Child Sexual Abuse Material (CSAM): Once concentrated in 1990s Eastern-European studio production rings, today the majority is created by coerced children themselves, often filmed in their own bedrooms under online grooming and sextortion.

Timeline of Major Child-Protection Hotlines

Key Point

• NCMEC’s line (1984) → first national tipline for reporting missing children — for the public and authorities.

• ChildLine (1986) → first national hotline where children themselves could directly seek help for abuse or crisis.

So, in short:

One line — NCMEC — was for anyone to report a missing child.
The other — ChildLine — was the first national helpline for children themselves to call for help.

Key International Reports

Europol – Internet Organised Crime Threat Assessment (IOCTA)

• Published annually.

• Covers major cyber-crime threats including online child sexual-abuse material (CSAM).

• Explains trends such as self-generated content, live-streaming, grooming, and cross-border hosting.

• Latest version: IOCTA 2023 (released late 2023).

• Available at: https://www.europol.europa.eu

EUROPOL / INTERPOL – Global Reports

• INTERPOL Global Crime Trend Report 2023
  Highlights online child exploitation and the transnational nature of the crime.
  https://www.interpol.int

• EU-Funded INHOPE / INHOPE Annual Report
  Data from 45+ national hotlines on reports of CSAM by country of hosting.
  https://www.inhope.org

U.S. National Center for Missing & Exploited Children (NCMEC)

• CyberTipline Annual Reports
  Lists the number of reports per year, breakdown by platform, by country of hosting and sometimes by reporting jurisdiction.

• 2023 report received over 36 million reports of suspected CSAM.

• Publicly available at: https://www.missingkids.org

WePROTECT Global Alliance – Global Threat Assessment

• Broad, policy-oriented review of online child sexual exploitation and abuse (OCSEA) worldwide.

• Covers grooming, extortion, hosting infrastructure, and victim locations.

• Most recent: Global Threat Assessment 2022.

• https://www.weprotect.org

U.S. Department of State – Trafficking in Persons (TIP) Report

• Annual country-by-country assessment of human-trafficking efforts, including child sexual exploitation and online abuse.

• Useful for understanding source, transit, and destination country patterns.

• https://www.state.gov/trafficking-in-persons-report/

European Union / Council of Europe

• Council of Europe – GRETA country evaluations
  Evaluate compliance with the Anti-Trafficking Convention.

• Country-specific reports often discuss online exploitation and cross-border cases.

• https://www.coe.int/en/web/anti-human-trafficking

Regions Repeatedly Flagged by Agencies

According to Europol, Interpol, and NCMEC:

• Hosting & technical origin (servers, uploads) often traced to:

  • United States

  • Germany

  • Netherlands

  • Canada
    (because many large commercial platforms and content-delivery networks are based there)

• High-risk regions for victimisation (many cases identified):

  • Eastern Europe: Romania, Bulgaria, Moldova, Ukraine (particularly for live-streaming or trafficking victims)

  • Southeast Asia: Philippines, Thailand (often targeted for live-stream exploitation)

  • Parts of Africa (Nigeria, Ghana) in sextortion schemes

  • Also Western countries: many victims live in the same countries where the content is uploaded.

Key Point from Europol (2022-2024)

“The majority of detected CSAM is hosted on legitimate platforms in high-income countries, while many victims are located in regions with higher child poverty and less protection.”

Takeaway

• IP tracing can point to where a file was uploaded or where a server is, but does not always mean that is where the abuse occurred or the offender lives.

• The online nature of the crime makes it truly transnational.

• Law-enforcement agencies focus on identifying victims and arresting individual offenders, not on labelling entire countries as “sources.”

.”

Where the Term “Coerced Children” Comes From

Child-safety organizations such as NCMEC, IWF, Europol, and Interpol use the phrase “self-generated but coerced” CSAM.

• In most of these cases, the child is not voluntarily creating sexual material.

• Instead, the child is groomed, manipulated, or threatened by an offender — often an adult — to produce images or video on their own phone or laptop.

• This pattern has been observed repeatedly in investigations and victim interviews since the mid-2010s.

For example:

• Europol’s reports since 2018 describe the “groom-coerce-record-share” cycle as central to modern online child sexual exploitation.

