Online Safety: Recognising Inappropriate Content, Contact, Conduct, and Reporting Concerns
Welcome to your study guide on staying safe online! The internet is an incredible place to play games, learn new skills, chat with friends, and explore the world. However, just like crossing a busy road in the real world, navigating the online world requires you to know the rules of safety.
In this chapter, you will learn how to recognise when something isn't right online using the 4Cs risk framework, understand what happens to your digital footprint, and know exactly who to turn to if you ever need help or need to report a concern.
Part 1: The 4Cs of Online Safety
To help us spot online risks easily, the UK Department for Education categorises online dangers into four groups known as The 4Cs: Content, Contact, Conduct, and Commerce.
Memory Trick: Think of the 4Cs as answering four simple questions: What do I SEE? (Content), Who talks to ME? (Contact), How do I ACT? (Conduct), and Where does MONEY go? (Commerce).
1. Content (What you see and read)
Content risk refers to exposure to illegal, inappropriate, harmful, or misleading digital material on websites, social media, or games.
Examples of harmful content include:
• Misinformation and Disinformation: Misinformation is false information shared by mistake, while disinformation (or "fake news") is deliberately created to deceive people.
• Hate Speech and Radicalisation: Material that attacks people based on their identity, race, or religion, or promotes extremist views.
• Age-Inappropriate Material: Violent, gruesome, or pornographic images and videos.
• Harmful Advice: Material promoting self-harm, eating disorders, or suicide.
2. Contact (Who interacts with you)
Contact risk happens when you experience harmful or unsafe interactions with other people online, or even automated systems.
Examples of harmful contact include:
• Online Grooming: When an adult or ill-intentioned person builds an online friendship or emotional bond with a young person to manipulate, exploit, or abuse them.
• Catfishing: When someone creates a completely fake online identity or profile to trick and deceive others.
• Generative AI Bots: Automated chat programs or simulated characters that try to build emotional attachments, gather personal data, or encourage risky actions.
• Unsafe Requests from Strangers: People asking for private information, live webcam access, or suggesting a face-to-face meetup.
3. Conduct (How you and others behave)
Conduct risk relates to personal digital behaviour—either your own actions or someone else's—that causes harm, breaks school rules, or breaks the law.
Examples of harmful conduct include:
• Cyberbullying and Harassment: Repeatedly sending mean messages, trolling, or deliberately excluding someone from online group chats.
• Youth-Produced Sexual Imagery / Self-Generated Intimate Images: Creating, sending, or sharing sexual images (including digitally altered pictures and AI-generated deepfakes). In the UK, sharing these images involving minors is illegal.
• Doxxing: Maliciously sharing someone else's private or personal details (such as their home address or phone number) online without their consent.
• Breaching Acceptable Use Policies (AUP): Breaking your school’s computer rules or terms of service on apps.
4. Commerce (Financial risks and scams)
Commerce risk involves being exposed to financial loss, fraud, or commercial exploitation online.
Examples of commerce risks include:
• Phishing Scams: Fake emails or messages pretending to be trusted companies to trick you into revealing passwords or bank details.
• Hidden Subscription Traps: Apps or games that quietly sign you up for recurring monthly charges without clear warnings.
• In-Game Gambling: Mechanics such as loot boxes that encourage players to spend real money on random chances of winning items.
• Identity Theft: Criminals using your stolen details to pretend to be you.
Key Takeaway for Part 1: The 4Cs help you identify online dangers quickly: Content is what you encounter, Contact is who interacts with you, Conduct is how people behave, and Commerce involves money, ads, and scams.
Part 2: Protecting Your Privacy and Digital Footprint
What is Personally Identifiable Information (PII)?
Personally Identifiable Information (PII) is any data that can be used to identify, locate, or contact you directly. You should never post PII publicly.
Examples of PII include:
• Your full name and date of birth.
• Your home address and postal code.
• The name of your school or photos showing your school uniform/badge.
