Protect children by understanding the activity and keeping help available
Online safety for children combines age-appropriate boundaries, safer accounts and devices, practical help with social pressure, and a reliable way to tell an adult when something goes wrong. Games, video services, school tools, and group chats do not present identical situations. A download request needs a different response from bullying, and a suspicious purchase needs a different response from possible exploitation. Parents cannot resolve those differences through one filter or by watching every click. This guide explains the main risks and response choices without treating ordinary online enjoyment as evidence of danger. It also distinguishes preserving ordinary messages from handling sexual images of minors, where creating or forwarding additional copies is not an appropriate evidence-gathering step.
Start with the places your child actually uses
Ask which games, apps, websites, school services, and messaging spaces matter to your child. Learn what the child does there: playing with known friends, making art, watching videos, completing work, or talking with others. A product’s category does not reveal every feature. A game can include private messages, purchases, livestreaming, and links to communities outside the game.
Look at the relevant account and device together when practical. Identify public information, contact options, purchases, and the reporting tools. Use the service’s current guidance and applicable age rules rather than borrowing another platform’s settings or entering a false age to obtain access. The useful result is understanding the actual environment, not simply recognizing an app’s name.
Separate the kinds of problem you are trying to prevent
Content risk concerns what a child encounters; contact risk concerns interactions with other people. Account and device risks include stolen logins or unwanted software, while purchase risks include accidental spending and deceptive offers. These categories overlap but suggest different checks. A content filter does not decide whether an in-game friend should receive a recovery code, and a strong password does not resolve a harmful group conversation.
Use parental controls for a defined purpose
Controls can limit downloads, purchases, communication, location sharing, or selected content depending on the device and service. Choose controls that address the actual activity and explain their purpose in age-appropriate language. Australia’s eSafety parental-control guidance presents them as part of a broader approach, with attention to privacy and communication. A control is a guardrail rather than proof that no harmful interaction can occur.
For younger children, closer supervision and restricted communication may be appropriate. As children develop experience, review which responsibilities they can manage with support. A platform’s technical permission is not the same as a judgment that its full social environment suits a particular child. Parents should consider maturity and needs alongside the service’s rules and features.
Test the chosen setting in the relevant account without exposing the child to risky material. For example, confirm that a purchase requires the intended approval or that a messaging option has the selected audience. A control configured on one device may not cover a separate account or another app. Know the boundary before relying on it. When a control uses a parent approval or PIN, protect that route and understand how it is recovered. A child should still have an approved way to request legitimate access, so an ordinary homework need does not become pressure to bypass the arrangement.
Online friendship does not establish permission for every request
People can be friendly while making an unsafe request. Pay particular attention to pressure for secrecy, personal information, account access, images, money, or a move to another private communication space. These concerns can involve strangers or someone the child knows. The child does not have to decide whether a person is a criminal before stopping an uncomfortable conversation and asking for help.
eSafety’s unwanted-contact guidance for parents emphasizes open, calm communication and reducing unsafe contact. If a person pressures a child to conceal interactions or cross a boundary, involve a trusted adult promptly. Avoid confronting or impersonating the child to continue a suspected exploiter’s conversation yourself. Use appropriate reporting and professional assistance instead.
A gaming example: distinguish the reward from the access request
Imagine a child is offered a rare game item by someone who asks for an account code first. The item is attractive because the account holds progress, friends, and valued purchases. The requested code may enable account access rather than prove the child’s eligibility for a reward. This is a fictional example; the safe response is to stop the trade and ask an adult to check the legitimate game’s process.
The Australian Cyber Security Centre’s parent guide discusses gaming-related scams, including offers of upgrades or currency. Explain that passwords and sign-in or recovery codes are not items to trade with other players. If a code was already shared, use the game’s official account-recovery route and review what access may have changed.
A child who reports the mistake has provided useful information. Start by helping protect the account and understanding the interaction, rather than declaring that asking for help automatically ends all gaming. Boundaries may still need to change, but early reporting should lead to assistance. An adult’s response influences whether the next problem is disclosed promptly.
Purchases need a clear approval and a recovery route
Inspect how the game or app charges for items, subscriptions, and gifts. Use supported purchase approvals and spending restrictions suitable for the child, and decide which payment methods belong on the account. Read the platform’s current process for disputed or accidental purchases. A saved card should not become a route for pressured spending merely because entering the account is easy.
When a suspicious payment occurs, contact the relevant platform or payment provider through its established channel. Preserve transaction details without publishing them. Do not promise that every purchase can be refunded, because the circumstances and provider’s rules matter. A response should protect the payment route while helping the child understand what the request actually authorized.
