What never to post, and who to tell when it goes wrong

Look at the last photo you posted. Not at yourself. At the background.

Is there a street sign? A house number? The crest on your sweater? A bus route number, a store you're clearly standing outside of, your name and number on the back of a jersey? Stack three of those together and a stranger knows your school, your town, and roughly when you leave practice. Nobody needed to hack anything. You handed it over in a photo you thought was about your hair.

That's the whole game with online safety. It's almost never one big dramatic mistake. It's small pieces that a patient person collects.

The things that don't go out, ever

Some information just doesn't leave your house. Not in a post, not in a DM, not to someone you've been talking to for six months who seems great.

• Where you live. House number, street name, the photo of your front door at Christmas, the pin in your caption.
• Where you'll be before you're there. "Heading to the mall at 4" is a plan anyone can join. Post after, not before.
• Your school plus your full name plus your schedule. Any one of those is normal. All three together is a map.
• Passwords. Including to your best friend. Especially to someone you're dating. Friendships change. Passwords don't automatically change with them.
• Your parents' financial anything. Card photos, banking screenshots, the little "look what I got" picture where the receipt's in the frame.
• Live location. Turn off location sharing on your camera and on your posts. Your phone's settings do this in about forty seconds. Do it tonight.

Also: don't use the same profile photo on five different apps. That's how someone links your gaming handle to your real name to your little sister's account.

Photos of your body

This one isn't complicated and I'm not going to soften it.

You never send a photo of your body to anyone. Not to a boyfriend, not to someone who says they'll delete it, not to someone who's threatening to be upset, not to someone who sent one first. You don't owe anyone a picture. You don't owe anyone anything physical, ever, for any reason, and that includes an image on a screen.

If someone asks, you've learned everything you need to know about them. That's not a test you failed. It's a test they failed, in public, in writing.

And if you've already sent something, keep reading, because this is the part most people skip.

If a picture already exists

You're not ruined and you're not the first. You need an adult today, and the fastest thing that adult can do is help you use the tools that already exist for this. The National Center for Missing and Exploited Children runs a service called Take It Down for exactly this situation, and platforms are legally required to take reports seriously when the person in the image is a minor. Your parent, your school counselor or a youth leader can walk through that with you in an evening.

The other version of this: someone threatens to share a photo unless you send more, or pay them, or keep talking to them. That's a crime being committed against you, and it's a script. They run it on hundreds of people.

So run the counter-script. Stop replying. Don't send anything else. Don't send money — paying makes it worse, every time. Don't delete the messages, because that's the evidence. Screenshot the profile and the threats. Block. Then tell an adult tonight, not tomorrow, and report to the CyberTipline.

The threat only works if you stay alone with it. That's the whole engine. Take the fuel away.

The signs someone's working on you

People who target teenagers online are good at it, and they don't show up looking like a villain. They show up funny and interested.

Watch for the pattern instead of the person:

• They want to move you off the main app fast. Off the game chat, onto something private, "because it's easier."
• They're extremely complimentary, extremely quickly, about things nobody's ever noticed about you.
• They give you things. Game currency, a skin, a gift card, a code. Then reference it later.
• They ask about your parents. When they work. Whether they check your phone. Whether you have your own room.
• They start small secrets. Something tiny you agree not to mention. That's the rehearsal.
• "Don't tell anyone about us." Any adult or older teen who wants you hidden isn't protecting you.

Also: never meet someone you only know from online. Not with a friend along, not in daylight, not because you've video-called and they're definitely real. If a friendship from a game or a fandom ever gets to the point of meeting, it goes through your parents, not around them. If that's not something you can imagine bringing to them, that's your answer about the friendship.

Who to tell, and exactly how

Pick a person before you need one. A parent first. If that genuinely isn't possible, then an aunt, a grandparent, a teacher you already like, the school counselor, the school nurse, a coach, a youth leader at church. Somebody with an adult's phone number and an adult's patience.

Then use a sentence. People freeze because they don't know the opening line, so borrow one:

"I need to tell you something I'm embarrassed about, and I need you to help me before you react."

That's it. It works because it tells them what you need from them. Most adults who love you will do exactly what you asked.

Understand this part: you're not in trouble. Even if you broke a rule to get here. Even if you had the app you weren't supposed to have, talked to someone you were told not to talk to, or lied about where you were. An adult worth telling cares about your safety more than they care about the rule, and any consequence for the rule is small and survivable and over in a week. The thing you're scared to say is the thing they need to hear.

If the first adult handles it badly — panics, yells, doesn't get it — tell a second one. One bad reaction doesn't mean you were wrong to speak. It means you picked the wrong person on the first try.

Ten minutes of housekeeping

Set your accounts to private. Then actually look at your follower list and remove everyone you couldn't name in person. Turn on two-factor authentication on your email first, because your email is the master key to everything else. Give every account a different password, and keep them somewhere your parents can also get to.

And check your public profile photo the way a stranger would. That's the one picture anyone can see no matter how private you are.

The part worth remembering

The internet keeps everything and forgives nothing. The people who actually love you work the other way around — they'll forget the dumb thing by Thanksgiving and they'll forgive you before you've finished explaining.

So when something goes wrong, walk toward the people. Every single time.