The pattern is well documented and it is boring, which is why it works. Contact is made somewhere public and low-stakes. Trust is built over days or weeks. The conversation moves to a private channel. Then it escalates. Each individual step looks like nothing.
SOCMINT Shield looks at the shape of the sequence rather than the content of any one message. A new account, no mutual connections, an unusually fast move toward a private channel, an age gap the profile does not explain — none of those is proof of anything, and all of them together are worth a parent’s attention.
It also works the quieter half of the same problem: the household’s own footprint. Much of what an approach relies on — where you live, where the children go, when the house is empty — was never hidden, only sold. Shrinking that footprint, and watching the breach dumps for the credentials that leak from it, closes the same door from the other side.
What it does
- Flags approach patterns that match documented grooming sequences
- Watches for impersonation of household members across public platforms
- Removes the household from the data brokers that sell its address and routine, and keeps checking it stays removed
- Watches the breach dumps for a family member’s email, password or number surfacing
- Surfaces what of the family is publicly findable, and helps shrink it
- Routes a confirmed child-safety concern to the reporting channel that handles it
The limit A flag is a question, never a verdict. This layer produces things worth looking at, and a person decides what they mean. It has no access to private messages on platforms it does not control, and it will miss approaches that begin there.