CAC Online Grooming & Enticement Ontology
An ontology for representing online grooming behaviors, enticement patterns, and predatory communication tactics in Internet Crimes Against Children cases, extending UCO and CASE with gUFO foundational ontology enhancements.
Grooming Behavior
Predatory behavior designed to prepare a child for abuse by building trust, isolating them, and normalizing inappropriate contact.
Trust Building Behavior
Early grooming stage focused on establishing emotional connection with the child victim.
Conditioning Behavior
Offender behavior that shapes victim readiness, compliance, dependency, or situational constraints preparatory to direct exploitation.
Isolation Behavior
Attempts to separate child from parents, friends, or other support systems.
Normalization Behavior
Gradual introduction of sexual topics to normalize inappropriate behavior.
Enticement
Direct solicitation of a child to engage in illegal sexual activity or meet for such purposes.
Sexual Exploitation
Direct exploitation of child for sexual purposes including solicitation of images or performances.
Online Grooming
Grooming behavior conducted through online platforms and digital communication channels.
Grooming Phase
A temporal phase within the grooming process.
Initial Contact Phase
First phase of grooming involving initial contact and relationship establishment.
Conditioning Phase
Grooming-process phase in which the offender conditions the victim or situation for exploitation — including rapport, isolation, normalization, and compliance shaping prior to the primary exploitation act.
Canonical instance type for macro-level ConditioningPhase nodes in ICAC offense-trajectory state machines. Always dual-type cac-core:Phase on every instance. Set cac-core:conditioningMode on this macro node only — not on SexualizationPhase or IsolationPhase variant nodes.
Trust Building Phase
Phase focused on building emotional connection and trust with victim.
Deprecated offense-trajectory phase label. For new graphs, type as cacontology-grooming:ConditioningPhase and cac-core:Phase with cac-core:conditioningMode trust_rapport.
Isolation Phase
Phase aimed at separating victim from support systems and creating dependency.
Subclass of ConditioningPhase (conditioning mechanism). State-machine modeling conventions: docs/glossary.md (Offense-trajectory state machine).
Sexualization Phase
Phase involving introduction of sexual content and normalization of inappropriate behavior.
Exploitation Phase
Final phase involving direct sexual exploitation and abuse.
Maintenance Phase
Ongoing phase to maintain control and continue exploitation.
Grooming Message
Communication containing grooming behavior or inappropriate content directed at a child.
Sexual Solicitation
Message explicitly requesting sexual activity, images, or meetings from a child.
Inappropriate Gift
Offer or provision of gifts, money, or favors as part of grooming process.
Secrecy Request
Instruction to keep communication or relationship secret from parents or authorities.
Victim Response
Child's response to grooming behavior, indicating compliance, resistance, or confusion.
Grooming Pattern
Identifiable pattern of behavior across multiple communications or interactions that indicates grooming.
Escalation Pattern
Progressive increase in inappropriate content or requests over time.
Manipulation Pattern
Systematic use of psychological manipulation techniques to control victim.
Prey Behavior Pattern
Pattern of targeting vulnerable children or specific victim characteristics.
Online Grooming Situation
Overall situation encompassing the grooming relationship and interactions.
Victim Vulnerability Situation
Circumstances that make a child more susceptible to grooming.
Online Predation Situation
Active situation where predator is engaging with potential victims.
Child Victim
Minor child who is the target of grooming behavior. When analysis depends on the victim’s exact age at specific grooming events (e.g., 13-or-younger online grooming in 2025), that age SHOULD be represented using one or more cacontology-temporal:AgeAtTimeSituation instances linked to the underlying person.
Online Predator
Individual who engages in grooming behavior toward children online. Age-at-time for this offender MAY be captured via cacontology-temporal:AgeAtTimeSituation instances when age-gap and legal-capacity reasoning is required.
Victim Vulnerability
Characteristics or circumstances that make a child more susceptible to grooming.
has grooming phase begin point
Temporal begin point for grooming phase.
has grooming phase end point
Temporal end point for grooming phase.
has role begin point
Temporal begin point for grooming role.
has role end point
Temporal end point for grooming role.
grooming phase duration
Duration of grooming phase.
grooming stage
Behavior-axis stage tag on GroomingBehavior instances (not the offense-trajectory phase class used in state machines).
