meeting the person?
Emergency — immediate action required

Contact local emergency services immediately. Provide the child’s current or last known location, device details, transport information, username, and profile link.

Has the person made a credible threat, demanded sexual content, or threatened to expose private material?
Urgent — respond now

Preserve relevant information, stop further engagement where safe, report through the platform, and contact the appropriate law-enforcement or child-protection service.

Does the person know the child’s home, school, live location, routine, or phone number?
Urgent — respond now

Disable location sharing, review public profile information, alert another responsible adult, and consider school or authority involvement according to the facts.

Has the person requested secrecy, gifts, money, images, sexual conversation, or a move to another private app?
Urgent — respond now

Treat this as a serious warning sign. Preserve account details before blocking and use official reporting channels.

Was it a single unwanted message with no reply, threat, personal-data disclosure, or continuing contact?
Lower concern — monitor and guide

Report or block as appropriate, tighten privacy and messaging settings, and agree on what the child should do if contact resumes.

Step 2

What to do in the first 15 minutes

1

Reassure the child first

Say clearly that the child is not in trouble for telling you. Keep your voice calm and avoid demanding every detail at once.

2

Check immediate safety

Ask whether a meeting is planned, whether a threat was made, whether money or images were requested, and whether the person knows the child’s location, school, or address.

3

Record the account details

Write down the platform, username, display name, profile URL, phone number or email, dates, timestamps, group or server name, and any move to another app.

4

Preserve relevant communication locally

Keep screenshots, message links, and account details when safe and lawful. Do not forward intimate material involving a minor or create unnecessary copies.

5

Use official report and block tools

Report the account or specific messages first where evidence could disappear, then block or restrict the account. Follow the platform’s current official instructions.

6

Secure the child’s account

Change the password, enable two-factor authentication, review active sessions and linked devices, restrict messages and friend requests, and turn off unnecessary location sharing.

7

Decide whether outside help is needed

Contact the school for school-related incidents. Contact local authorities or a specialist child-safety reporting service for threats, exploitation, sexual requests, stalking, coercion, or planned meetings.

Do not do this

  • Do not blame, shame, or repeatedly interrogate the child.
  • Do not publicly expose the suspected account or encourage mass reporting.
  • Do not impersonate the child or continue the conversation unless directed by an appropriate authority.
  • Do not forward, email, or upload intimate material involving a minor as ordinary evidence.
  • Do not promise that nobody else will need to be told when safety or reporting duties may require help.
  • Do not make permanent punishment decisions during the initial response.
  • Do not arrange a confrontation or meeting with the unknown person.
Step 3

Talk to your child without shutting down communication

Suggested opening
You are not in trouble. I am glad you told me or let me see this. I want to understand what happened, make sure you are safe, and decide the next steps with you.
Reassure the child:

Tell the child that people can be convincing online and that manipulation can happen to anyone. Reinforce that the person who used deception, pressure, sexual requests, gifts, or threats is responsible for that conduct.

Questions to ask

  • Where did the conversation begin, and who contacted whom?
  • What did the person say about their age, identity, school, work, or location?
  • Did they ask you to move to another app, use disappearing messages, or keep the contact secret?
  • Did they request your name, school, address, phone number, location, photographs, money, or an in-person meeting?
  • Did they offer gifts, game currency, mobile credit, transport, accommodation, or favors?
  • Did anything make you feel uncomfortable, pressured, frightened, guilty, or responsible for them?
  • Have they contacted you through another account or contacted any of your friends?
  • What would help you feel safer right now?

Phrases and reactions to avoid

  • How could you be so careless?
  • I told you this would happen.
  • You are losing your phone forever.
  • Why did you believe them?
  • I am going to message or expose this person right now.
  • Do not tell anyone else about this.

Age-specific wording

Ages 6–8
Sometimes people online are not who they say they are. You did the right thing by showing me. Let’s look at it together and make the account safe.

Use short questions. Focus on names, requests, secrets, gifts, and whether the person asked to meet. Avoid asking the child to interpret the adult’s intention.

