Digital Kidnapping: Protecting Your Child's Identity Online

Strangers can lift a child's photos and claim them as their own. Learn the warning signs of digital kidnapping and the sharenting habits that shut it down.

Digital Kidnapping: Protecting Your Child's Identity Online

Maria is a proud mom. She posts adorable photos of her toddler, Noah, on a public Instagram account — first steps, a day at the park, the usual joyful flood. Then a coworker mentions an Instagram profile full of Noah's pictures. The account belongs to a complete stranger who has been reposting Noah's photos and calling him "my son, James," even replying to comments about "James's" milestones. Around the same time, a family friend gets a friend request from an account using Noah's name and picture, trying to add other local parents. Maria's son had been, in the language of online safety, digitally kidnapped — his identity lifted for a stranger's fantasy and possibly worse.

It sounds like a rare horror story. It is more common than most parents realize, and it does not require a hack — just a public photo and a stranger with bad intentions. The reassuring part, drawn straight from the Digital Guardians material, is that the habits that prevent it are simple, free, and within your control.

What Digital Kidnapping Actually Is

Digital kidnapping is a form of online identity theft where someone takes a minor's photos or personal information and pretends the child is their own — or assumes the child's identity outright. The Digital Guardians guide describes a few flavors of it:

• **Role-play "adoption."** A stranger reposts a child's photos under invented names and stories, collecting likes as if the child were really theirs. There are entire hashtag communities built around this.
• **Fake accounts and impersonation.** Someone builds a profile in a child's name to gather followers, scam other families, or — in the worst cases — lure other children.
• **Account takeover.** Hackers seize a family's social media account and may hold it for ransom or mine it for personal data.

It affects every age. As the DGSS guide notes, this topic is "for entire families — from new parents who share baby pictures to teens managing their own social media." A 16-year-old named Aisha in the same guide discovers an imposter account built from her public soccer-team photos, messaging other teens inappropriately under her name and threatening her reputation. Babies and teenagers are both targets, just in different ways.

The Warning Signs

Digital kidnapping often happens without the victim knowing, but there are tells worth watching for:

• **Strangers fixated on your child's photos.** Unknown accounts that repeatedly like, comment "so cute," or save your child's public pictures may be collecting them.
• **Duplicate accounts.** Periodically search your child's name and reverse-search a photo. Accounts you did not create that use your child's images are a clear red flag — and if another parent asks "is this profile your kid?", investigate rather than brush it off.
• **Role-player hashtags.** On platforms like Instagram, tags such as #BabyRP, #KidRP, or #RoleplayFamily are communities where people "adopt" strangers' kids' photos. Finding your child's image under one means it has been lifted.
• **Odd friend requests.** Profiles loaded with various children's photos but no real-world connections may be fake "families" harvesting more content. Decline and block.
• **Search results you do not recognize.** If a search turns up your child's photo on sites or accounts you never posted to, someone has reposted it.

How to Shut It Down: Smarter Sharenting

"Sharenting" — parents sharing their kids online — is not the enemy; oversharing is. The Digital Guardians prevention strategy comes down to controlling who can access your child's images and information:

• **Lock down privacy settings.** This is the single most powerful step. Set your Facebook, Instagram, and TikTok so only approved friends and family can see your posts, and help older kids do the same on their own accounts. Re-check after app updates, which can quietly reset privacy options.
• **Shrink the audience.** Even on a private account, adopt an "only people I truly know" rule. Some families keep a separate, locked account just for relatives and keep the main account generic.
• **Ponder before you post.** Before uploading, ask: would I be okay with this photo in a stranger's hands? Does it show a school logo, a street sign, a regular park? If it raises concern, skip it or crop the identifying details.
• **Guard the data points.** Full name plus exact birthdate plus location is a gift to identity thieves — birthday posts are a classic leak. Skip the last name or birth year, and do not geotag your home, school, or daycare.
• **Teach kids to protect their own image** as they get older: think before posting, keep accounts private, and accept requests only from people they actually know.

If It Already Happened

Move quickly and calmly. Report the impersonating account to the platform and request removal — every major platform prohibits this. Document everything with screenshots first. Tighten the privacy on your own accounts so no more material can be scraped. If a child's identity or personal data has been misused, the U.S. Federal Trade Commission's IdentityTheft.gov walks you through recovery steps, and CISA's Secure Our World offers plain-language guidance on locking down accounts. For the broader picture of how this harm operates globally, the WeProtect Global Alliance publishes child online-protection threat assessments, and child-protection education resources are available through CEOP Education (UK).

For Parents

Set every account that shows your child to private this week, and do a quick search of your child's name and a reverse image search of one recent photo — it takes ten minutes and tells you a lot. Adopt "ponder before you post" as a household reflex, and trim the identifying details: no school logos, no geotags, no full-name-plus-birthday combos. You are not being paranoid; you are simply deciding who gets to see your kid.

For Kids and Teens

Your face and your name are yours. People can copy photos you post in public and pretend to be you, or pretend a little kid is theirs — it is creepy, and it is real. Keep your accounts private, only let in people you actually know, and think twice before posting anything that shows where you go to school or live. If you ever find a fake account using your name or pictures — or a friend points one out — tell a trusted adult right away so you can get it taken down together. You are not in trouble; someone copied you, and that is on them.

---

Your child's identity is worth guarding as carefully as anything else you protect. Explore the full Digital Guardians Safety System guide for the complete prevention and recovery playbook.

---

📖 Part of the Digital Guardians Safety System — Pillar 4: Identity Attacks, Response, Recovery & Support.

Take the next step. Decide who gets to see your kid — then make it stick.

• Read the full guide → [The Digital Guardians Safety System](/read)
• Privacy + account lockdown → [Tech & Security Guide](/read/tech-guide)
• Start free → [grab a free chapter](/free-download)
• Build safer sharing habits together → [book a workshop](/workshops)
• Family + community resources → [visit the store](/store)