Catfishing: How Predators Build Fake Teen Personas, Groom Across Platforms, and What the Warning Signs Look Like

The voicemail came from the local sheriff’s department on a Wednesday afternoon. A 13-year-old girl in suburban Ohio had been communicating for four months with someone she believed was a 16-year-old boy from a neighboring town she’d met in a Roblox server. She’d moved the conversation to Snapchat, then to a private messaging app, and had shared photos she was now desperately trying to recover. The “boy” was a 34-year-old man. The profile picture came from a stolen Instagram account belonging to a real teenager in Michigan who had no idea his photos were being used. The National Center for Missing and Exploited Children (NCMEC) received more than 32 million reports of suspected child sexual exploitation in 2023, with online enticement — the legal category encompassing catfishing for exploitation — representing the fastest-growing report category. The methods are consistent enough across cases that researchers and law enforcement have documented a recognizable tactical playbook. Understanding that playbook is protective.

Key Takeaways

• Catfishing predators construct fake identities using stolen photographs of real teens, plausible backstories, and rehearsed conversation patterns designed to mirror a teen’s interests.
• Grooming follows a documented progression: identity establishment, trust building, isolation, desensitization, and exploitation — and each stage can span weeks to months.
• Platform migration is a deliberate tactic: predators move targets from public gaming spaces to increasingly private channels (DMs, then Snapchat or WhatsApp) to reduce oversight and evidence trails.
• NCMEC, the FBI, and the Internet Watch Foundation have all documented the role of gaming platforms specifically as initial contact points, replacing social media as the primary first-contact venue for online enticement.
• Teens who feel unusually close to someone they’ve never met in person, who are keeping the relationship secret, or who feel guilty about aspects of the relationship are displaying warning signs that warrant a parent conversation.

What a Fake Persona Actually Looks Like

The effectiveness of catfishing lies not in elaborate deception but in sufficient plausibility. A predator does not need to be convincing to a skeptical adult — only to a teenager who wants to believe they’ve made a genuine connection.

The Photo Problem: Stolen Identities

Catfishing profiles almost universally use stolen photographs of real people. Predators target the public social media accounts of teenagers with modest but not huge followings — a real 15-year-old with 200 Instagram followers has enough photos to build a convincing profile without the kind of celebrity recognition that makes reverse image searches likely.

The photos are selected to maximize appeal to the target demographic. Research by the Internet Watch Foundation found that fake profiles used to approach teen girls typically feature conventionally attractive teenage boys with active-looking social lives. Fake profiles approaching boys typically use photos of teenage girls or young women. The selection is calculated, not casual.

Google Lens and TinEye allow reverse image searches — uploading a photo to see where else it appears online. If a profile photo appears on a completely different person’s account, the profile is using stolen images. This is one concrete skill teens can learn and use.

The Backstory Architecture

A convincing catfish backstory includes:

• An age close to the target’s but slightly older (a 13-year-old target is approached by a claimed 15 or 16-year-old)
• A reason for not attending the same school (just moved, goes to private school, homeschooled)
• Interests that mirror the target’s — established through the target’s own public posts before initial contact
• A plausible reason for limited video call availability (broken camera, shared device, strict parents)
• A small set of personal “problems” designed to elicit empathy and protective feelings

The FBI’s Behavioral Analysis Unit has documented that predators frequently position themselves as slightly older peers who are experiencing difficulties — parental conflict, social isolation, academic pressure — that parallel the target’s own challenges. This creates mutual vulnerability and shared confidence, accelerating trust development.

The Grooming Progression: Six Documented Stages

Dr. Michael Seto of the Royal Ottawa Mental Health Centre and colleagues have contributed to the research literature on online grooming, identifying consistent stage progressions that law enforcement and clinicians now use as reference models. Understanding the stages helps parents and teens recognize when a relationship is following a manipulative pattern rather than an organic one.

Stage 1: Target Selection and Contact Initiation

Predators identify targets based on public signals of vulnerability and openness: teens who post extensively about feeling lonely or misunderstood, who express relationship difficulties, who appear to lack close peer connections, or who respond enthusiastically to any social media interaction. Gaming platforms surface these signals naturally — a teen who posts in a gaming server about not having friends to play with has just identified a vulnerability.

Initial contact mimics normal peer interaction: a comment on a post, a compliment on a gaming achievement, a question about a shared interest. There is nothing alarming about stage one. This is by design.

Stage 2: Relationship Establishment and Identity Mirroring

In this stage, the predator learns the target’s interests, values, and social landscape through active conversation and by reviewing all available public content. They then begin reflecting those interests back, creating the experience of being deeply understood.

“I feel like you’re the only person who actually gets me” is a phrase that appears with remarkable consistency in documented catfishing cases. The teen is not experiencing understanding — they are experiencing a manufactured mirror of their own expressed identity. The effect is intensely appealing to adolescents who are developmentally in the process of identity formation and peer belonging.

Stage 3: Platform Migration

Moving the relationship from a public or semi-public space (a gaming server, a social media comment section) to a private channel (direct messages, then off-platform to Snapchat, WhatsApp, or Signal) is a deliberate tactical step.