Ages 9–12
I am not here to punish you. I need to understand what this person asked and what they know, so we can stop the contact and protect you.

Explain that common interests and friendly language do not verify identity. Agree on a simple rule: unknown contacts, secrecy, gifts, private images, and meeting requests always come to a trusted adult.

Ages 13–15
I respect that your online relationships matter. My job is to help when someone uses pressure, secrecy, gifts, sexual talk, threats, or requests for private information. Let’s work through what happened without blaming you.

Give the teen some control over the sequence of actions where safety allows. Explain why evidence, reporting, and temporary restrictions may be needed.

Ages 16–17
I want to treat you with respect and be direct about the risk. Let’s identify what this person knows, whether any coercion or threat is involved, and which steps you want me beside you for.

Discuss consent, manipulation, identity uncertainty, financial pressure, and legal or safety consequences. Involve the older teen in reporting and account-security decisions unless immediate danger requires urgent action.

Step 4

Preserve useful evidence safely

Keep records locally and submit them only through appropriate official channels. Do not upload a child’s private conversations, intimate images, or identifying evidence to TheOneSpy.

  • Platform, app, game, group, server, or website name
  • Username, display name, profile URL, user ID, avatar, and known alternate accounts
  • Message links, relevant screenshots, dates, and timestamps
  • Phone number, email address, payment handle, website, or other contact detail
  • Requests for secrecy, sexual conversation, images, money, gifts, or a meeting
  • Threats, blackmail, coercion, manipulation, or instructions to delete messages
  • Personal details disclosed: name, school, address, routine, location, photographs, or family information
  • Whether the conversation moved to another platform or disappearing-message service
  • Group, server, game, or mutual-contact information
  • Actions already taken: reported, blocked, password changed, school informed, authority contacted
Step 5

Block, report, and secure the account

SnapchatReport the message or account, then review Family Center and location settings

Before blocking, preserve the username and relevant details. In Snapchat, press and hold a Snap or Chat message to report it. To report an account, press and hold the person’s name in Chat, choose Manage Friendship, then Report. Block the account after reporting where appropriate. Review Snap Map, contact permissions, public-profile visibility, and Family Center.

Steps last checked: July 29, 2026
TikTokReport the account, block it, and review Family Pairing

Open the person’s profile, use the Share menu, choose Report, then Report account and select the relevant reason. To block, use the same profile menu and choose Block. Review direct-message permissions, privacy, comments, mentions, downloads, and Family Pairing. A blocked account may still appear in some shared spaces, so continue watching for alternate accounts.

Steps last checked: July 29, 2026
DiscordCopy message links, report through Discord Safety, and review Family Center

Preserve the relevant message link before blocking. On mobile, hold the message and copy its link; on desktop, right-click and copy the message link. Use in-app reporting or Discord’s Safety reporting route. Block the account, leave unsafe servers if needed, review direct messages and friend requests, and use Family Center where the teen has linked it.

Steps last checked: July 29, 2026
RobloxReport and block the connection, then tighten parental controls

Record the username and relevant chat or game details. Use the user profile or parent dashboard to report and block the connection. In Parental Controls, review connections, communication, private servers, content restrictions, spending, and linked parent settings. Blocking removes direct chat and reconnection without parent permission under the current controls.

