The short version
- Researchers describe grooming as recognizable stages: targeting, gaining access, building trust, isolating, sexualizing, and maintaining secrecy.
- Offenders may skip stages or move back and forth, so treat these as a pattern, not a checklist.
- Isolation and secrecy are central. Watch for a child being pushed to keep an online relationship private.
- Online, the whole process can move far faster than it would in person.
- Report concerns in the US to the NCMEC CyberTipline at report.cybertip.org or 1-800-843-5678, where reports are reviewed by people.
Grooming can feel mysterious from the outside, but researchers who study it have found that offenders tend to move through recognizable stages. Understanding those stages, in plain terms, helps you see the pattern instead of just isolated moments.
A research-based model
One of the more carefully validated frameworks is the Sexual Grooming Model developed by researchers Georgia Winters and Elizabeth Jeglic. They built it by reviewing decades of research and consolidating what earlier models had found, then testing it so it focuses on behaviors that can actually be observed. Their model describes five stages: victim selection, gaining access and isolation, trust development, desensitization to sexual content and physical touch, and maintenance after abuse begins.
A few things are worth saying up front. Offenders do not always move neatly from one stage to the next. They may skip stages or move back and forth. And knowing the stages is not about spotting a checklist in real time. It is about understanding the shape of the process so the warning signs make more sense.
Stage 1: Targeting a child
Grooming often begins with an offender looking for a child who seems reachable. Research describes offenders paying attention to vulnerability, such as a child who seems to have low self-esteem, is less supervised, or is looking for attention and affection. Online, this can mean scanning the same games, apps, and social platforms that children use, then focusing on those who respond.
Stage 2: Gaining access and building friendship
Next the offender works to get close to the child and become a regular, welcome presence in their life. Online this usually looks like ordinary friendship. They find shared interests, chat often, and become a reliable source of attention. As Australia's eSafety Commissioner describes it, offenders often present as trustworthy, generous, and likeable, and build a friendship around things the child enjoys, like a game they both play.
Stage 3: Filling a need and building trust
This is where the relationship deepens. The offender positions themselves as the person who understands the child, listens to them, and gives them what they feel they are missing, whether that is attention, praise, a sympathetic ear, or gifts. Researchers describe offenders becoming charming and achieving a kind of "insider status." To the child, this often feels like the best friendship or relationship they have. That trust is exactly what the offender is building toward.
Stage 4: Isolating the child
As trust grows, the offender works to become the most important person in the child's world and to separate them, emotionally at least, from the people who might notice or intervene. Online, isolation often means moving conversations to private or encrypted apps where no one else can see, encouraging the child to keep the relationship secret, and framing their bond as something special that others would not understand.
Stage 5: Moving toward exploitation
Once there is enough trust and secrecy, the offender begins to introduce sexual content. Researchers call this desensitization. The goal is to make sexual conversation or images feel gradually more normal, so that each step seems like only a small move from the last. In online cases this can involve steering talk toward sex or pressuring a child for images. We are deliberately not detailing the specific tactics here, because the point is for you to understand the direction of travel, not to hand anyone a playbook.
Stage 6: Maintaining control and secrecy
If abuse begins, offenders use maintenance behaviors to keep it going and keep it hidden. Research describes tactics that encourage secrecy, normalize what is happening, or make the child feel responsible or afraid to tell. This is one reason children so often stay silent, sometimes for a long time.
Why online grooming can move fast
These stages were first described for abuse that happens in person, but they map onto online grooming too, and online they can compress dramatically. The NSPCC notes the internet can make the grooming process much quicker. An offender can message a child privately, constantly, and at any hour, and can be working on many children at once. What might have taken months face to face can take days or weeks online.
Understanding the stages is not meant to make you monitor a child's every message with suspicion. It is meant to help you recognize the difference between healthy friendship and a relationship that is steadily pulling a child into secrecy and isolation. If you notice a child becoming secretive about an online contact, being pressured to keep things private, or receiving unexplained gifts, those are worth a calm conversation.
If you are worried, in the US you can report concerns to the NCMEC CyberTipline at report.cybertip.org or 1-800-843-5678. Reports are reviewed by people at NCMEC.
Sources and further reading
- Psychology Today (on the Sexual Grooming Model). https://www.psychologytoday.com/us/blog/head-games/202209/the-5-stages-predatory-sexual-grooming
- Enough Abuse (Winters et al, 2024). https://enoughabuse.org/wp-content/uploads/2024/09/Winters-et-al.-2024.pdf
- eSafety Commissioner. https://www.esafety.gov.au/parents/issues-and-advice/grooming-or-unwanted-contact
- NSPCC. https://learning.nspcc.org.uk/safeguarding-child-protection/grooming