UK Crime Agency Warns Parents Against Posting Kids' Photos Online

The UK National Crime Agency has issued landmark guidance recommending parents avoid posting children's photographs on public social media accounts, citing the growing threat of AI tools that convert ordinary images into child sexual abuse material.

The guidance, developed jointly with the Internet Watch Foundation, a child safety watchdog, represents the first official acknowledgment of how widely available AI manipulation tools have fundamentally changed online safety risks for minors. According to the Guardian, which first reported the guidance, the IWF identified 8,029 AI-generated images and videos of realistic child sexual abuse material in 2025, marking a 14 percent increase from the previous year.

The mechanics of the threat

Criminals are now using publicly accessible AI tools to create explicit material without ever contacting victims directly. The process involves scraping photographs from social media, school websites, or other public sources, then using so-called "nudification" applications to manipulate the images.

Lorna Sinclair, a child sexual abuse education manager at the NCA, noted that most parents remain unaware of the problem. "The average parent or carer does not post a picture of a child online thinking that it might be scraped to be turned into CSAM," she said.

The IWF has documented cases where under-18s were blackmailed after their images were manipulated, and UK schools have been targeted by extortionists who scraped pupil photographs from institutional websites.

Recommended actions

The guidance outlines three core steps for parents: checking privacy settings on social media accounts, reviewing who can access images of their children, and maintaining open discussions about photo-sharing permissions with schools and organizations.

Specific recommendations include conducting audits of existing social media posts to identify images showing a child's face, body, or school uniform, and considering whether to delete or restrict access to those posts. The guidance also suggests parents review consent forms previously signed with schools or sports clubs, which may have been executed before current AI capabilities existed.

Tim Wright, a senior NCA manager, emphasized the agencies are not dictating parental behavior but raising awareness. For those who choose to share photos, the guidance recommends using "close friends" groups or limiting visibility to selected contacts.

Technical reality

Dan Sexton, the IWF's chief technology officer, acknowledged discomfort with the guidance but said alternatives are limited. "I would be very cautious because there is no protection," he stated.

The UK's early warning working group, which includes both the NCA and IWF, has separately recommended schools remove identifiable photographs of pupils from their websites and social media accounts following blackmail incidents.

Why it matters

This guidance marks a significant shift in how authorities approach online child safety. Unlike traditional grooming threats that require direct contact with victims, AI manipulation tools allow criminals to generate abuse material from any publicly available photograph. The technology has effectively eliminated the protective barrier that physical distance once provided, forcing a reassessment of what constitutes safe sharing practices. For organizations handling children's data—from schools to youth sports leagues—the guidance signals potential liability concerns around existing photo policies and consent frameworks that predate current AI capabilities.

The guidance and supporting materials were first reported by the Guardian.