The stated reasons are always benign: “I can respond faster on Snapchat,” “Let’s use Discord so we can voice chat,” “My parents monitor my Instagram.” Each migration reduces the evidence trail, decreases the likelihood of third-party observation, and increases the sense of private exclusivity in the relationship.

Stage 4: Isolation and Exclusivity

The predator begins positioning themselves as the target’s primary emotional relationship, sometimes explicitly and sometimes through patterns that achieve the same result. Conversations escalate in frequency and intensity. The “friend” becomes upset when not responded to quickly. Comments about the target’s other relationships introduce subtle criticism: “Your IRL friends don’t understand you like I do,” “You seem really different when you’re around them.”

This stage targets a normal developmental need — for a relationship that feels uniquely close and understanding — and exploits it to reduce the teen’s connection to family and peers who might notice warning signs.

Grooming Stage	Duration (Typical)	Behavioral Signal for Parents
1. Target Selection	Days	Teen receives unsolicited contact from unfamiliar account
2. Identity Mirroring	1–4 weeks	Teen mentions new online friend with strong enthusiasm; feels “really understood”
3. Platform Migration	2–6 weeks	Teen moves to new apps; becomes secretive about communications
4. Isolation	4–12 weeks	Teen spending more time online with this contact than with in-person friends; friction if parents ask about the relationship
5. Desensitization	4–16 weeks	Relationship content shifting toward romantic/physical; receiving or sharing inappropriate content
6. Exploitation	Variable	Active harm: image-based abuse, in-person meeting arrangements, financial requests

Stage 5: Desensitization

Once sufficient trust and exclusivity have been established, the predator begins introducing sexual content gradually. This is rarely abrupt. It may begin with romantic language, escalate to discussion of sexual topics framed as normal peer conversation, and progress to requests for or sharing of sexual images.

The graduated nature is psychologically important: each small step normalizes the next. A teen who has been in a months-long intense friendship may feel that declining to share an image would damage the relationship they’ve invested in. The NCMEC’s CyberTipline data shows that online enticement often occurs within weeks of initial contact for some predators, while others take months — the variation reflects the predator’s assessment of readiness, not a fixed timeline.

Stage 6: Exploitation

Exploitation takes different forms. Image-based sextortion — receiving explicit images from the teen and then threatening to release them unless more images or money are provided — has grown dramatically, with the FBI’s Internet Crime Complaint Center reporting a 322% increase in sextortion reports involving minors between 2021 and 2023. In-person meeting arrangements represent a physical safety crisis. Financial manipulation (“I need help with a bus ticket to come visit you”) targets teens with access to family payment methods.

Platform-Specific Vulnerabilities

Gaming Platforms as First-Contact Zones

The FBI’s 2023 Annual Report on Internet Crime noted that gaming platforms had surpassed social media as the most commonly reported initial contact venue for online enticement of minors. The combination of factors is clear: gaming creates persistent shared activity that builds rapport naturally, platforms often have weaker age verification than major social media, and teen engagement hours are high.

Roblox’s young user base makes it a documented contact point for predators approaching children aged 9–13. Discord’s gaming community infrastructure means older teens encounter unvetted adults in shared servers regularly. Even games with no explicit social features — players who exchange Gamertags or Riot IDs to play together have shared a piece of identifying information with someone whose real identity is unknown.

The Snapchat and WhatsApp Migration Target

These platforms are favored migration destinations because of perceived ephemeral messaging (Snapchat’s disappearing messages) and end-to-end encryption (WhatsApp, Signal). Neither feature protects against screenshot capture. Both features reduce the evidentiary trail and the ability of parents monitoring device activity to observe concerning content.

Warning Signs: The Checklist for Parents

These behaviors, individually, may have innocent explanations. In combination, particularly in a relationship involving an online-only contact the parent has never verified as a real person of the described age, they warrant a direct conversation.

Relationship and communication signs:

• Unusually strong emotional attachment to someone the teen has never met in person
• Secretive about the relationship’s content — closes tabs, changes topics, turns the phone face-down
• New apps installed without explanation, especially messaging apps with encryption or disappearing content
• Online much later than usual, particularly for a specific contact
• Defensive or distressed when the relationship is mentioned

Content and behavior signs:

• Receiving gifts, gaming currency, or money from the online contact
• Mood significantly tied to communication from this contact (elation when receiving messages, distress when not)
• Discussions of meeting in person with an online contact
• Teen seems to be keeping something secret that causes guilt or anxiety

Identity signs:

• The contact has never video-called, or always has camera problems on calls
• The contact’s profile photos appear only on one account (reverse image search finds no other results)
• The contact’s story has inconsistencies that the teen has noticed but excused

What to Do if You Suspect Your Teen Is Being Catfished

Do not immediately confiscate the device or confront the suspected predator. Law enforcement agencies explicitly advise against this. Confiscating the device deletes evidence. Confronting the predator gives them time to delete their account and disappear.