Privacy includes the details in the content itself
Review profile visibility, friend or follower lists, message permissions, and location-sharing features. Also look at what posts reveal through words and images: a school name, a home address, a timetable, or a recognizable location. A restricted audience reduces selected exposure but does not ensure every recipient handles the information responsibly. Ask permission before publishing personal details about the child yourself. Adult sharing is part of the same privacy environment.
Respond to bullying with support and a proportionate record
If a child reports hurtful or threatening contact, listen to what happened and what would help them feel safer. Avoid demanding retaliation or treating the problem as something they must solve alone. Use the platform’s report, mute, or block tools as appropriate, and involve the school when the situation concerns school relationships or systems. eSafety’s unsafe-contact guidance explains recording relevant details and stopping further contact.
Ordinary nonexplicit messages, dates, usernames, and platform details can help explain an incident. Keep the material restricted to people who need it for support or reporting rather than circulating it through a parent group. The objective is to make the relevant event understandable without expanding the child’s exposure. If threats suggest immediate danger, seek local emergency assistance rather than wait for an app report to be reviewed.
Changes in device use or behavior can invite a calm conversation, but they do not independently prove bullying or exploitation. Ask what the child experienced and obtain appropriate support when the concern exceeds what the family can manage. Avoid diagnosing a child from a checklist of ordinary changes. Focus on the child’s account of events and the specific safety need.
Sexual images of minors require a different evidence boundary
Do not download, forward, request, or create screenshots of suspected sexual images of a person under 18 as an evidence-collection step. Preserve nonexplicit information such as usernames, URLs, platform names, dates, and relevant text where safe, and seek specialist reporting guidance. eSafety explicitly distinguishes ordinary message evidence from sexual images of minors. A general instruction to save screenshots must never be read as permission to create additional explicit copies.
Use child-exploitation reporting and removal resources appropriately
In the United States, NCMEC’s CyberTipline accepts reports of suspected online child sexual exploitation and connects information with the appropriate authorities. Use the official reporting process and its instructions. Elsewhere, use the relevant local child-protection or law-enforcement route. An immediate danger requires local emergency help; an online report is not a substitute for urgent protection.
NCMEC’s Take It Down can help limit sharing of qualifying images made when the person was under 18 on participating public or unencrypted services. It creates a hash on the person’s device without uploading the image. NCMEC says not to send, share, or download images to use the service; it is for material already on the person’s device. Follow those instructions and do not ask a child to send an image to a parent for submission.
The service does not guarantee removal from every site or every past copy. Reporting threats and obtaining support remain important alongside attempts to limit circulation. Reassure the child that they deserve help and that threats or exploitation are not something they must manage alone. Avoid making the child responsible for negotiating with the person threatening them.
Help children leave disturbing content without reproducing it
A child who encounters upsetting material can close it, move away from the interaction, and tell a trusted adult. They do not need to keep replaying it to demonstrate why it was upsetting. Parents can help use the platform’s reporting tools and review the route through which it appeared. Do not seek out additional harmful content as a teaching exercise. Focus on the immediate support need and a proportionate change to the child’s access or settings.
School accounts have a separate responsible team
Identify which devices and services the school manages and how parents or children report account misuse, inappropriate contact, or bullying there. The school may control settings a parent cannot change. Do not install unapproved monitoring software or bypass school controls to create your own version of management. Contact the designated staff and explain the affected service, time, and observed issue.
Help the child keep school and personal accounts distinct, use the correct sign-in route, and avoid sharing passwords with peers. A message appearing in a school tool still needs context if it asks for an unusual action. Where an incident crosses school and personal platforms, agree who is handling each part. Share only relevant nonexplicit records through suitable channels.
Keep accounts and devices recoverable
Use supported updates, unique account credentials, appropriate additional authentication, and recovery arrangements the authorized adult and child understand. The FTC’s guidance on protecting children’s devices emphasizes updates for apps, browsers, and operating systems. Technical maintenance supports the social protections but does not replace them. A well-updated device can still receive a manipulative message.
Choose the next action from the actual risk
A gaming code scam calls for account recovery; bullying calls for support and proportionate reporting; possible exploitation calls for specialist help and careful evidence handling. A new device or app calls for an appropriate setup review. These are different decisions, so avoid solving every concern with the same blanket restriction or the same reassurance. The family should know where help comes from even when the parent does not yet know the full technical answer.
Start with one real activity and identify its contacts, information, spending, and support routes. Make changes that fit the child’s age, experience, and circumstances, and explain what those changes are intended to protect. The durable goal is a child who can recognize an uncomfortable request, leave the interaction, and reach a trusted adult, supported by settings and adults able to respond. Practical routines and parent-child scripts can then be developed in the companion family-habits guide.