Steps last checked: July 29, 2026
Step 6

Report and escalate at the right level

SituationPlatformSchoolAuthority / specialistUrgent when
Single unwanted contact; no reply, threat, or personal information sharedReport or block according to the app’s tools. Tighten messaging and friend-request settings.Usually not required unless school accounts or classmates are involved.Usually not required unless later facts indicate exploitation, threats, or stalking.The person returns through alternate accounts, knows the child offline, or escalates requests.
Repeated contact, secrecy, gifts, deception, or requests for personal detailsReport the account and relevant messages; preserve identifiers before blocking.Inform the school when classmates, school devices, or school routines are involved.Seek local child-protection or law-enforcement guidance when an adult may be targeting the child or the behavior is persistent and coercive.The person knows the child’s location, makes threats, requests sexual content, or proposes a meeting.
Sexual conversation, image request, exploitation, blackmail, or threat to share private materialReport immediately using the platform’s child-safety or exploitation category. Do not forward the material.Involve the school when peers or school impact are involved, while limiting unnecessary disclosure.Contact local law enforcement or the relevant national child-exploitation reporting service. In the U.S., reports may be made to NCMEC’s CyberTipline.There is coercion, an adult contact, a credible threat, self-harm pressure, extortion, or current location exposure.
Planned meeting, child en route, child missing, stalking, or credible physical threatPreserve the profile and report, but do not wait for platform action.Alert the school if it may know the child’s location, transport, peers, or routine.Contact local emergency services immediately and provide all known identifiers and location information.Immediately.

Working with the school

Contact the school when the person is a student, a school account or device is involved, bullying or rumors are affecting school, the person knows the child’s schedule, or the child may need a safety plan. Ask for one named contact, preserve confidentiality, and request written confirmation of agreed actions. Avoid broad distribution of private messages or sensitive images.

Country and reporting note

Emergency, law-enforcement, child-protection, and reporting pathways differ by country. In the United States, suspected online child sexual exploitation may be reported to NCMEC’s CyberTipline. For suspected child sexual abuse material in other countries, use an authorized national hotline, such as one listed through INHOPE. Child Helpline International lists local child and youth helplines. Do not email or forward illegal content.

Step 7

Support recovery and prevent recurrence

Next 24 hours

  1. Tell the child what actions have been taken and what will happen next.
  2. Review passwords, active sessions, linked devices, privacy, messages, friend requests, and location settings.
  3. Watch for contact through alternate accounts, mutual friends, games, email, or phone numbers.
  4. Agree on temporary safety measures and a clear review time instead of an indefinite punishment.
  5. Identify another trusted adult the child can contact if they feel overwhelmed.

Next seven days

  1. Check whether the platform acknowledged the report and preserve any reference number.
  2. Review whether the school or an authority needs additional information.
  3. Ask how the child is feeling without repeating an interrogation.
  4. Check for impersonation, reposting, new accounts, or renewed contact.
  5. Update the family technology agreement and practice how to respond to future unknown contacts.

Next 30 days

  1. Review account settings again because platforms and social circles change.
  2. Restore age-appropriate independence gradually when temporary restrictions are no longer needed.
  3. Discuss what warning signs the child recognized and what was difficult to notice.
  4. Review trusted adults, reporting routes, and family contact rules.
  5. Seek ongoing professional support if fear, shame, sleep problems, school avoidance, or distress continue.

Warning signs requiring closer attention

  • The child is afraid the person will hurt them, family members, pets, or friends.
  • The person knows the child’s address, school, live location, or routine.
  • The child is preparing to meet or has met the person offline.
  • There are sexual requests, intimate images, blackmail, threats, money demands, or coercion.
  • The child receives unexplained gifts, money, packages, transport, accommodation, or game currency.
  • The child shows severe distress, panic, self-harm thoughts, sleep disruption, school refusal, or sudden withdrawal.
  • The contact continues through new accounts after blocking.

Prevention checklist

  • Agree that unknown contacts, secrecy, gifts, sexual requests, and meeting proposals are always shared with a trusted adult.
  • Keep accounts private where appropriate and restrict who can message, add, mention, invite, or locate the child.
  • Disable unnecessary live-location sharing and remove school, address, routine, and contact details from profiles.
  • Use unique passwords, two-factor authentication, and regular linked-device reviews.
  • Review friends, followers, game connections, servers, and group memberships together.
  • Teach the child that photographs, voice, video, and mutual interests do not prove identity.
  • Make help-seeking safer by avoiding automatic permanent punishment when the child discloses a problem.
  • Schedule a brief monthly digital-safety check-in rather than relying only on crisis inspections.

When professional help may be needed

Seek urgent professional help when there is immediate danger, a missing child, a planned meeting, sexual exploitation, credible threats, blackmail, stalking, location exposure, or pressure to self-harm or harm others. Consider a qualified child mental-health professional when distress, shame, anxiety, sleep problems, school avoidance, withdrawal, or fear persist after the contact has stopped. Use local services appropriate to the child’s country and circumstances.