For offense-trajectory state machines, phase typing uses GroomingPhase subclasses and cac-core:conditioningMode on the macro ConditioningPhase node — not groomingStage. trust_building and sexual_introduction are legacy behavior-axis values retained for backward compatibility; prefer conditioning and sexualization in new behavior graphs.
conditioning mode
Dominant conditioning mechanism on a grooming ConditioningPhase instance or ConditioningBehavior instance.
For conditioningMode value platform_confidence: offender models and develops operational confidence in a platform's affordances, detection characteristics, and community norms prior to exploitation — applicable to mainstream platforms, encrypted messaging apps, dark web forums, and generative AI tools. This mechanism is offender- and platform-directed, not victim-directed rapport or trust building.
Trust Building
Trust-rapport conditioning behavior establishing emotional connection with the child victim.
trust building method
Method used to build trust during conditioning (active_listening, emotional_support, shared_interests, etc.).
trust level
Assessed level of trust established during trust-rapport conditioning.
trust development rate
Rate at which trust is developed during conditioning, typically between 0.0 and 1.0.
Isolation Tactics
Isolation conditioning behavior separating the victim from support systems.
behavior duration
Length of time grooming behavior continued (in days).
targets victim
Links grooming behavior to the child victim being targeted.
exhibits pattern
Links grooming behavior to an identifiable pattern.
communication frequency
Frequency of contact with victim (daily, weekly, multiple_daily).
content type
Type of content in grooming message (text, image, video, audio).
explicitness level
Level of sexual explicitness in content (none, suggestive, explicit, graphic).
emotional tone
Emotional approach used in message (caring, threatening, manipulative, seductive).
uses gifts
Whether grooming involves offering gifts or money.
requests secrecy
Whether grooming involves requests to keep relationship secret.
uses threats
Whether grooming involves threats or intimidation.
role playing tactic
False role claimed by predator (peer, mentor, romantic_interest, authority_figure).
victim compliance
Level of victim compliance with requests (resistant, hesitant, compliant, eager).
distress indicators
Signs of distress in victim's responses.
seeking help
Whether victim attempted to seek help or report the contact.
pattern confidence
Confidence level in pattern identification (0.0-1.0).
escalation rate
Speed of escalation from initial contact to explicit content (days).
manipulation technique
Specific psychological manipulation technique employed.
vulnerability type
Type of vulnerability (social_isolation, family_problems, low_self_esteem, seeking_attention).
has vulnerability
Links child victim to specific vulnerabilities that may be exploited.
primary platform
Main digital platform where grooming communication occurred.
time of contact
Typical time of day when contact occurs (morning, afternoon, evening, late_night).
contact frequency
How often communication occurs (daily, several_times_daily, weekly).
evidence value
Assessment of grooming behavior's value as evidence (high, medium, low).
prosecution relevance
Relevance of grooming evidence to prosecution case.
victim impact
Assessment of psychological impact on victim (minimal, moderate, severe, extreme).
Anonymous Platform Contact
Initial contact made through platforms that allow anonymous messaging or minimal user verification.
Unverified User Profile
User account with minimal or no identity verification enabling anonymous contact.
Anonymous Initiation
Starting contact without revealing true identity or personal information.
Platform Anonymity Feature
Platform features that enable anonymous communication (guest messaging, temporary accounts, no profile requirements).
Trust Through Anonymity
Building trust by appearing less threatening through anonymous contact.
Online to Offline Progression
Escalation from online grooming to arranging physical meetings or contact.
Physical Meeting Arrangement
Coordination of in-person meeting between predator and victim.
Travel Arrangement
Planning or facilitating travel for victim to meet predator.
Interstate Transport Plan
Planning to transport victim across state lines for illegal purposes.
Victim Compliance in Physical Meeting
Victim's agreement or compliance with arranged physical meeting.
Location Specific Grooming
Grooming that references or prepares for specific physical locations.
