Platform Safety Watch/Scam alerts/Sudden redirect to private chat with an under-18 framing
Critical severity · Posted June 16, 2026

Sudden redirect to private chat with an under-18 framing

A new contact suggests moving to a private app, then claims (or implies) they are a minor. Sometimes a genuine child-safety incident. Often a deliberate sextortion setup.

Background

Why this pattern works

Two very different but equally dangerous things happen under this pattern. (1) A predator is grooming an actual minor and trying to remove platform visibility. (2) A scam operator is fabricating a minor identity to extract a sextortion payment from the target. Both require immediate, identical action: stop, preserve, report to the appropriate child-safety hotline.

Watch for

Signs you are in this pattern

If two or more of these match what is happening, treat it as the scam.

01
Pressure to switch from the camera platform to a private DM very quickly.
02
Hints at being "young", "in school", "my parents don't know I'm on here".
03
Sexualised content or requests appearing immediately after the age framing.
04
Refusal to use any identity- or age-verified surface.
In their own words

Verbatim lines we have seen used

If you hear or read these, the script is running.

"

I'm not really 18, but please don't tell.

"

Don't use the platform, my parents check my computer.

"

Move to Snap, it's safer.

Take these steps

What to do right now

Sequential, low-risk actions. Do them in order.

STEP 01

Stop the conversation. Do not respond to escalation attempts.

STEP 02

Take a screenshot of the chat, profile and timestamps.

STEP 03

Report immediately to NCMEC CyberTipline (US/global) or IWF (UK) or your national child-safety hotline.

STEP 04

Report the on-platform account.

STEP 05

Do not pay any "delete fee" - paying never makes this go away.

Where it shows up

Platforms involved in current reports

Aggregated from the reports we have processed in this review window.

Has this happened to you?

Confidential submission - encrypted at rest. We use anonymised patterns to alert others.