Table of Contents
When to Call Law Enforcement: How to Report Cybercrime Involving Kids
Step-by-step guide to reporting cybercrime involving children—NCMEC, IC3, FTC, and local police—including what evidence to preserve and what to expect from each agency.
A mother in Michigan found out her 14-year-old son was being extorted online. She called the local police, who told her cybercrime was “out of their jurisdiction.” She called the FBI, where the automated system routed her to a voicemail box. She spent three days trying to figure out where to report before finding the right contact. By that point, the extortion had escalated.
This outcome is avoidable. The reporting landscape for cybercrime involving children has defined channels, but those channels are not widely known. Most parents, like most police officers, do not know which agency handles which type of incident. This guide maps the reporting landscape clearly.
Key Takeaways
- Different agencies handle different types of cybercrime involving children—reporting to the wrong one wastes critical time
- NCMEC CyberTipline is the mandatory reporting point for child sexual exploitation material and sextortion
- IC3 (FBI) handles financial cyber fraud; FTC handles identity theft and consumer fraud
- Preserving evidence before reporting significantly increases the chance of investigation
- Local police can be useful for harassment and stalking cases but often lack cybercrime expertise
- Consult a lawyer before talking to any agency if your child may also be investigated
The Reporting Landscape: Which Agency Handles What
NCMEC CyberTipline: Child Sexual Exploitation
URL: cybertipline.org For: Online enticement of children, sextortion, child sexual abuse material, trafficking
The National Center for Missing and Exploited Children (NCMEC) operates the CyberTipline under a congressional mandate. Under 18 U.S.C. section 2258A, electronic service providers are required to report known instances of CSAM to NCMEC. Parents can also report directly.
When a CyberTip is filed, NCMEC triages it and forwards reports to appropriate law enforcement agencies based on content and suspected location of the perpetrator. They operate 24/7 with sophisticated tools for tracing perpetrators across jurisdictions.
For sextortion specifically: NCMEC is the primary reporting point. Our detailed guide on sextortion and what parents need to know in 2026 covers the immediate response steps; this article covers the reporting pathway that follows.
What to include in the report: The platform where contact occurred, the username of the perpetrator, screenshots of conversations, the timeline of contact, your child’s age, and whether any money was sent.
IC3: FBI Internet Crime Complaint Center
URL: ic3.gov For: Financial fraud, ransomware, cryptocurrency-related crime, business email compromise, identity-based financial crimes
The FBI Internet Crime Complaint Center processes complaints about internet-facilitated financial crime. It is the appropriate agency when your child was defrauded out of money online, someone is using your child’s identity to commit financial fraud, or cyberstalking crosses state lines or has a financial component.
IC3 reports go into a national database the FBI uses to identify patterns, prioritize investigations, and coordinate across field offices. Individual IC3 reports rarely result in direct contact from the FBI—this is a volume triage system—but filing is important for patterns that lead to larger investigations.
IC3 does not handle child sexual exploitation reports. Those go to the NCMEC CyberTipline.
FTC: Federal Trade Commission
URL: ReportFraud.ftc.gov For: Identity theft, phishing, impersonation scams, consumer fraud
The FTC handles consumer fraud and identity theft reports. For children specifically: identity theft using a minor’s Social Security number, scams targeting children through gaming platforms or social media, unauthorized charges on children’s accounts, and data broker removal requests.
FTC reports go into the Consumer Sentinel Network shared with law enforcement agencies. For identity theft specifically, IdentityTheft.gov walks through recovery steps and generates a personalized recovery plan. This is more actionable than the general ReportFraud portal for identity theft cases. See our guide on protecting your child’s SSN and identity.
Local Police
For: Cyberbullying, criminal harassment, threats, school-adjacent incidents, stalking
Local police are the right first call when your child is being criminally harassed or threatened online by someone known to you, a school-based incident requires a police report, or you need a report number for insurance or victim compensation claims.
The complication: most local police departments have limited cybercrime expertise. Officers may not know how to preserve digital evidence, may not be familiar with NCMEC’s process, and may incorrectly tell you that online incidents are outside their jurisdiction. Ask specifically to speak with a detective assigned to cybercrimes or crimes against children. If the department does not have one, ask that your report be forwarded to the county sheriff or state police cybercrime unit. Get the report number regardless.
The School
Schools are not law enforcement, but they have both the authority and obligation to act on cyberbullying and harassment incidents involving students, even when they happen off school grounds, if they substantially disrupt the school environment. Report to the school in writing for cyberbullying involving other students, online harassment using school-issued devices, and threats of school violence. The school’s response is separate from and does not substitute for law enforcement reporting.
What Evidence to Preserve Before Reporting
This step is critical and time-sensitive. Evidence that exists now may be deleted by the perpetrator, by platform moderation, or automatically before law enforcement acts.
Screenshots: Screenshot everything before reporting. Conversations, profiles, usernames, timestamps. Take screenshots of full pages, not cropped images.
