Schools Are Removing Student Photos From Websites - AI Sextortion Is Why (2026)

What happened: UK guidance on publishing images of pupils

In May 2026, the UK Online Harms Early Warning Working Group (EWWG) published image security guidance for education settings. Its members include the NSPCC, the National Crime Agency's CEOP Education and the Internet Watch Foundation, and the guidance sets out how schools should protect and publish images of their pupils.

This isn't a theoretical concern. Sexual images of children were sourced from a secondary school's website and altered using AI tools, and IWF analysts assessed around 150 confirmed images of child sexual abuse. The source material is ordinary - photographs published on the school's own website, fed through AI tools that generate explicit deepfake images of the students.

UK safeguarding minister Jess Phillips called it a "deeply worrying emerging threat." The guidance is clear: if a school photo is publicly accessible, it can be weaponized. The only guaranteed protection is removing the source material entirely.

How the attack works: from school photo to sextortion

The pipeline is disturbingly simple. Criminals use automated scraping tools to harvest images from school websites, which typically have no bot protection or access restrictions. They collect hundreds or thousands of student photos in minutes.

Those photos are then processed through AI deepfake generators - the same class of tools documented in our investigation of nudify apps on app stores. These tools take a clothed photo and generate a synthetic nude that matches the subject's body proportions, skin tone, and facial features. The output is convincing enough to cause real psychological harm.

The manufactured images are then used for sextortion: criminals contact the child directly, show them the fake explicit image, and demand payment - threatening to distribute the image to classmates, teachers, or family if the child doesn't pay. Some never contact the victim at all, instead distributing the material on dark web CSAM forums.

The numbers: how fast this is growing

The Internet Watch Foundation reported that reports of AI-generated CSAM had more than doubled year over year, from 199 in the first ten months of 2024 to 426 in the same months of 2025. That's just what gets reported and verified. The actual volume is almost certainly far larger.

Girls accounted for 94% of the illegal AI images the IWF identified in 2025. The targeting is overwhelmingly gendered, and school-age girls are the primary demographic being exploited.

Report Remove, the service the Internet Watch Foundation runs with the NSPCC's Childline to help under-18s get intimate images taken down from the internet, received 1,894 reports in 2025 and found that 394 of them - 34%, up from 23% in 2024 - involved some type of sextortion. Each report represents a child who discovered that someone was using intimate images to extort them.

In February 2025 the UK government said it would be the first country in the world to make it illegal to possess, create or distribute AI tools designed to generate child sexual abuse material, and the offense was introduced in the Crime and Policing Bill. But legislation alone hasn't stopped the supply of source material - school websites remain an easy, unprotected target for criminals looking for input photos.

What schools should do right now

The EWWG guidance is specific. Schools should take these steps immediately:

• Audit all public-facing pages for student photos. This includes the main website, social media accounts, newsletters posted online, and third-party platforms like school event photo galleries.
• Remove individual student photos where the child is identifiable. Group shots taken from a distance are lower risk, but close-up portraits, team photos, and award ceremony images should come down.
• Review consent forms. Many schools have blanket photo consent from years ago. Parents who signed those forms never imagined AI deepfake tools - they were consenting to a school newsletter, not to their child's face being publicly available in an era of synthetic CSAM.
• Switch to access-controlled sharing. Schools still need to share event photos with parents. The answer isn't to stop photographing school life - it's to share those photos through private, access-controlled channels instead of public websites.
• Train staff on the threat. Teachers and administrators uploading photos to school websites need to understand why this matters. A single teacher posting class photos to a public Facebook page creates the same exposure as the school website.

What parents should do

Don't wait for your child's school to act. You can take steps now to reduce your family's exposure.

• Ask your school about their photo policy. Find out what photos of your child are publicly accessible and request removal of any you're uncomfortable with. Under GDPR, schools must comply with image withdrawal requests.
• Revoke blanket consent. If you previously gave open-ended permission for your child's image to be used, you can revoke it at any time. Be specific: consent to appear in a password-protected parent portal is different from consent to appear on a public website.
• Audit your own posting habits. School photos aren't just on school websites. Every time you share a school event photo publicly on Facebook or Instagram, you're creating the same risk. Our guide to sharenting covers this in detail.
• Talk to your children. Older children need to understand that photos they post publicly - including on TikTok, Snapchat, and Instagram - can be scraped and manipulated. This isn't about fear - it's about informed choices.
• Know where to report. If your child receives a sextortion attempt, contact the police and the NSPCC's Report Remove service. Don't pay. Don't engage with the blackmailer. Report immediately.

How to protect children's photos in 2026

The pattern is clear. Publicly available photos of children are being weaponized through AI tools. The platforms where most people share family photos - Facebook, Instagram, Google Photos shared links - weren't designed with this threat model in mind. Facebook's default album sharing is set to "Friends" but that still means hundreds of people have access. Google Photos shared albums can be forwarded indefinitely.

The shift we're seeing - from schools, from safeguarding bodies, from parents who've been through sextortion attempts - is toward private-by-default photo sharing. Not social media posts that happen to be set to "private." Actually private platforms where photos aren't indexed, aren't scrapable, and aren't accessible without explicit authorization.

This is the problem Viallo was built to solve. It's a private photo sharing platform where photos are shared through access-controlled links that are never indexed by search engines. When you share school photos through Viallo, the only people who see them are the people you specifically choose.

The difference matters because of how scraping works. Bots that harvest images from school websites and social media rely on photos being publicly addressable - accessible via a URL without authentication. Private sharing platforms that require access tokens for every image request make bulk scraping operationally impractical. It's not a theoretical advantage. It's a different architecture that removes the attack surface entirely.

For a deeper look at how deepfake protection works at the platform level, see our deepfake photo protection guide.

Frequently Asked Questions