INTERPOL ICSE / Crimes Against Children: Intelligence Source Guide

INTERPOL's International Child Sexual Exploitation database is the global victim identification system, accessible only to specialist investigators in connected countries. For everyone else it is a referral destination and a public appeals channel, and understanding the difference is the whole of the tradecraft here.

At a glance

Source	INTERPOL ICSE / Crimes Against Children
Category	Conflict, Crime & Human Security › Human Trafficking & Child Protection
Homepage	https://www.interpol.int/Crimes/Crimes-against-children
Format	`HTML`
Access	Restricted — eligibility-gated (member states, institutions or vetted users) The platform catalogue records this as open. That is wrong, and the correction is explained under Access, licensing and what you may do with it below.
Disciplines	Legal Intelligence, Human Intelligence
Mission domains	Child Protection

International child-exploitation image database program. — as catalogued in the platform’s own source registry.

The International Child Sexual Exploitation database is a system operated by INTERPOL and accessed by specialised investigators in connected member countries over INTERPOL's secure police communications network. Its purpose is victim identification: connecting material to the child depicted, to the offender, and to the place where the abuse occurred, so that a child can be found and safeguarded. It works by allowing specialist investigators to compare material against what is already held, using image and video comparison technology to recognise duplicates and to link items into series, and by supporting collaborative analysis of the non-abusive contextual detail in a scene – furniture, packaging, textiles, currency, uniforms, plants, architecture, background audio, language – to narrow down a location. The database succeeded an earlier INTERPOL image database and has been operational since 2009. Dozens of countries are connected, along with Europol, and INTERPOL publishes periodic figures on how many victims have been identified through the system, a total now running into the tens of thousands. INTERPOL also maintains a restricted baseline list used by industry and hotline partners for blocking purposes, runs a specialists group and periodic victim identification taskforces, and operates a public appeals channel that publishes non-explicit cropped objects from scenes so that members of the public can help identify a location.

The unique job this system does is turn material into a rescued child. No other mechanism exists at global scale for that. National investigations working in isolation cannot recognise that a series appearing in one country is the same series recovered in another, cannot pool the contextual analysis that locates a scene, and cannot prevent dozens of specialists in different countries independently re-examining material that has already been fully worked. The database is the deduplication and coordination layer that makes international victim identification tractable, and its value is measured in identified victims rather than in records. For LEGINT and HUMINT purposes what matters to a non-law-enforcement analyst is the second-order picture: which countries are connected, how the international referral architecture is organised, what the specialist capability landscape looks like, and where the public appeals channel offers a legitimate way for open-source skills to contribute. The public geolocation appeals are genuinely unusual – a controlled, safe, lawful route by which OSINT and GEOINT competence can be applied to child protection without any exposure to abusive material.

Who publishes it, and why that matters

INTERPOL is an international police cooperation organisation whose members are national police authorities, funded through member contributions and project funding, and its constitution constrains it to activities within national law and prohibits intervention in political, military, religious or racial matters. That structure has two consequences for this system. First, INTERPOL is a facilitator, not an investigative agency – it holds no operational jurisdiction, cannot investigate, and depends entirely on member countries contributing material and acting on results. A country that does not connect, does not contribute or lacks a specialist unit simply is not part of the picture. Second, access control is strict and centrally governed, and the restriction is not bureaucratic caution but a legal and ethical necessity given what the system contains. INTERPOL publishes deliberately little about the database's internals, which is correct. The organisation's longevity is not in question, but its coverage depends on the continued willingness and capability of member countries, and specialist victim identification units are chronically under-resourced in most of the world, which is the real constraint on the system's effectiveness.

Provenance is the first question to ask of any dataset and the one most often skipped. Who collects it, what their incentive is, whether they publish a methodology, and whether they correct the record when they get something wrong all bear directly on how much weight a finding drawn from it can carry.

