If something just happened: parent emergency response
Four scenarios, four checklists. Calm, step-by-step.
The principle: triage first
In an emergency, most parents skip the preservation step and jump to “fix it.” That usually destroys the evidence you’d need later. First screenshot, then respond.
Four scenario checklists
Sextortion / threats over intimate images
See our sextortion response guide.
Stranger contact
- Screenshot profile, conversation, any photos sent.
- Report the account on the platform.
- If sexual or exploitative, CyberTipline.
- Review how the stranger reached the kid — close that door.
Account hijack
- Start account recovery on the platform, not password reset (if locked out).
- Check email rules and connected apps — attackers plant persistence there.
- Change password on any account that shared the password (usually several).
- Enable 2SV.
Scam / money loss
- Credit card: call issuer for chargeback.
- Gift card: report to the issuer; sometimes recoverable.
- Platform: report the scam account.
- Report at reportfraud.ftc.gov.
When to go to local police
- Threats of violence.
- Sexual content involving a minor (they can coordinate with federal agencies).
- Stalking.
- Physical property theft (e.g., the phone).
What to tell your kid in the moment
“This is scary, and you did the right thing telling me. We’re going to fix this. You’re not in trouble. Let’s take screenshots first, then I’ll walk through what to do.”
Full step-by-step: emergency page.
Common questions
What is the first principle in any online emergency?
Triage before fixing. Most parents skip preservation and jump straight to solving the problem, which usually destroys the evidence they would need later. Screenshot first, then respond.
A stranger has contacted my child. What do we do?
Screenshot the profile, the conversation and any photos sent. Report the account on the platform. If it was sexual or exploitative, report to the CyberTipline. Then work out how the stranger reached your child and close that route — that last step is the one most often skipped.
My child’s account has been hijacked. What is the order of operations?
Start account recovery on the platform rather than a password reset if they are locked out. Check email rules and connected apps, where attackers plant persistence. Change the password on every account that shared it, which is usually several. Then enable two-step verification.
When should I involve local police?
For threats of violence, sexual content involving a minor (they can coordinate with federal agencies), stalking, and physical theft such as the phone itself.
What should I say to my child in the moment?
“This is scary, and you did the right thing telling me. We are going to fix this. You are not in trouble. Let’s take screenshots first, then I will walk you through what to do.”