// first 10 minutes
minor online coercion · youth safety — quick-start
minor sextortion — first 10 minutes. do not send more images. preserve the threat. call NCMEC. print this, check boxes, then run the primary tools.
checklist
- tell the child: do not send more images or comply with demands — further compliance escalates rather than resolves.
- do not delete the messages — the conversation is evidence; contact NCMEC CyberTipline at 1-800-843-5678 before deleting anything.
- screenshot the threat message with the platform's timestamp and sender handle visible — save to a device the child does not control.
- export the full conversation log if the platform allows — most gaming and social platforms have a 'report + export' flow.
- preserve the sender's profile: username, profile photo, any bio text, and the platform the contact originated on.
- do not pay, do not negotiate — minors are high-value targets for re-exploitation once payment is confirmed.
- report to the platform's child safety team immediately — platforms are legally required to escalate CSAM to NCMEC.
- preserve device: do not factory reset the child's phone or computer — forensic artifacts may support prosecution.
- contact local law enforcement — this is a federal crime (PROTECT Act); ask for the ICAC task force contact.
- begin the primary tool path below — on a device separate from the child's, using exported conversation data only.
primary tools
- 01evidence manifest generatordrop evidence files · compute md5 sha1 sha256 · chain of custody manifest · case number · analyst · export pdf and csv · runs locally
- 02custody child safety device audit kitdrop parent/guardian phone exports + location + messaging · child safety exposure assessment · runs locally
- 03ios screen time forensic analyzerdrop screen time sqlite from ios backup · app usage · website visits · pickup frequency · digital activity · alibi assessment · runs locally
- 04ios screen time family sharing correlation detectordrop family sharing screen time export · attribute usage per family member · runs locally
- 05mobile screen time parserdrop ios screen time sqlite or android usage_stats.db · daily usage · per-app ranking · hourly heatmap · runs locally
- 06ios backup browserdrop an iTunes backup Manifest.db · list backed-up apps · files · domains · relative paths · export CSV · runs locally
- 07ios imessage deletion artifact detectordrop ios sms.db · rowid gaps · join orphans · deleted_messages tombstones · ck_sync_state=2 · two-db guid compare · bulk deletion · runs locally