What a record actually contains

The fields you will be working with, what each one means, and whether it is something you can pivot on. Read the meanings carefully — more analysis is wrecked by misreading a field than by failing to find one, and a field that looks like an observation is often an inference.

Field	Type	What it means	Pivot value
`Connected country`	string	Whether a member country has access to the database and a unit able to use it. This is the most analytically useful publicly derivable attribute, because connection status is a direct measure of a country's participation in the international victim identification system.	National specialist unit capability, regional coverage gaps, and the capacity-building priorities that follow.
`Identified victims total`	int	The cumulative number of children identified through the system, published periodically by INTERPOL. It rises steadily and the current figure should be read from INTERPOL's own publication rather than from any secondary source, including this one.	Trend in international identification capability; comparison against the scale of material reported through hotline and platform channels.
`Series linkage`	string	The grouping of related material into a series concerning the same victim or the same abusive situation. Series-level working is the core analytical unit of victim identification and is entirely internal to the restricted system.	Not available outside law enforcement. Referenced here so that analysts understand what specialists mean when they discuss series-level identification.
`Comparison technology output`	string	The result of automated image and video comparison used to recognise previously seen material and to surface candidate links. It supports specialist judgement and does not replace it; the identification decision is made by a trained analyst.	Restricted. Relevant publicly only to understanding why hash and comparison standards matter to the industry and hotline ecosystem.
`Contextual scene attributes`	array	Non-abusive detail from a scene used to narrow location: objects, packaging, textiles, currency, plants, architecture, language and audio. This is the analytical raw material of victim identification and the basis of the public appeals channel.	For the public appeals only: geographic and cultural identification of objects, which is exactly the competence the OSINT community has.
`Public appeal object`	string	A cropped, non-explicit object or background element published by INTERPOL for public identification, with no person, no abusive content and no case detail. The only element of this system that is deliberately open.	Manufacturer, market, region and period of the object; submit findings only through INTERPOL's own channel, never publicly.
`Baseline list membership`	enum	Whether material is on INTERPOL's restricted baseline list used by vetted industry and hotline partners for blocking and filtering. Availability is limited to eligible organisations under specific arrangements.	For eligible providers only: the approach route is INTERPOL or a member hotline. For everyone else it is out of scope.
`Notice type`	enum	INTERPOL's notice system, of which the Yellow Notice for missing persons including missing children and the Red Notice for wanted persons are the publicly visible parts relevant to this domain. A separate mechanism from the database.	INTERPOL's public notices pages; national missing persons systems; the legal significance of a notice, which is often overstated in reporting.
`Specialist unit and taskforce`	string	The national victim identification units and the periodic international taskforces where specialists work jointly on unresolved series. Their existence and resourcing determine whether a country can act on database results at all.	Capability assessment; training and capacity-building needs; the realistic pace of international cooperation with that country.
`Access route`	enum	How a case reaches the system: through a national central bureau and a designated specialist unit, over INTERPOL's secure network. There is no other route, and no route at all for organisations outside law enforcement.	The referral pathway that applies to you, which for almost every reader of this guide is a national hotline or national police rather than INTERPOL.

Coverage — and what is not in it

Coverage has two meanings here and they must be kept apart. The database's own coverage is restricted and not publicly characterisable in detail: it contains what connected countries have contributed, which means its completeness depends on national contribution practice, and INTERPOL does not publish its contents, size or composition beyond the identified-victim totals. The publicly derivable coverage is the participation map – which countries are connected, which have specialist units, which are in the notices system – and that is uneven in the expected way, with strong participation across Europe, North America, parts of Latin America and Asia-Pacific, and thinner participation across much of Africa, Central Asia and the Pacific islands. Connection is not the same as capability: a connected country with one overworked officer and no forensic capacity participates nominally. Temporally, the system has been operational since 2009 with a predecessor going back to the start of the 2000s. The public appeals channel updates irregularly as new appeals are published and resolved. Public statistics update periodically rather than on a fixed schedule. For any workflow, treat the public material as slow-moving reference and the restricted system as entirely outside your collection space.