Approach the teen with support, not interrogation. Teens who have been groomed often feel genuine affection for the catfishing persona, mixed with guilt and confusion. A confrontational approach may cause them to become protective of the relationship. Start with expressions of care and curiosity, not accusation.

Preserve evidence. Take screenshots of the profile, conversation history, and any sent or received content. Write down platform names and usernames.

Report to NCMEC’s CyberTipline. The CyberTipline at missingkids.org is the federally designated clearinghouse for suspected online exploitation of children. Reports are forwarded to law enforcement agencies with jurisdiction. The toll-free number is 1-800-THE-LOST (1-800-843-5678).

Contact local law enforcement. File a report. Bring the screenshots and written documentation. If you believe your teen is in immediate physical danger, call 911.

For guidance on building the kind of parent-teen communication that makes teens more likely to report concerning relationships before harm occurs, see our article on how to talk to teens about online safety without shutting down the conversation.

What to Watch For Over 3 Months

Month 1: Teach your teen the reverse image search as a specific skill — not as a rule imposed by parents, but as a practical tool. Practice it together on a few random profile photos, including from real accounts, to demonstrate how it works and how quickly it reveals stolen images.

Month 2: Review the platform migration pattern together. Explain why moving from a public gaming server to a private messaging app is a recognized step in grooming — not because all platform migrations are suspicious, but because it’s worth noticing when it happens with someone not verified as a real peer.

Month 3: Check in about any online relationships that feel intense or private. Frame it as curiosity about their social world, not suspicion. The goal is establishing the norm that online relationships — like in-person ones — are something teens can talk about with a trusted parent.

Frequently Asked Questions

At what age are children most vulnerable to catfishing by predators?

NCMEC data shows that the 12–15 age range represents the highest-risk period, with 13 being the most commonly reported age for online enticement initial contact. This aligns with the developmental stage when peer relationships become primary and parental oversight typically decreases with the transition to middle school.

Can a catfishing predator’s fake identity be verified before harm occurs?

Several tools enable verification. Reverse image search (Google Lens, TinEye) reveals stolen photos. Requesting a live video call that cannot be pre-recorded exposes camera-shy predators. Asking for location-specific verification (“send me a photo with today’s local newspaper”) is a tactic teens can use. Inconsistencies in backstory over time are a reliable signal.

What is sextortion and how does it connect to catfishing?

Sextortion is the use of intimate images — often obtained through catfishing trust-building — as leverage to demand more images, money, or in-person meetings. The FBI documented a 322% increase in sextortion reports involving minors between 2021 and 2023. If a teen is being threatened with image release, they should immediately tell a parent and contact the FBI (tips.fbi.gov) or NCMEC.

Should I install monitoring software on my teen’s device?

Parental monitoring tools can provide visibility into concerning conversations, but research on adolescent development suggests that transparent monitoring — where the teen knows monitoring exists — is more effective at maintaining trust than covert surveillance. The most protective factor consistently identified in research is whether the teen feels comfortable reporting concerning situations to a parent, which covert surveillance can undermine.

What should a teen do if they realize they’ve been catfished?

Stop all communication immediately. Do not threaten or confront the catfisher — this can escalate the situation. Tell a trusted adult. Save screenshots of the conversation before blocking. Report the profile to the platform and to NCMEC’s CyberTipline. If any images were shared, know that the Stop It Now helpline (1-888-PREVENT) provides confidential support for minors in this situation.

---

About the author

Ricky Flores is the founder of HiWave Makers and an electrical engineer with 15+ years of experience building consumer technology at Apple, Samsung, and Texas Instruments. He writes about how kids learn to build, think, and create in a tech-saturated world. Read more at hiwavemakers.com.

Sources

1. National Center for Missing and Exploited Children. (2024). CyberTipline 2023 Report. NCMEC. https://www.missingkids.org/gethelpnow/cybertipline
2. Federal Bureau of Investigation. (2024). 2023 Internet Crime Report. IC3. https://www.ic3.gov/Media/PDF/AnnualReport/2023_IC3Report.pdf
3. Seto, M. C., Hanson, R. K., & Babchishin, K. M. (2011). Contact sexual offending is associated with online sexual offending in child pornography offenders. Sexual Abuse: A Journal of Research and Treatment, 23(1), 124–145. https://doi.org/10.1177/1079063210369013
4. Internet Watch Foundation. (2023). Annual Report 2023. IWF. https://www.iwf.org.uk/about-us/who-we-are/annual-report-2023/
5. Wolak, J., Finkelhor, D., & Mitchell, K. J. (2012). How often are teens arrested for sexting? Data from a national sample of police cases. Pediatrics, 129(1), 4–12. https://doi.org/10.1542/peds.2011-2242
6. FBI. (2023). Sextortion: A Growing Threat Targeting Minors. FBI.gov. https://www.fbi.gov/news/stories/sextortion-a-growing-threat-targeting-minors
7. Cyberbullying Research Center. (2024). Online Grooming and Child Sexual Exploitation: An Overview. Cyberbullying Research Center. https://cyberbullying.org