Offline Control Establishment
Establishing control over victim in preparation for physical contact.
platform anonymity level
Level of anonymity provided by platform (full_anonymous, guest_allowed, minimal_verification, verified_only).
identity verification required
Whether platform requires identity verification for messaging.
anonymous contact method
Method used for anonymous initial contact (random_messaging, response_to_post, platform_matching, profile_browsing).
initial contact pretense
False reason given for initial contact (shared_interests, age_misrepresentation, help_offering, casual_conversation).
progression duration
Duration in days from initial online contact to physical meeting arrangement.
meeting location specified
Whether specific physical meeting location was arranged.
transportation proposed
Type of transportation proposed for meeting (predator_travel, victim_travel, mutual_meeting_point).
crosses state boundaries
Whether arranged meeting involves crossing state lines.
utilizes platform feature
Links anonymous contact to specific platform features that enable anonymity.
progresses to physical meeting
Links online grooming to physical meeting arrangements.
involves interstate transport
Links travel arrangement to interstate transportation planning.
Educator Grooming
Grooming behavior by educational personnel leveraging position of trust and authority.
Position of Trust Grooming
Grooming that exploits educator's position of trust and authority over students.
Peer Persona Grooming
Grooming using false peer identity to establish rapport with victims.
Teenage Impersonation Grooming
Grooming involving impersonation of teenage peer to gain victim trust.
Multiple Account Grooming
Grooming using multiple fake accounts to maintain deceptive identity.
Cross Institutional Grooming
Grooming targeting students from multiple educational institutions.
Fabricated Persona
A fabricated identity (e.g., a fictitious minor peer) created and controlled by an offender to contact, groom, lure, or coerce victims. The same persona may be reused across victims and platforms. Complements PeerPersonaGrooming / TeenageImpersonationGrooming behavior classes: the behavior classes type the grooming activity, while FabricatedPersona types the persona artifact itself. See also impersonatesRole / impersonatedRole for role-level alignment.
claimed display name
Display name the fabricated persona presents to victims (e.g., 'Amy Jennings').
claimed age
Age or age range the fabricated persona claims (e.g., '15', '15-16').
claimed gender
Gender the fabricated persona claims to victims.
persona platform account
Links a fabricated persona to a platform account observable operated under that persona.
controlled by
Links a fabricated persona to the offender (person) who creates and controls it.
persona used in
Links a fabricated persona to the grooming or coercion activity in which it was used (reusable across multiple victims).
Sexual Content Exchange Grooming
Grooming involving exchange of sexual content to normalize sexual behavior.
Initiator Content Sending
Grooming phase where perpetrator sends sexual content to victim first.
Reciprocity Grooming
Grooming technique encouraging victim to reciprocate with sexual content.
Normalization Grooming
Grooming technique to normalize sexual conversations and content sharing.
Graphic Conversation Grooming
Grooming involving progressively graphic sexual conversations.
Victim Targeting
The process by which an offender identifies and selects a potential victim.
Elite Institution Targeting
Targeting of students from elite or prestigious educational institutions.
Privileged Victim Targeting
Targeting of victims from privileged backgrounds who may be less likely to report.
Reputation Based Silencing
Exploitation of institutional reputation to discourage victim reporting.
impersonated role
Role impersonated during grooming (student, peer, teenager).
accounts used
Number of fake accounts used in grooming process.
institutions targeted
Number of educational institutions from which victims were targeted.
Type of sexual content exchanged (images, videos, text).
initiation method
Method used to initiate sexual content exchange.
institution prestige
Prestige level of targeted institution (elite, prestigious, standard).
leverages position
Links grooming to educator position being leveraged.
impersonates role
Links grooming to role being impersonated.
targets institution
Links grooming to educational institution being targeted.
exchanges content
Links grooming to sexual content being exchanged.
exploits reputation
Links grooming to institutional reputation being exploited.
Rapid Escalation Grooming
Grooming with accelerated timeline from initial contact to exploitation attempt, bypassing traditional relationship-building phases.
Same Day Progression
Grooming progression from initial contact to sexual exploitation within the same day.
Immediate Exploitation Attempt
Attempt to immediately exploit victim without extended grooming or relationship building.
Skipped Grooming Phases
Grooming that bypasses traditional conditioning phases such as trust building, isolation, and normalization.
Opportunistic Grooming
Grooming that exploits immediate opportunities rather than planned relationship development.
Accelerated Trust Exploitation
Rapid exploitation of minimal trust established through pretexts or assistance offers.