Known blind spots

Absence of evidence here is not evidence of absence. These are the conditions under which INTERPOL ICSE / Crimes Against Children will not show you something that is nevertheless real:

The system holds what connected countries contribute. Countries that are not connected, that lack a specialist unit, or that do not routinely submit material are absent, and those gaps concentrate in exactly the regions with the least investigative capacity.
Identification depends on there being contextual detail to work with, so material that is visually sparse, heavily processed, or produced in generic settings resists location analysis regardless of the quality of the specialists working it.
Live-streamed abuse frequently leaves no recorded artefact to enter the system at all, which means an entire and growing modality of exploitation – including the commissioning of abuse across borders for payment – is structurally under-represented.
Coerced self-generated material and material produced within grooming and extortion relationships may never reach law enforcement or may enter through routes that do not lead to database submission, so the system's picture skews towards what enforcement recovers rather than what exists.
Synthetic and generatively produced material presents a categorisation problem the system was not designed for, consumes specialist time on victim identification efforts where no identifiable victim exists, and is treated differently in law across jurisdictions.
Nothing about the database's contents, size or composition is public, so no external analysis of it is possible and any claim about what it contains beyond INTERPOL's own published figures is speculation.
Identified-victim totals are cumulative and measure the output of the identification system, not the scale of victimisation. The relationship between the two is unknown and the ratio is certainly very large.
The notices system is often misunderstood in open-source work: a notice reflects a request from a member country and its legal effect varies enormously by jurisdiction, so its presence or absence supports far weaker conclusions than journalists and analysts usually draw.
INTERPOL's constitutional constraints mean it does not act where a matter is assessed as political, and member countries have on occasion sought to misuse the notices system, so the public notices layer requires the same scepticism as any state-submitted data.

Write the blind spot into the product. A statement that something “was not observed in INTERPOL ICSE / Crimes Against Children” is defensible; a statement that it “did not happen” is not, and the difference is what survives cross-examination.

Access, licensing and what you may do with it

Access model: Restricted — eligibility-gated: member states, accredited institutions or vetted users only

For sworn law enforcement in a connected country, access runs through the national central bureau and the designated specialist unit over INTERPOL's secure network, and it is governed by INTERPOL's own rules on data processing. If you are eligible, your national central bureau is the route and there is no shortcut. For everyone else – private investigators, corporate security, journalists, NGOs, academics, and intelligence analysts outside a law enforcement mandate – there is no access, no research route, and no partial arrangement, and this is not negotiable. What is genuinely available to you is the public layer, and it is worth using well: INTERPOL's crimes against children pages describing the programme and the international framework, the public appeals channel where cropped non-explicit objects are published for identification, the public notices for missing and wanted persons, and INTERPOL's periodic statistics and reporting. If you hold information relevant to a case, the route is your national police or national hotline, which will pass it into the system if it belongs there. Approaching INTERPOL directly as a private organisation will simply be redirected, correctly.

Licence

INTERPOL's public web content is copyright of the organisation and made available for information purposes, with reuse conditions stated on its site; cite and link rather than reproducing in bulk. The public appeals material is published for a specific operational purpose – to obtain identifications – and using it for any other purpose, including republication for engagement, illustration or training data, is a misuse even where copyright would technically permit it. Anything within the restricted system is governed by INTERPOL's rules on the processing of data and by the contributing country's law, and no licence exists or could exist for third-party use. Statistics published by INTERPOL may be cited with attribution and a date, and the date matters because cumulative figures change. If you are an eligible provider seeking blocking or filtering data, the arrangements for the baseline list are made with INTERPOL or through a member hotline and carry their own conditions.

