A child protection investigator I interviewed told me that 80% of the cases that cross her desk had warning signs visible on the kid’s phone for weeks before anyone noticed. The signs weren’t hidden. They just didn’t look the way parents expect grooming to look.
When I started researching this piece, I expected to write about creepy strangers in chat rooms. That’s the version of online grooming most of us grew up being warned about — the unknown adult pretending to be a kid, sliding into a chat with obvious red flags.
That version still happens. But the investigator I spoke with — Detective Sarah Chen, who has worked online child exploitation cases for nine years in a major metro department — told me something that reframed the whole story.
“The dangerous ones don’t look dangerous,” she said. “They look like a friend. They look like a tutor. They look like another kid the same age. By the time it looks like grooming, the trust is already built.”
Chen agreed to walk me through the seven patterns she sees most often. Most of them, she said, would be visible to a parent looking at the right things on the right day. The problem isn’t access. The problem is knowing what to look for.
Pattern 1: The Slow Move Off-Platform
It almost never starts on WhatsApp or Signal. It starts somewhere public — a game chat, a Discord server, a comment thread on TikTok. Then, somewhere between week one and week three, the new “friend” suggests moving to a private app.
“The move itself is the signal,” Chen told me. “A real friendship doesn’t need a more private channel. An adult trying to isolate a child does.”
What parents miss: They check the public app. They don’t notice when a new contact appears in WhatsApp with no obvious origin. The new contact didn’t come from school, didn’t come from the family, didn’t come from any context the parent recognizes — but the parent never sees the contact list, so the question never gets asked.
Pattern 2: The Secret-Keeping Test
Early in a grooming relationship, the adult will plant a small secret. Nothing serious. “Don’t tell your mom we’re friends, she’ll think it’s weird.” “Let’s keep this between us.” “Our thing.”
It sounds like normal teen behavior because it overlaps with normal teen behavior. Kids keep secrets from their parents. That’s developmental. The difference is that grooming secrets are tested and escalated. The first secret is small. The second is bigger. By the time the secret is something the child genuinely shouldn’t be keeping, the pattern of keeping it is established.
Chen said this is the pattern that haunts her most. “The kid usually knows something is wrong by month two. But they’ve been keeping the secret long enough that admitting it feels like admitting they lied. So they keep keeping it.”
Pattern 3: The Compliment Floor
Healthy compliments are occasional and context-driven. Grooming compliments are constant and identity-targeted. “You’re so mature for your age.” “Most people don’t get me, but you do.” “You’re not like other girls/boys.”
These compliments do something specific: they build a self-image in the child that’s only accessible through this relationship. The child becomes attached not to the person but to who they get to be around the person.
What parents miss: This pattern is almost invisible in single messages. You have to see the volume and the frequency. Reading one message a day doesn’t catch it. Seeing a week of chat history at once does.
Pattern 4: The Schedule Sync
Grooming relationships eat time. Predictable time. The adult learns when the parent is at work, when the child is alone, when school ends, when the phone is unsupervised. Messages cluster in those windows.
If you ever look at a chat history and notice that 90% of the conversation happens between 3 and 5 PM on weekdays — or between 10 PM and 1 AM after the household sleeps — that’s not a friendship pattern. That’s a calculated exploit of supervision gaps.
Pattern 5: The Image Escalation
It starts with selfies, normal ones. Then “send one in your school uniform.” Then “what are you wearing right now.” Then something more.
Each step is small enough that refusing feels like overreacting. That’s the design. The child justifies each new image because they sent the last one. The adult is patient. Chen told me she’s seen cases where the escalation took five months.
What parents miss: By the time an inappropriate image is sent, it’s usually been deleted from the child’s phone immediately. Without tools that capture content before deletion, the parent sees only the conversation around the image, which sounds harmless.
Pattern 6: The Isolation From Real Friends
Healthy online relationships add to a kid’s social life. Grooming relationships subtract from it. Listen for phrases the child starts repeating: “My friends don’t get me.” “Nobody at school understands.” “You’re the only one I can really talk to.”
Those phrases didn’t come from inside the child. They came from someone who needed the child to believe them.
Pattern 7: The Sudden Mood Cliff
When a kid is being groomed and starts to sense something is wrong, the mood change is often dramatic and out of context. A kid who was fine on Tuesday is withdrawn on Wednesday with no school-based explanation. Or a kid is unusually elated for stretches that don’t match anything happening in the visible part of their life.
“Mood changes are the latest signal, not the earliest one,” Chen said. “By the time you see it in the face, it’s been in the phone for a while.”
What Parents Can Actually Do
I’ll be honest about something. Reading this list and then going to ask your kid about it is the worst possible response. Kids who are being groomed are also being trained not to talk about it — by the groomer, and often by their own shame.
What works, according to Chen, is two things in combination.
The first is the conversation you have before anything happens. Not the lecture about strangers — the open, ongoing conversation about who the kid talks to, what they like about those people, and what would feel weird if it happened. Kids who have language for this stuff use it earlier.
The second is having enough visibility into the digital environment to catch patterns the kid can’t yet articulate. That doesn’t mean reading every message. It means having the kind of tool that surfaces unfamiliar contacts, flags keyword patterns from real grooming language, and shows you frequency and timing — not just content.
A few tools do this well. VigilKids is the one I keep recommending to the parents who ask me, mostly because its keyword alert system was built around exactly the patterns Chen described — phrases like “don’t tell,” “between us,” “send me,” and “meet up” trigger immediate notifications instead of getting buried in chat logs. It also surfaces unfamiliar contacts on its own, so you don’t have to know what you’re looking for. VigilKids’ approach is closer to a smoke detector than a surveillance camera, which is the only version of this technology I’d ever defend to a teenager.
But the tool is the second thing. The first thing — the conversation — is what makes the tool useful when something gets flagged. Without that conversation, you have evidence and no way to use it.
What Chen Wanted Me to End On
I asked Chen, after we’d been on the phone for almost two hours, what she wished parents understood that they don’t.
She paused for a long time. Then she said: “Grooming doesn’t look like a kidnapping. It looks like a friendship that’s a little too good. By the time the parent can see it for what it is, the kid has been carrying it alone for months. The job isn’t to catch the predator. The job is to be someone the kid would tell. Everything else — the tools, the monitoring, the alerts — is just buying time until that conversation happens.”
I’ve thought about that line every day since.