URLs: Copy and save the full URLs of profiles, posts, and conversations.
Email headers: For threatening or suspicious emails, preserve the full email header. In Gmail, this is under the three-dot menu then Show original. In Outlook, File then Properties then Internet Headers. Headers help investigators trace the origin.
Transaction records: If money was sent, preserve all records: platform screenshots, bank or credit card records, cryptocurrency transaction IDs.
Do not contact the perpetrator or ask them to stop. Do not delete any messages. Do not screenshot and store content that constitutes CSAM—do not retain or transmit this material even to show law enforcement.
Agency Response Timelines: What to Expect
| Agency | Response Type | Typical Timeline | When to Expect Direct Contact |
|---|---|---|---|
| NCMEC CyberTipline | Tip forwarded to LEA | Days to weeks | Rare from NCMEC; from assigned LEA |
| IC3 (FBI) | Report added to database | Immediate receipt confirmation | Only if case flagged for investigation |
| FTC ReportFraud | Case number generated | Immediate | Almost never from FTC directly |
| Local police | In-person investigation | Hours to days | Within 24-72 hours if accepted |
| School | Administrative investigation | Days | 1-5 school days |
Law enforcement response depends heavily on severity, available resources, and jurisdictional priorities. Federal agencies focus on patterns and organized crime; individual incidents are rarely investigated directly unless unusually severe or part of a larger pattern.
When a Lawyer Becomes Necessary
Consult a juvenile defense attorney before talking to any agency if there is any possibility law enforcement might consider your child a suspect in the incident.
For civil actions against a perpetrator, a platform, or a business that enabled the harm, retain an attorney from the start. Civil cases require evidence preservation strategies, preservation letters to platforms, and awareness of applicable statutes of limitations.
For identity theft recovery where your child’s identity has been significantly compromised, an attorney specializing in consumer or identity theft law can navigate the multi-agency credit bureau dispute process more efficiently.
The Conversation With Your Child
Lead with the fact that what happened was not their fault—regardless of what decisions they made leading up to it. Frame reporting as something you are doing together to hold the responsible party accountable, not as an investigation of your child. Ask your child what they want from the process and manage expectations about what different agencies can do. For significant trauma, consult with a therapist who specializes in childhood trauma before, during, or after the reporting process.
Our guide on cybersecurity skills for kids covers building the broader framework for these conversations before incidents happen.
What to Watch For Over the Next 3 Months
The FBI IC3 has reported year-over-year increases in sextortion incidents targeting minors, with significant spikes during summer months when teenagers are online more and with less adult oversight. The NCMEC CyberTipline saw a 40% increase in sextortion reports in 2024.
Several states have passed legislation specifically requiring law enforcement training on cybercrime affecting children. Check your state attorney general website for current resources and reporting pathways specific to your state.
Frequently Asked Questions
The police told me they cannot do anything about something that happened online. Is that true?
Often no. Local police frequently underestimate their jurisdiction over cybercrime. If local police decline to act, escalate to the county sheriff, state police cybercrime unit, or FBI field office in your area. For child sexual exploitation, NCMEC CyberTipline is the appropriate parallel reporting channel regardless of local police response.
Do I need to report to multiple agencies, or just one?
Report to every applicable agency—it is not redundant. Each maintains separate databases for different purposes. An IC3 report contributes to national financial crime pattern analysis. An NCMEC CyberTip triggers mandatory law enforcement forwarding. An FTC report creates a case number for identity theft recovery. These functions do not duplicate each other.
What if the person who harmed my child is another minor?
The reporting process is the same. Law enforcement decides how to handle cases involving juvenile perpetrators. You should still report to the appropriate agency, preserve evidence, and report to the school if both students attend the same school. Juvenile status of the perpetrator is not a reason for victims not to report.
How do I explain this to my child without making them feel blamed or re-traumatized?
Lead with the fact that what happened was not their fault, regardless of what decisions they made. Frame reporting as something you are doing together to hold the responsible party accountable. For significant trauma, consult a therapist who specializes in childhood trauma before or during the reporting process.
About the author Ricky Flores is the founder of HiWave Makers and an electrical engineer with 15+ years of experience building consumer technology at Apple, Samsung, and Texas Instruments. He writes about how kids learn to build, think, and create in a tech-saturated world. Read more at hiwavemakers.com.
Sources
- National Center for Missing and Exploited Children. “CyberTipline.” missingkids.org/gethelpnow/cybertipline.
- Federal Bureau of Investigation. “Internet Crime Complaint Center.” ic3.gov.
- Federal Trade Commission. “Report Fraud.” reportfraud.ftc.gov.
- Federal Trade Commission. “IdentityTheft.gov.” identitytheft.gov.
- 18 U.S.C. section 2258A — Electronic Service Provider Reporting Requirements.
- FBI Internet Crime Complaint Center. “2024 Internet Crime Report.” ic3.gov.
- National Center for Missing and Exploited Children. “2024 CyberTipline Report.” missingkids.org.
