Experts Say It’s Time to Remove Student Faces from School Websites

In an age where celebrating student achievement online has become second nature for schools, a deeply concerning digital threat is forcing a major rethink of safeguarding policies.

In a recent Guardian article, child safety experts and the UK’s National Crime Agency (NCA) are urging educational institutions to urgently review their digital footprints. The warning is stark: criminals are increasingly targeting school websites and social media accounts to steal photos of children's faces, using generative artificial intelligence (AI) to manipulate them into sexually explicit images for financial blackmail.

The safeguarding community is calling this a "deeply worrying emerging threat," and official guidance has been issued to help UK schools protect their pupils from AI-driven sextortion.

The Reality of the Threat: The Case of a UK Secondary School

The warning follows a recent high-profile incident investigated by the Internet Watch Foundation (IWF). A UK secondary school became the target of a sophisticated blackmail attempt after criminals harvested student photos directly from the school’s public online platforms.

Using AI tools, the perpetrators transformed these innocent photos into child sexual abuse material (CSAM). They then sent the deepfake images to the school, threatening to publish them widely online unless a cash ransom was paid.

While the IWF successfully intercepted the distribution of these specific images by creating digital "fingerprints" to block them across major tech platforms, safety leaders warn that it is only a matter of time before more schools are targeted. This tactic is largely driven by organised, international sextortion gangs who use sophisticated scripts to exploit fear and shame.

New Guidance for Schools: Actionable Safeguarding Steps

The Early Warning Working Group (EWWG)—which includes the NCA, NSPCC, IWF, Education Scotland, and the Safeguarding Board for Northern Ireland—has released a practical checklist to help schools adapt their online presence:

Re-evaluate Imagery of Student Faces

Schools are urged to consider whether they need to publish identifiable pupil photos at all. When capturing school life, opt for images that are significantly harder for criminals to misuse:

Take photographs from a distance or from behind the pupils.

Use silhouettes, creative angles, or blurred focuses.

Focus on the activity or milestone (e.g., showcasing artwork, trophies, or projects) rather than the child's face.

Strip Away Identifiable Information

Never pair a student’s photograph with their name—especially their full name. Removing names or keeping identifiers completely anonymous makes it much harder for blackmailers to cross-reference or target specific families.

Tighten Social Media & Website Privacy

Review who can access your school's content. Apply strict privacy settings to official social media accounts to limit who can view, download, or share your posts.

Conduct Regular Digital Audits

Establish a routine schedule to audit your website, prospectus, and historic social media feeds. Delete older imagery that features face-on portraits of current or former students, and ensure image consent agreements with parents are regularly updated to reflect these new AI risks.

What to Do If Your School Is Targeted

If your institution receives a blackmail threat or discovers manipulated imagery of a pupil, the EWWG advises taking immediate action:

• Contact the Police: Report the incident to law enforcement immediately;

• Preserve Evidence: Retain the criminal images and messages exactly as they were received to assist the police; and

• Protect the Source: Immediately remove the original, legitimate images from your website or social media channels to prevent further manipulation.

Balancing Celebration with Safety

The shift marks a depressing but necessary evolution in school safeguarding. Responding to the guidance, Leora Cruddas, Chief Executive of the Confederation of School Trusts (CST), noted that while educators instinctively want to celebrate children's achievements publicly, schools must now find the "right balance" to keep everyone safe.

Some institutions have already acted; for instance, the Loughborough Schools Foundation recently underwent a complete website redesign specifically to remove recognizable images of its pupils.

As AI technology continues to advance rapidly, UK schools must stay one step ahead. Transitioning toward "face-free" digital marketing isn't about diminishing school spirit—it is about ensuring the safety and mental well-being of the children in your care.

Handsam has a wide variety of data protection resources available to download - log on to the Handsam System and use the topic tag 'Data Protection'