Rate limits and fair use

There is no service to rate limit. The public pages are documentation and appeals, and the appropriate collection pattern is a low-frequency scheduled check – monthly for the appeals channel, quarterly for programme pages and statistics. Do not crawl INTERPOL's site aggressively; it is an international police organisation, unusual traffic patterns are noticed, and there is nothing to gain because the content changes slowly. If you are contributing to public appeals work, the throughput constraint that matters is not technical but procedural: findings go to INTERPOL through the designated submission route, one considered submission at a time, rather than as bulk speculative output.

Licensing changes, and it changes without warning. A dataset that was free for research this year may not be free for commercial or evidential use next year. Confirm the current terms before you build a dependency on it, and record the terms you relied on alongside the data — the licence in force at the time of collection is part of the provenance.

Collecting it

How INTERPOL ICSE / Crimes Against Children is actually pulled, in the order you would set it up. Prefer the bulk or export interface over per-item lookups wherever one exists: it is kinder to the publisher, faster for you, and gives a reproducible snapshot rather than a series of point-in-time answers you cannot reconstruct later.

Method	Format	Cadence	Notes
Programme page capture	HTML	Quarterly	The crimes against children pages describing the database, the international framework and the specialist network. Reference material for capability and architecture assessment.
Public appeals monitoring	HTML	Monthly	The published non-explicit object appeals. The only lawful way for open-source analysts to contribute directly, and worth monitoring if your team has genuine object and geolocation competence.
Notices monitoring	HTML	Weekly	Public Yellow and Red Notices, relevant to missing children and wanted persons work. Treat as state-submitted requests requiring the same scepticism as any other government-sourced record.
Statistics and reporting capture	HTML	Per publication	INTERPOL's periodic figures on identified victims and connected countries. Record the publication date with the figure, because cumulative totals are meaningless without one.
Capability reference build	JSON	Semi-annual	Maintain your own country-level view of connection status, specialist unit existence and national reporting route, assembled from INTERPOL, national police and hotline sources. This is the derived product that has real analytical value.

Ingesting it into the platform

Every step below is idempotent and cursor-based: interrupt one and it resumes from where it stopped rather than duplicating rows or losing progress. Collection is recorded per source, so a feed that quietly stops publishing shows up as a stale timestamp instead of silently thinning your coverage.

Register as a restricted-access reference source — Add INTERPOL ICSE in sources.php explicitly marked as law-enforcement-restricted with no data ingestion path, so the catalogue records that the source exists, records why it is unavailable, and prevents anyone from designing a collector against it.
Load the public capability layer only — Import connection status, specialist unit presence and national reporting routes through import.php as country reference data. This is the only material from this source that belongs in a platform at all.
Wire the referral pathway — Surface the correct national reporting route – hotline or police – on the platform's child protection and vulnerable-populations surfaces, so that any user with a concern is routed to a lawful destination rather than towards this source.
Build the capability view — Combine connection status, specialist capability and hotline presence into a per-country assessment on country.php, which is the genuinely useful analytical product this source supports and one that nobody else assembles.
Track public appeals as a separate workflow — Where your organisation has the competence and the discipline, maintain appeals monitoring as a distinct, supervised workstream with a named lead and a rule that findings go only to INTERPOL's submission channel and are never discussed publicly.
Enforce architectural exclusion — Exclude this domain from resolve-everything.php, enrich.php and every automated pipeline, and make it impossible to attach suspected imagery to a case in cases.php. The control must be structural rather than procedural because the failure mode is criminal exposure.
Handle notices with provenance intact — If you ingest public notices, store them as requests submitted by a named member country rather than as findings, and carry that framing through to any display, because notices are routinely over-read as determinations of guilt or of fact.
Attach handling rules to outputs — Configure reports.php so any product in this domain carries the referral pathway and the handling rule inline, and so no output can be generated that implies a reader should seek access to restricted systems or verify material themselves.

Registered sources and their last-collected state are listed in sources.php, and the scheduled chain that keeps them current is in automation.php.

