Grooming
Grooming is the process of building trust and emotional connection with a child to facilitate exploitation. Online, this rarely looks like a stranger sending an explicit message on day one. Offenders invest time -- establishing rapport, learning a child's interests, offering validation, and gradually normalizing boundary violations until the victim feels complicit or afraid to report.
How Online Grooming Works
Perpetrators typically move through definable stages: initial contact (often posing as a peer), trust-building through shared interests, isolation from parents or peers, desensitization to sexual content, and finally coercion into producing material or meeting in person. Direct messaging, disappearing content, and pseudonymous accounts on social platforms lower the friction for this process significantly.
Analysis of public ICAC case records through CaseLinker shows grooming contact being concentrated on social media surfaces -- Snapchat, Instagram, Facebook, Kik, and chat services appear repeatedly across eras as primary contact points. Cases with hands-on abuse signals tend to span multiple platforms, suggesting offenders escalate contact across services as trust deepens.
Common Platform Surfaces
- Social media -- Instagram, Snapchat, and Facebook Messenger provide direct messaging, follower networks, and age-verification gaps that offenders exploit
- Gaming platforms -- Voice chat and in-game messaging create peer-like environments where adults can pose as children
- Encrypted and pseudonymous messaging -- Kik, Discord, and similar apps offer limited cooperation with law enforcement and easy account creation
- Legacy chat services -- AIM-era patterns persist; early CyberTip cases often originated from platform-side detection of abusive images in chat
Relationship to Other Vectors
Grooming frequently precedes sextortion and CSAM production. A 2017 Los Angeles case documented in the CaseLinker landscape briefing involved YouTube, a children's gaming platform, and a file-upload service combined into a single coercion pipeline -- surfaced through platform reporting to NCMEC rather than family discovery.
Detection and Enforcement
Platform-side reporting to NCMEC has displaced parental discovery as the primary origin for many grooming-related arrests. Investigators use undercover personas, CyberTip referrals, and digital forensics on seized devices to reconstruct grooming timelines.
Further reading: Technology Coalition -- Online Grooming Detection & Prevention · Thorn -- 2022 Online Grooming Report