Set the account up deliberately
Use the strongest privacy setting that still fits the way the account is meant to be used, review who can message or tag the child, and turn off unnecessary location sharing. Account recovery details should belong to the family and stay current.
Use a unique password and enable multi-factor authentication where available. A social account can be used to impersonate a child or message their friends if it is taken over.
Followers and friend requests need context
A profile picture and familiar name do not prove who controls an account. Children should be cautious about accepting requests from people they do not know and about duplicate accounts claiming to belong to someone already on their list.
If an existing friend suddenly appears with a new account, verify with that person through a known route before accepting unusual requests or sharing anything private.
Direct messages can carry the same scams as email
Phishing links, fake giveaways, account warnings and requests for verification codes can arrive through direct messages just as easily as through email or text. A message appearing inside a trusted platform does not make the message itself trustworthy.
For account warnings, open the real service directly rather than using the message link. For unusual requests from friends, verify with the person another way.
Pause before posting about someone else
Digital citizenship includes other people's privacy. Before sharing a photo, video, screenshot or private conversation involving someone else, children should consider whether that person would reasonably expect it to be shared.
Embarrassing content can travel quickly even when the original post is deleted. Asking permission before posting identifiable images of friends is a useful habit.
Know where block and report tools are
Blocking and reporting are normal safety tools, not signs that a child has failed to handle a situation alone. Families should know where those controls are before something goes wrong.
If a message includes threats, blackmail, persistent harassment or requests that make the child uncomfortable, save evidence where appropriate and involve a trusted adult rather than continuing the conversation.
Use strong account protection, keep privacy settings intentional, verify unusual contacts and messages, think before sharing and make reporting a normal part of online safety.
Continue with the Cyber Safety Hub, practise the ideas in Ranger Academy, or use the free printable resources at home or in the classroom.