Finding out that a child is communicating with someone they do not know offline can be unsettling. Not every online-only contact is dangerous: children may meet genuine peers through school communities, games, interest groups, and moderated platforms. The concern rises when the other person uses secrecy, pressure, gifts, sexual conversation, threats, requests for personal information, or plans for an offline meeting.

What online stranger contact can look like

An unknown contact may begin with an ordinary friend request, game invitation, compliment, shared interest, or offer of help. Risk can develop gradually. A person may claim to be the child’s age, try to become emotionally important, ask the child to move to a private or disappearing-message app, and then request information, images, money, sexual conversation, or an in-person meeting.

The safest parental response is calm, specific, and proportionate. Preserve communication with the child first. A child who expects blame or immediate permanent punishment may hide information that is important for safety.

Red flags that require closer attention

  • The contact asks the child to keep the relationship or messages secret.
  • The person quickly moves the conversation from a public space to private messages or another app.
  • The person gives gifts, game currency, money, mobile credit, or favors.
  • The contact repeatedly asks for the child’s age, school, address, live location, daily routine, phone number, or private photographs.
  • The person becomes possessive, romantic, sexual, threatening, or angry when the child does not reply.
  • The contact asks the child to delete messages, use disappearing messages, or hide the account from parents.
  • The person proposes an in-person meeting, transport, accommodation, or travel.

How to judge the level of concern

A single unwanted message with no reply may be resolved through reporting, blocking, and a settings review. Repeated private contact, deception, requests for secrecy, personal data, gifts, sexual discussion, coercion, or attempts to meet require a stronger response. A credible threat, active meeting, missing child, exploitation, stalking, or known location exposure should be treated as urgent.

Protect the child’s privacy while seeking help

Keep evidence locally and share it only through appropriate official reporting channels. Do not post the suspected account publicly. Do not ask friends to confront or mass-report the person. Never forward sexual images involving a minor, and do not create new copies merely for documentation. When illegal content is involved, follow the instructions of an authorized hotline or law-enforcement agency.

Frequently asked questions

Should I immediately take the phone away?

First make the device safe and preserve relevant information. A temporary supervised pause may be reasonable, but an automatic permanent ban can discourage future disclosure. Explain each temporary restriction and agree on when it will be reviewed.

Should I message the unknown person myself?

Usually, do not impersonate the child or continue the conversation. It can alert the person, increase pressure, or interfere with an investigation. Preserve the account details, use official reporting tools, and seek specialist or law-enforcement guidance when the behavior is serious.

What if the child willingly shared information or an image?

Stay focused on safety rather than blame. Children can be manipulated through trust, affection, fear, incentives, or threats. The responsibility for exploitation, coercion, grooming, or abusive requests lies with the person who used those tactics.

What if the person says they are another child?

Online identity cannot be assumed from a profile, photographs, voice, or video alone. Apply the same rules to any person the child has not reliably verified through a real-world context.

Editorial scope

This Playbook provides general educational guidance for parents and guardians. It cannot assess a specific person’s intent or replace emergency services, law enforcement, child-protection professionals, legal advice, or mental-health care. Platform controls and reporting routes change; the official links below should be checked before acting.

Sources and references

  1. Online Enticement National Center for Missing & Exploited Children
  2. CyberTipline National Center for Missing & Exploited Children
  3. Parents, Caregivers, and Teachers: Protecting Your Kids Federal Bureau of Investigation
  4. How to Keep Your Child Safe Online UNICEF Parenting
  5. How to Report Suspected Child Sexual Abuse Material INHOPE
  6. Find Your Local Child Helpline Child Helpline International
  7. How to Report Abuse or Violations on Snapchat Snapchat Support
  8. How to Contact Discord Safety for Parents and Guardians Discord Support
  9. Parental Controls Overview Roblox Support
  10. For Parents and Guardians TikTok Support