🧍♂️ 1. Individual grooming (one perpetrator)
This is the most common pattern.
What it looks like:
- One adult targeting one or a small number of minors
- Relationship feels personal or “exclusive”
- Builds trust slowly over time
- Often emotional manipulation (“you’re special”, “don’t tell anyone”)
- Focus is on access to the child, not wider network activity
Key signs:
- Consistent one-to-one contact
- Attempts to isolate the young person
- Emotional dependence or secrecy
- Gradual boundary crossing
👉 This is typically behaviour-driven and opportunistic, not organised.
🕸️ 2. Coordinated exploitation (networks or groups)
This is more serious and less common, but does exist in investigations.
What it looks like:
- Multiple adults involved in some form (sharing material, roles, or coordination)
- Activity spread across platforms or countries
- Children may be targeted in groups or repeatedly rotated between contacts
- More structured or “systematic” behaviour
Key signs:
- Multiple accounts interacting with the same victim or group
- Shared language, scripts, or patterns across different contacts
- Distribution or exchange of illegal material between users
- Evidence of planning, recruitment, or “access points” (online or offline)
👉 This is typically treated as organised criminal activity, often under organised crime laws.
⚖️ 3. What authorities look for (important distinction)
Police and cyber units focus on patterns like:
- Repeated contact across different accounts or platforms
- Links between suspects (shared IPs, devices, groups, files)
- Evidence of distribution networks (not just single chats)
- Financial or coordinated logistics (in some cases)
👉 Individuals are not expected to identify these links—this is forensic work.
🚩 4. Why they can look similar at first
Both can involve:
- secrecy
- emotional manipulation
- online contact
- gradual boundary crossing
That’s why pattern recognition + reporting early is more important than trying to classify it yourself.
🧭 5. The most important principle
Whether it’s individual or coordinated:
The response is the same: report concern to official channels.
In Spain:
- INCIBE (Instituto Nacional de Ciberseguridad) – 017
- Policía Nacional cybercrime units
- Guardia Civil (EMUME for minors)
🧠 Grounded takeaway
- Individuals groom through emotional connection and control
- Networks operate through coordination, repetition, and distribution patterns
- Both rely on secrecy, manipulation, and access to minors
- Only trained investigators can determine scale or structure