How it is wrong, and how to tell

Every dataset is wrong in characteristic ways. Knowing which ways is the difference between using a source and being used by one, and it is the part of source evaluation most often skipped because it is the part that takes work.

The system itself is, by professional consensus, the highest-quality mechanism that exists for its purpose, and the evidence for that is the sustained output of identified victims over more than a decade – an outcome measure rather than an activity measure, which is rare in this field. Identification decisions are made by trained specialists working collaboratively, with automated comparison supporting rather than substituting for judgement, and the international taskforce model brings expertise together on the hardest unresolved series. What you cannot do is verify any of this independently, because the system is closed, and the honest position is that the quality assessment rests on INTERPOL's reporting and on the testimony of practitioners rather than on external audit. The public layer is thinner and should be judged separately: programme pages are accurate but general, statistics are credible but sparse and cumulative, and the notices layer carries the well-documented problem that member countries have sometimes submitted requests for improper purposes, which means notices are a source about state requests rather than about facts. Treat the restricted system as authoritative and unverifiable, the public appeals as exactly what they claim to be, and the notices as state-submitted data requiring scepticism.

Characteristic false positives

Cumulative identification totals read as current or annual figures. The published number is a running total accumulated since the system began, and quoting it without a date and without the cumulative framing overstates the current rate of identification substantially.
Connection status mistaken for capability. A country appearing as connected may have a single officer with no forensic support and no capacity to work a series, so participation lists overstate the real distribution of investigative capability.
Notices read as determinations. A notice is a request circulated at a member country's instance, its legal effect varies by jurisdiction, and there is a documented history of attempted misuse. Treating a notice as evidence of guilt or of a fact is a serious analytical error.
Assuming the database reflects the scale of the problem. It reflects what connected countries recovered and submitted, filtered through their capacity, and the gap between that and the scale of victimisation is unknown and enormous.
Speculating about database contents. Nothing about size, composition or holdings is public, and secondary sources that appear to describe them are almost always reconstructing from fragments or confusing the database with a different system.
Confusing the systems in this space. The international image database, the restricted baseline blocking list, national reporting mechanisms and hotline systems are separate things with different purposes and different access rules, and they are conflated constantly in reporting.
Public appeals treated as an open investigation. The appeals publish objects deliberately stripped of case context, and speculating publicly about a case, a location or a person on the basis of an appeal risks prejudicing an investigation and re-victimising a child.
Synthetic material counted as identified victimisation. Generative material can enter identification workflows and consume specialist effort where no real child exists, and any statistic that does not address this distinction should be read carefully as the technology develops.

None of these make the source unusable. They make it a source that requires corroboration before an assertion built on it goes into a product, which is true of every source and admitted by few.

Ageing

The public statistics age as cumulative figures do – they are never wrong but rapidly understate, so a figure quoted without its date implies a lower level of activity than is current. Refresh from INTERPOL's own publication rather than from secondary reporting, which lags badly and propagates old figures for years. Connection and capability status ages at the pace of national institutional change, which is slow but real: countries connect, units are established or defunded, and a capability assessment more than a year old should be re-verified before it informs a decision. Public appeals age operationally – an appeal may be resolved without the page being immediately updated, so treat an unresolved-looking appeal with caution and check before investing effort. Notices age unpredictably and are withdrawn, expired or deleted following review, so a notice captured at one point may no longer exist, and republishing a withdrawn notice is both wrong and potentially harmful to the person named. A stale use of this source looks like a secondary-sourced victim total quoted with no date, or a country capability claim that predates a national restructuring.

What this source feeds

A source is only worth what it lets you conclude. These are the disciplines that collect through it, the mission domains it serves and the data points it yields — every one is a tag, so you can follow any thread from here into the rest of the library.

