Online Luring and Exploitation via Social Engineering
Online luring and social engineering describe how offenders manipulate children through calculated deception -- false identities, emotional manipulation, coercion, and isolation tactics -- across gaming platforms, social media, messaging apps, and anonymous communication channels.
Social Engineering as a Cross-Cutting Method
Social engineering is not a standalone offense but a methodology used across grooming, sextortion, CSAM production, and trafficking. Offenders exploit platform design: direct messaging, disappearing content, voice chat in games, and pseudonymous account creation all reduce friction for deception.
CaseLinker analysis of 5,000+ public ICAC case reports shows 30 distinct named platforms across the corpus, with concentration on a small number of high-traffic surfaces. Instagram, Snapchat, Discord, and Facebook appear repeatedly as luring infrastructure across the social media and platform proliferation eras.
Common Tactics
- False identity -- Posing as a peer, romantic interest, talent scout, or gaming teammate
- Emotional manipulation -- Offering validation, gifts, or exclusive attention to children who feel isolated
- Platform hopping -- Moving conversations across services to fragment the digital trail and evade moderation
- Isolation -- Convincing victims that parents or friends would not understand, creating secrecy
- Coercion escalation -- Progressing from benign conversation to explicit requests, then using obtained material as leverage
Gaming and VR Surfaces
Gaming platforms provide voice chat, in-game messaging, and avatar-based interaction that mimic peer environments. The Oculus VR kidnapping case (Era III), documented in the landscape briefing, demonstrates that avatar-based platforms present real-world physical risk -- not just digital harm -- when monitoring is absent.
A structured CSAM distribution network operating across Discord servers (Era IV case study) shows how gaming-adjacent platforms have become accessible infrastructure for organized exploitation communities.
Investigation Approaches
Cases originate through CyberTip referrals, undercover operations, parental reports, and platform cooperation. Investigators reconstruct multi-platform communication trails through device forensics, subpoenaed records, and OSINT. Cases involving hands-on abuse tend to span more platforms than possession-only cases -- a pattern visible in aggregate CaseLinker analysis.