Direct Trafficking Proposition Grooming
Grooming involving explicit, immediate propositions for commercial sexual activity without gradual normalization.
Explicit Commercial Offer Grooming
Grooming involving direct offers of money in exchange for sexual services.
Economic Incentive Grooming
Grooming that emphasizes financial benefits of commercial sexual activity.
Blunt Recruitment Grooming
Direct, unsubtle recruitment for trafficking without gradual persuasion techniques.
Immediate Monetization Grooming
Grooming focused on immediate monetization of victim's sexuality.
Substance Facilitated Grooming
Grooming that uses alcohol or drugs to reduce victim resistance and facilitate exploitation.
Impairment Based Grooming
Grooming that exploits victim impairment from substances to reduce resistance.
Substance Induced Vulnerability Grooming
Grooming that creates vulnerability through substance administration.
Alcohol Facilitated Grooming
Grooming using alcohol to impair victim judgment and reduce resistance.
Marijuana Facilitated Grooming
Grooming using marijuana to reduce victim inhibitions and facilitate exploitation.
Physical Space Grooming
Grooming that occurs in physical spaces rather than digital platforms.
Street Based Grooming
Grooming that begins with street-based contact and recruitment.
Vehicle Based Grooming
Grooming that uses vehicles for isolation and exploitation.
Isolation Based Grooming
Grooming that relies on physical isolation to reduce victim resistance.
Public to Private Grooming
Grooming that transitions from public contact to private exploitation.
Sexual Consequence Game Grooming
Physical-space grooming pattern where the perpetrator frames sexualized contact as part of a game with consequences, typically involving multiple juveniles in a group context (e.g., sleepovers, peer gatherings, family events).
escalation timeframe
Time from initial contact to exploitation attempt in hours.
same day progression
Whether grooming progressed from contact to exploitation within same day.
skipped phases
Traditional conditioning phases that were bypassed (conditioning, trust_building, isolation, normalization).
opportunity type
Type of opportunity exploited (vulnerability, isolation, need_for_help).
trust exploitation speed
Speed of trust exploitation (immediate, rapid, accelerated).
proposition explicitness
Level of explicitness in trafficking proposition (subtle, direct, explicit, blunt).
commercial offer type
Type of commercial sexual activity offered (stripping, prostitution, escort_services).
economic incentive amount
Specific monetary amount mentioned in economic incentive.
recruitment directness
Level of directness in recruitment approach (subtle, moderate, direct, blunt).
monetization timeframe
Proposed timeframe for monetization (immediate, same_day, within_week).
substance type
Type of substance used to facilitate grooming (alcohol, marijuana, other_drugs).
impairment level
Level of victim impairment from substances (mild, moderate, severe).
administration method
Method of substance administration (offered, forced, shared, deceptive).
physical location
Type of physical location used for grooming (street, vehicle, isolated_area).
isolation method
Method used to isolate victim (vehicle_transport, location_change, privacy_creation).
transition speed
Speed of transition from public to private space (immediate, rapid, gradual).
participant count
Number of juvenile participants involved in the sexual consequence game.
game context
Context for the sexualized game (e.g., sleepover, peer_group, family_gathering, youth_activity).
rule structure description
Short description of the rules and consequence mechanics used to structure the sexualized game.
bypasses phase
Links rapid escalation to traditional grooming phase being bypassed.
exploits opportunity
Links opportunistic grooming to specific opportunity being exploited.
accelerates trust
Links grooming to trust-building mechanism being accelerated.
facilitates with substance
Links grooming to substance used for facilitation.
occurs in space
Links physical space grooming to location where it occurs.
transitions to location
Links public-to-private grooming to exploitation location.
Account Replacement Event
Pattern where an offender whose account is banned or blocked creates a new account and returns to an earlier offense phase (typically initial contact). The lifecycle resets rather than terminates — structurally distinct from a coercion cycle.
triggered by
What triggered account replacement (victim_block, platform_ban, detection_risk, voluntary).
resumes at
Phase instance the offender returns to after account replacement (typically InitialContactPhase).
original account id
Reference to the banned or blocked account if known.
replacement account id
Reference to the new account used to resume contact if known.