• NCMEC’s CyberTipline has seen sharp rises in online enticement and sextortion cases in which offenders first gain the child’s trust and then pressure or threaten them to produce more images or engage in live video.

Coercion Tactics (as reported by survivors)

These include:

• Grooming: building trust, posing as a peer or potential friend/partner.

• Sextortion: threatening to leak an initial image if the child does not comply with further demands.

• Manipulation: promises of money, gifts, or affection.

• In some cases, blackmail with hacked or stolen private photos.

Visible Signs — and Limits

Unfortunately, there is no single outward physical sign that would reliably indicate a child is being coerced online.

Child-protection professionals advise adults to watch for behavioral and situational changes, such as:

• Sudden secrecy about online activity, or hiding screens when approached.

• Emotional distress after being online — anxiety, withdrawal, depression, or unexplained anger.

• Changes in sleep or appetite, or falling grades.

• Receiving gifts or money from unknown sources.

• Reluctance to talk about online friends or new contacts.

These are warning signs, not proof; they indicate a need for gentle conversation and, if warranted, reporting to a child-protection hotline.

Why Investigators Know

The understanding that many images are made under coercion comes from:

• Rescued victims’ statements.

• Undercover investigations into grooming networks.

• Analysis of chat logs seized from offenders that show the grooming and threats.

• Hash-matching of new material that shows the same victims being re-exploited over time.

Key Takeaway

• “Coerced children” refers to a documented pattern: most so-called self-generated CSAM is actually the result of online grooming, manipulation, or sextortion.

• Victims often do not bear obvious physical marks; the abuse is primarily psychological and emotional, but the harm is real.

• Awareness of behavioral warning signs and open, non-judgmental communication with children are among the most effective early protections.

Related Estimates & Indicators

• A meta-analysis published early 2025 estimates that 1 in 12 children globally (~ 8%) have experienced online child sexual exploitation or abuse (which includes grooming, sextortion, exposure, etc.) Georgia State News Hub

• In the Disrupting Harm report, some countries show up to 20% of children subjected to child sexual exploitation and abuse online in the past year WeProtect Global Alliance

• Hotlines and monitor organizations report that self-generated CSAM content is consistently high, and many of the removed images/videos are believed to have been produced by the minors themselves. Safer by Thorn+1

• The IWF and INHOPE data and EU reports show that a growing share of CSAM being reported is “new” material (not archival), which is presumed to come from coerced/self-produced content. European Parliament

Why We Don’t Have a Precise Number

• Underreporting & secrecy: Many victims never report, or the perpetrators conceal evidence.

• Difficulty in identification: It’s hard to distinguish between content produced in studios, by third parties, or by coerced minors once it’s already circulating.

• Legal & privacy constraints: Researchers and agencies often cannot publicize raw data that would risk exposing victims.

• Rapid change & technology: The shift to encrypted messaging, ephemeral content, and AI-generated content complicates detection and measurement.

Inference

Given the trends and the growth in self-generated CSAM reports, it is reasonable to infer that tens of thousands to hundreds of thousands of children are victims of coerced self-filming globally each year. But that is an estimate, not a rigorously validated number.

Original Purpose of E2EE

• E2EE was designed to make digital communications as private as a face-to-face conversation.

• The primary motivation was to protect:

  • Journalists working in repressive countries

  • Human-rights defenders and political dissidents

  • Whistle-blowers, lawyers, at-risk individuals

• It was not created to help criminals; it was created as a reaction to government and other third-party surveillance.

Unintended Exploitation

• Because E2EE prevents the service provider itself from scanning message contents, the same protection that shields legitimate users also shields abusers.

• Offenders who trade CSAM or groom children exploit:

  • E2EE messaging apps (e.g., WhatsApp, Signal, Telegram’s Secret Chats)

  • Ephemeral features (disappearing messages)

• This makes proactive detection by platforms much harder.

• Law-enforcement typically can intervene only:

  • when a victim or other user reports abuse,

  • or through lawful access to devices or metadata.

Why It’s a Policy Dilemma

• Privacy vs. Safety: weakening or banning E2EE would harm legitimate users—including journalists and abuse survivors who rely on it for protection.