• Your phone number, passwords, and live location tags (geolocations).
Your Digital Footprint
Every time you post a photo, leave a comment, search for a video, or visit a website, you leave a trail of data behind. This is known as your digital footprint.
Did you know? Even if an app says messages "disappear" after a few seconds (like on ephemeral messaging apps), other users can take screenshots, and copies can remain on company servers. A digital footprint can be permanent!
Key Takeaway for Part 2: Keep your PII private and remember that your digital footprint lasts long into the future. Always think before you post.
Part 3: How to Report Concerns and Get Help
If you see something upsetting, feel uncomfortable, or realise a friend is in trouble, you do not have to deal with it alone. There are clear steps and organisations in the UK ready to help you.
Step 1: Internal Reporting (People you know)
• Tell a Trusted Adult: Talk to a parent, carer, teacher, or tutor immediately.
• Contact your School's DSL: Every UK school has a Designated Safeguarding Lead (DSL) whose job is to keep students safe. You can speak to them or use your school's reporting tools.
Step 2: Platform-Level Actions
Most games, apps, and websites have tools to protect you directly on your device:
• Block: Stop the person from contacting or viewing your profile.
• Mute: Hide their posts or messages without letting them know.
• Report: Use the in-app reporting button to alert moderators.
• Save Evidence: Take a screenshot that clearly shows the user's handle/username and the date/time stamp. Important: Never screenshot or forward illegal or intimate images of minors—report those directly to an adult or official body.
Step 3: External UK Reporting Organisations
If the issue is serious, illegal, or not handled properly by an app, these official UK services are available:
• CEOP (Child Exploitation and Online Protection Centre): A command of the National Crime Agency. Use CEOP to report online sexual abuse, grooming, or inappropriate contact from adults.
• IWF (Internet Watch Foundation): The UK organisation dedicated to finding and removing criminal content and child sexual abuse imagery from the internet.
• Report Harmful Content (UK Safer Internet Centre): A portal to report cyberbullying, online harassment, impersonation, hate speech, or to get non-consensual images taken down from platforms.
• Childline: A free, confidential helpline and website where young people can talk to a counsellor about anything worrying them. You can call them on 0800 1111.
• Action Fraud / Anti-Phishing Working Group: The UK's national reporting centre for scams, fraud, and phishing messages.
Key Takeaway for Part 3: Always report harmful behaviour. Use in-app tools (Block, Mute, Report), talk to your school's DSL or a trusted adult, and use national services like CEOP, IWF, and Childline.
Part 4: Common Pitfalls and Misconceptions
Don't worry if some of these ideas seem tricky at first! Here are the most common mistakes students make and how to avoid them:
• Misconception 1: "Strangers online are always mean and obvious."
Reality: People who groom or catfish often pretend to be friendly, share your hobbies, or gift you in-game items. Always be cautious when meeting new people online.
• Misconception 2: "If I delete a post or send a disappearing photo, it's gone forever."
Reality: Other users can record their screens or take photos with another device. Backups on servers can also keep data long after you delete it.
• Misconception 3: "I should forward an inappropriate photo to my friends or teacher to prove what happened."
Reality: Forwarding or distributing intimate images of under-18s is against the law. Instead, explain what happened to a teacher/DSL, or report directly to CEOP without sharing the image.
• Misconception 4: "If a website got through the school filter, it must be completely safe and true."
Reality: Content filters catch a lot, but no filter is 100% perfect. Always check information across multiple reliable sources.
Quick Review Checklist
Can you answer these questions? If yes, you are fully prepared on this topic!
1. What do the 4Cs stand for? (Content, Contact, Conduct, Commerce)
2. What is the difference between misinformation and disinformation?
3. What does PII stand for, and why should it be protected?
4. What three buttons should you look for on apps to control who interacts with you? (Block, Mute, Report)
5. What organisation would you contact to report online grooming or inappropriate contact from an adult? (CEOP)
6. What is the phone number for Childline? (0800 1111)