The inbox crime wave

When criminals build an attack, they choose the channel that hides the work. The apps showing up most often in Australia's sextortion complaints — Instagram, WhatsApp, iMessage, Snapchat — are not fringe venues; they are the platforms young Australians already use, built around private messaging and video environments that organized networks have learned to exploit. Call it the inbox crime wave: harm migrates to whatever channel least resembles a public feed.

The eSafety Commissioner, Julie Inman Grant, put a number on it: more than 2,000 sextortion complaints in the second half of 2025, with young men aged 18 to 24 the most-affected cohort and younger teens increasingly in the crosshairs. The wire framed it as platforms being warned. The decode is architectural. The regulator's own list of blind spots — private messaging, video environments — names the features these networks depend on, not features that incidentally failed.

The mechanism repeats. Detection arrives only after a victim has sent. Reporting lives behind a settings menu. Content disappears before a moderator can see it. The regulator's prescribed fix — proactive detection in private channels, accessible reporting, a multi-layered approach — concedes the shape: moderation by response cannot outrun a channel designed not to surface harm. Criminal networks win as long as the inbox stays opaque. The young men in those inboxes — and the teens underneath them — lose as long as detection lags the send. The architecture is the attack surface.