• Child-protection advocates argue that society needs some way to detect and block CSAM even in encrypted channels.

• Technologists and privacy advocates warn that any built-in “backdoor” could be misused by repressive regimes or criminals.

Ongoing Work

Governments, researchers, and industry are trying to find middle-ground technical approaches, for example:

• Client-side scanning for known CSAM hashes before encryption.

• Privacy-preserving detection methods and grooming-risk alerts on user devices.

• Metadata-based investigations and strong reporting tools for victims.

No single solution has yet been agreed upon that both fully preserves E2EE and allows automatic detection of CSAM.

Key Takeaway

• E2EE’s core purpose was and is to protect legitimate users’ privacy and safety.

• Its unintended consequence is that it also makes it harder to detect and stop online child exploitation.

• This tension is at the heart of today’s global debate over child safety and privacy online.

Before the Internet

• In the 1970s–1980s, child-abuse images were produced and traded mostly in Western Europe, North America, and Japan.

• Production was small-scale, done by individual offenders or small local groups.

• There was no single “hub”; the material was circulated by mail, not concentrated in Eastern Europe.

Post-Soviet Shift (1990s)

The association of Eastern Europe with early online CSAM production comes from a particular period after the collapse of the USSR:

• Economic vulnerability: The early 1990s brought widespread poverty, weak enforcement, and corruption in parts of the former Soviet bloc.

• Cheap technology: PCs, early digital cameras, and dial-up Internet became accessible around 1994–1996.

• Weak legal frameworks: Many post-Soviet countries did not yet have strong child-protection or cybercrime laws.

• Criminal exploitation: Small organized groups in countries such as Russia, Ukraine, Moldova, the Baltic states, Romania, and parts of the Balkans began producing photo-sets and short videos for sale to Western buyers.

• Early online commerce: Because of currency differences, even small Western payments were highly profitable.

Law-enforcement operations such as:

• Operation Cathedral / Wonderland Club (1998)

• Operation Icebreaker (2004)

• Operation Rescue (2011)

…exposed many of these Eastern European studio-based networks and dismantled them.

Key Clarifications

• CSAM did not originate in Eastern Europe.
  Child-abuse imagery existed decades earlier in other parts of the world.

• What changed in the 1990s was the emergence of organized online commercial production in some post-Soviet countries, driven by local economic collapse and early-Internet opportunities.

• Those organized “studio” networks were largely shut down by coordinated international operations by the mid-2000s.

Today’s Situation

• Since the mid-2010s, most new CSAM is not coming from Eastern Europe or from studios.

• The majority of new material is “self-generated”: victims worldwide — often in wealthier as well as poorer countries — are groomed or coerced online to record themselves, usually at home.

• The hosting servers for CSAM today are often in countries with cheap hosting infrastructure (e.g., U.S., Netherlands, Russia), which is different from where the abuse is produced.

Bottom Line

• Eastern Europe was an early center for organized commercial online CSAM production in the 1990s–2000s.

• It was not the origin of CSAM overall, and it is no longer the main source today.

• The current challenge is global and decentralized, driven by online grooming and coercion of minors in many countries.

Child Sexual Abuse Material (CSAM)

Child Sexual Abuse Material (CSAM) refers to any visual depiction of sexually explicit conduct involving a minor (a person under the age of 18).
This includes images, videos, live-streamed recordings, or any other visual medium that portrays or depicts the sexual abuse or exploitation of a child.

• Legality:
  The creation, distribution, possession, and even attempted exchange of CSAM are illegal under U.S. federal law and the laws of most countries.
  In the U.S., it is addressed under statutes such as 18 U.S.C. § 2256 and § 2252, which criminalize the production, distribution, receipt, and possession of such material.

• Why it is a serious crime:
  CSAM is not simply an illicit image; it is a record of a real child being abused.
  Every time such material is created, shared, or viewed, it perpetuates the victimization and exploitation of that child.

• Key point:
  Combating CSAM is treated worldwide as a top-priority child-protection issue. Law-enforcement agencies and organizations like the National Center for Missing & Exploited Children (NCMEC) work closely with technology platforms to detect, report, and remove CSAM and to identify and rescue victims.