Your kid mentions it almost in passing. “Oh, Mr. Whoever added me on Instagram.” Maybe it’s on the way out the door, maybe it’s over dinner. Either way, something in you sits up straight.
That reaction is worth trusting. Not because every teacher who follows a student online is doing something wrong, but because this is exactly the kind of situation where a calm, methodical check matters more than a gut call in either direction. You don’t want to panic and accuse someone wrongly. You also don’t want to shrug it off because it feels awkward to ask questions. Here’s how to work through it properly.
Start by talking to your kid, not the account
Before you do anything else, get the full picture from your child. Not as an interrogation, just a conversation.
Ask what happened, in their words. Did the teacher send a follow request, or did your kid follow them first? Is this a personal account or something that looks school-related? Has there been any messaging, or is it just a follow?
Ask how they feel about it. Kids often sense when something’s off before they can explain why. If your child seems uneasy, confused, or is downplaying it a little too fast, pay attention to that.
Keep the tone open, not alarmed. If your child thinks they’re in trouble for mentioning it, they’ll stop mentioning things. You want them to keep bringing you this stuff, especially as they get older and their online life gets more private by default.
This is also a good moment to check in more broadly on what’s been happening online this year, not just this one incident. If it’s been a while since you’ve had that wider conversation, this guide on talking to your kid about what’s happened online this school year is a useful place to start.
Verify the account before you assume anything
Here’s where a lot of parents jump straight to conclusions, and it’s worth slowing down instead. Not every account that appears to be a teacher actually is one.
Look at the account itself. Does it match a name you recognize? Is the profile picture actually the teacher, or something generic? A brand-new account with no posts and few followers is a different situation than a longstanding account with years of ordinary activity.
Check for impersonation. Fake accounts using a real teacher’s name and photo do happen, sometimes as a prank, sometimes as something more concerning. Impersonation online works the same way it does in other scams: something looks legitimate at a glance because it’s copying a trusted identity, not because it belongs to that person. If you want a sense of how convincing this kind of spoofing can be, the same logic shows up in how email spoofing works and why the ‘from’ name can lie to you.
Note whether it’s a personal or professional account. Plenty of schools and individual teachers run official classroom accounts for announcements, homework, or class projects. Those are usually public, clearly labeled, and followed by lots of students and parents alike. A personal account reaching out to an individual student is a different scenario entirely, and it deserves more scrutiny, not less.
Don’t message the account to “test” it. It’s tempting to send a message asking who this is, but that alerts a stranger that a parent is paying attention, and it doesn’t actually confirm anything. Verification should happen through the school, not through the account itself.
Contact the school directly
Once you’ve got the basic facts from your child, take it to the school. Not the teacher. The school.
Reach out to the principal, vice principal, or your child’s counselor, and describe exactly what happened: which platform, roughly when the request came in, and whether there’s been any messaging. Ask whether the account matches a known official classroom account, and whether the school has a policy on staff contacting students on personal social media.
Most schools do have a policy here, even if it’s not something you’ve ever had reason to look up. Many explicitly discourage or prohibit teachers from connecting with students on personal accounts, precisely because it blurs a line that needs to stay clear. If the account turns out to be a legitimate class page, you’ll likely get a quick, simple answer and can move on. If it’s not, the school needs to know regardless of what you decide to do next.
Keep a record as you go:
- Screenshots of the account, the follow request, and any messages
- Dates and times, as best you can reconstruct them
- Notes on who you spoke with at the school and when
This isn’t about building a case against anyone. It’s about having accurate information if things move further, and about not relying on memory a few weeks from now.
When this crosses into something more serious
Most of the time, this kind of thing resolves as a misunderstanding, an impersonation account, or a policy conversation the school handles internally. But a few signs mean this needs to move past the school and toward law enforcement or the NCMEC CyberTipline right away:
- The adult is asking your child to keep the contact secret from parents or other staff
- Messages have moved toward personal topics, compliments about appearance, or requests for photos
- The adult is asking to communicate on a different app, especially one built for disappearing messages
- There’s any pressure, guilt, or manipulation involved in getting your child to respond or stay in contact
- Your child seems frightened, or their behavior has changed noticeably
If any of that applies, don’t wait on a school meeting. This becomes a matter for the NCMEC CyberTipline and local law enforcement, not an internal HR conversation. Preserve the messages and account information rather than deleting them, and let the professionals who handle this for a living take it from there.
Reduce the chances of it happening again
Once the immediate situation is handled, it’s worth looking at your child’s overall setup rather than just this one account.
Check who can find and message your child online. Public accounts and open DMs make it easy for anyone, teacher or stranger, to reach out unprompted. Reviewing privacy settings together is a good habit at the start of any school year, and this walkthrough of Instagram and TikTok privacy settings covers the specific controls worth checking.
Talk about unsolicited contact from adults in general, not just teachers. The same red flags apply to coaches, family friends, or anyone else with some built-in authority or trust. Kids are taught to be polite to adults, and that instinct can make it harder for them to say no or feel suspicious, even when something feels wrong.
Revisit your family’s agreements around new contacts, DMs, and what gets reported to you. If you don’t have something like this written down, setting up a family media agreement gives you a framework to work from rather than making up the rules on the spot.
None of this makes your child completely safe from ever being contacted by the wrong person. Nothing does. But it does mean that if it happens again, your child already knows what to do, and you already know how to check it properly.
The most useful thing to take from this isn’t a single setting or app. It’s the habit underneath it: your kid tells you when something feels strange online, and you take it seriously without overreacting. That habit is worth more than any privacy setting, and it’s the one thing worth protecting above all the rest.
A quick safety note
This article is general information, not professional security, legal, or medical advice. No single tool or setting makes anyone completely safe; security works in layers. If you are dealing with a live incident, such as active fraud, ransomware, or a child in danger, contact the appropriate professionals or authorities. For a threat to a child, report it to the NCMEC CyberTipline at report.cybertip.org and to local law enforcement.
