Perspectives · ICAC & Investigations

CSAM Cases Keep Growing, and the Harm Is Far Worse Than Most People Realize

A digital forensics investigator reviewing a growing volume of encrypted evidence in a secure operations room.
Back to all articles

In 2023, the National Center for Missing and Exploited Children received more than 36 million reports of suspected child sexual exploitation through its CyberTipline. That number is hard to process on its own, but for investigators it translates into something very real: phones to review, cloud accounts to preserve, children to identify, and families whose lives have been permanently damaged.

Child sexual abuse material, or CSAM, is not just another digital crime category. It documents real abuse. Every file can represent a child being harmed, and every download, trade, or repost can extend that harm. For law enforcement, this work sits at the intersection of urgency, trauma, and overwhelming digital volume. For the public, it is easy to reduce the issue to a statistic. For agencies working these cases, there is nothing abstract about it.

The scale is growing. The technology involved keeps changing. And the impact on victims does not end when the abuse itself stops.

What the data says about the scale of CSAM

The numbers are sobering. NCMEC reported more than 36.2 million CyberTipline reports in 2023, up from 32 million in 2022. Those reports included more than 105 million files—images, videos, and other content flagged by electronic service providers and the public. The volume is not a sign that platforms and investigators are exaggerating the issue. It is a sign that online exploitation is widespread, persistent, and deeply networked.

The Internet Watch Foundation, which tracks child sexual abuse material online, also reported record levels. In 2023, IWF found more than 275,000 webpages containing confirmed child sexual abuse imagery. It also found that a growing share of the material involved younger children. According to IWF reporting, a very high proportion of assessed imagery depicted children aged 7 to 10, and a large amount involved children even younger.

This is not limited to one country or one platform type. Cases touch social media, encrypted messaging apps, gaming services, cloud storage, live streaming platforms, peer-to-peer networks, and offender-managed forums. Investigations often cross jurisdictions within hours. A local case can quickly involve federal partners, internet service providers, school systems, and child advocacy resources.

There is also a common misconception that CSAM cases are mostly about old files being recirculated. That does happen, but it is only part of the picture. The Department of Justice has repeatedly emphasized that online child exploitation includes production, coercion, sextortion, live abuse, and offender networks that actively seek new victims. The FBI has separately warned of sharp increases in financially motivated sextortion schemes targeting minors, especially boys, sometimes resulting in self-harm or suicide after threats to release images.

For agencies, this means a CSAM case is rarely just a possession case sitting quietly on a device. It may involve active victimization, contact offending, extortion, or evidence that points to children who have not yet been identified.

Why CSAM is uniquely damaging

One reason CSAM is such a scourge is that the harm keeps repeating. A child may be abused once or many times during the original offense, but the trauma does not stop there. Victims often live with the knowledge that images or videos of their abuse may still be circulating years later. That uncertainty matters. It affects recovery, trust, relationships, and mental health.

Research and victim statements have made this clear for years. The crime is not only the abuse that was recorded. It is also the ongoing distribution, viewing, collecting, and trading of that abuse. Each act of possession or sharing reinforces demand and contributes to a market built on exploitation.

There is another hard truth here. The people who work these cases absorb part of that weight too. Investigators, digital forensic examiners, prosecutors, analysts, and task force officers are routinely exposed to traumatic material. Agencies that treat CSAM as just another case type, without strong wellness practices and thoughtful workflows, put their people at risk.

That operational burden is increasing because the evidence is increasing. A single case can involve multiple phones, laptops, hard drives, cloud accounts, chat logs, app data, and platform returns. Even with triage tools, review takes time. Warrants take time. Victim identification takes time. Meanwhile, children may still be in danger.

The practical challenge for agencies is balancing speed with care. Move too slowly, and a child may remain at risk. Move too loosely, and evidence handling, reporting quality, and case coordination can break down. That is where disciplined case management matters, not as an administrative extra, but as part of protecting victims and supporting good investigations.

What good agency response looks like in practice

No software or workflow fixes the underlying horror of CSAM. But agencies can make these cases more manageable, more coordinated, and more victim-centered.

First, early triage matters. CyberTipline referrals, patrol reports, school notifications, and tips from providers need a clear intake process. Agencies should know who owns the first review, how threat level is assessed, when a referral becomes an active case, and what triggers supervisor notification. Cases involving possible hands-on abuse, known access to children, or evidence of active extortion should never sit in a generic queue.

Second, investigators need a complete case picture in one place. That includes reports, warrants, return data, device inventories, hash value hits, suspect identifiers, linked incidents, and victim notes. Fragmented information slows down response and increases the risk that critical details get missed. In CSAM work, those details matter. A username reused across platforms, a school connection, a recurring background object in media, or a timeline inconsistency can be the difference between a static file case and identifying an active offender.

Third, agencies need structured coordination. CSAM cases often involve ICAC task forces, federal partners, prosecutors, child advocacy centers, and digital forensics units. Without clear task assignment and status tracking, work gets duplicated or delayed. Evidence requests stall. Follow-ups fall through. Victim services may not get looped in quickly enough. Good coordination is not glamorous, but it is often what keeps a difficult case moving.

Fourth, wellness cannot be an afterthought. Investigators should have rotation options where possible, supervisory check-ins, access to mental health support, and practical controls around prolonged exposure to traumatic material. Agencies do not help children by burning out the people responsible for these investigations.

Finally, reporting quality matters. CSAM investigations are frequently reviewed by prosecutors, defense counsel, partner agencies, and courts. Clear timelines, complete documentation, and consistent evidence tracking are not paperwork for its own sake. They support charging decisions, victim identification efforts, and case outcomes.

Useful reference points for agencies

These numbers and findings point to the same conclusion. CSAM is not a niche internet problem. It is a large, adaptive, victim-driven crime problem that reaches into local jurisdictions every day.

For law enforcement leaders, the takeaway is straightforward. Treat CSAM investigations as high-risk, high-volume, and deeply human. Build workflows that support fast triage, tight coordination, careful evidence handling, and investigator wellness. The technology matters, but the goal is simpler than that. Help people see the full picture quickly, act on the highest-risk cases sooner, and reduce the chance that a child gets lost in the backlog.

Sources: National Center for Missing and Exploited Children, 2023 CyberTipline Report; Internet Watch Foundation, 2023 Annual Data and Insights; U.S. Department of Justice child exploitation resources; Federal Bureau of Investigation public advisories on child exploitation and sextortion.

Help investigators act on the highest-risk cases sooner

See how ShieldView brings evidence, tasks, timelines, and wellness-aware workflows together for complex child exploitation investigations.

Request a Demo Case Management