whatsapp.com
Partial
- Domain
- whatsapp.com
- Category
- Messaging
- Last review
- 2026-04-15
Detection & scanning
Whether known and novel abuse material is found at all, and across which surfaces of the product.
Hash matching on publicly posted media
Matching is applied to unencrypted surfaces: profile photographs, group images, names and descriptions. [1]
Hash matching on private messages and attachments
Message content is end-to-end encrypted and not matched. [1]
Classifier detection of previously unseen material
No classifier applied to message content.
Detection applied to live and streamed video
Calls not covered.
Detection of grooming and solicitation in text
Behavioural signals are used to identify accounts engaged in distribution without reading content. [1]
Participation in industry hash-sharing programmes
Consumes industry hash sets on the surfaces available to it.
Reporting & transparency
What the operator tells NCMEC, law enforcement and the public, and whether those disclosures can be checked.
Files CyberTipline reports to NCMEC
Files CyberTipline reports at substantial volume given the surfaces it can see. [2]
Publishes child-safety enforcement figures
Figures are reported within the parent group's disclosure.
Report quality sufficient for investigation
Reports carry account metadata rather than content.
Reporting cadence and timeliness
Filed on detection.
Response & enforcement
What happens after material is found: how fast it comes down, what happens to the account, and whether the decision can be contested.
Time to removal of confirmed material
Account-level action rather than content removal.
Prevention of re-registration
Phone-number registration raises the cost of return.
Preservation of evidence
Metadata preservation on request.
Escalation of imminent-harm cases
Escalation path documented.
Product & policy posture
The design decisions that determine how much abuse is possible in the first place, before any detection is applied.
Protective defaults for minor accounts
Privacy defaults limit discovery.
Restrictions on adult-initiated contact with minors
Contact requires a phone number, though group invite links circumvent this.
Age assurance at registration
Self-declared age.
Recommendation systems assessed for minor-safety harm
No recommendation surface.
Encryption posture and stated mitigations
Compensating measures are published in some detail. Their effectiveness relative to content scanning is not quantified. [1]
Published child-safety policy with defined enforcement
Policy published with stated enforcement.
Sources
- [1] WhatsApp child safety documentation
WhatsApp · 2025
- [2] CyberTipline Data
NCMEC · 2025
Know something we don’t?
If we’ve missed a controversy or there’s newer reporting on WhatsApp, tell us. If you represent WhatsApp, we welcome documentation of safety measures not yet reflected here.
Contact us