Collected by these intelligence disciplines

Serves these mission domains

Child Protection

Yields these data points

How each sector uses INTERPOL ICSE / Crimes Against Children

The same dataset is worked very differently depending on who you are, what authority you hold, and what you are ultimately producing. A military analyst is supporting a commander’s decision; a journalist is meeting a publication standard; an NGO caseworker is protecting a person. The records are shared — the constraints, thresholds and outputs are not.

🎖 Military and defence

Directly relevant only in the narrow case of deployed or peacekeeping personnel encountering child exploitation concerns, where the requirement is a pre-established referral pathway to host-nation police, the sending state's authorities and the relevant civilian child protection actor, not a unit-level investigative response. Establish that pathway before deployment. More broadly, the connection and capability map informs assessments of a host nation's law enforcement capacity in an area where capacity gaps are severe. Nothing in this source supports collection, and material encountered in any context must be handled by immediate referral rather than retention or examination.

🕵 National intelligence

The realistic contribution is architectural and capability intelligence: which countries participate in the international victim identification system, where the specialist capability gaps sit, and how the referral architecture links hotlines, national police and INTERPOL. That supports capacity-building assessments and understanding of a partner state's institutional reach. The database itself is outside any non-law-enforcement collection space and attempting to obtain access or content would be both unlawful and institutionally catastrophic. Where an intelligence organisation holds information of value, the correct action is disclosure to law enforcement through the established channel, promptly, without independent exploitation.

👮 Law enforcement

For specialist investigators in connected countries this is a working system rather than a source to read about, accessed through the national central bureau, and the practical points are submission discipline and early submission – material worked in isolation without submission is material that cannot be deduplicated or linked internationally, and delay costs identifications. For non-specialist officers, the relevant knowledge is the internal referral route to your national unit and the handling protocol. For international cooperation functions, the connection and capability map tells you what a counterpart country can realistically do and how long it will take.

🔍 Private investigation and corporate security

State it plainly: this source is closed to you and must remain so. Private investigators encountering suspected child sexual abuse material in any engagement – a device examination, an open-source investigation, a corporate matter – must stop, cease examination, report to national police or the national hotline immediately, and inform the client only to the extent necessary. Do not verify, do not retain, do not include in a deliverable, and do not attempt to identify a child or an offender yourself. Doing so risks criminal liability, destroys the evidential position and endangers a child. The legitimate professional use of this material is understanding the referral architecture well enough to act correctly under pressure.

📰 Journalism and OSINT media

There is a real story here that is rarely told well: the specialist victim identification field, its chronic under-resourcing, the capability gaps between countries, and the impact of generative technology on identification workloads. The public appeals channel is also a legitimate and interesting subject. What is not available is the database or anything in it, and journalists should not seek it. Two disciplines matter: always date a cumulative identification figure, and treat notices as state requests rather than findings, given the documented history of member countries attempting to misuse them. Include the national reporting route in your piece.

🌍 NGO, humanitarian and human rights

For child protection organisations the practical content is the referral architecture and the capability map, which show whether a country can act on a report at all and where advocacy for specialist resourcing should be directed. Victim identification units are among the most under-funded parts of law enforcement almost everywhere, and that is an evidenced advocacy position this source supports. For organisations working directly with children, the operational requirement is a written handling and referral protocol known to staff in advance, plus psychological support arrangements, both of which should be in place before anyone needs them. Survivor-centred practice applies throughout: identification is the beginning of a support obligation, not the end of a case.

🎓 University and research

Research on the closed system is effectively impossible without an institutional relationship with law enforcement, ethics approval that takes the criminal law seriously, and in practice access only to derived or aggregate material. What is researchable from public sources is substantial and under-studied: the diffusion of victim identification capability across countries, the institutional architecture linking hotlines to police to INTERPOL, the effect of resourcing on identification outcomes, and the emerging classification problem posed by synthetic material. Be scrupulous about not speculating on system internals, cite INTERPOL statistics with their date, and treat the notices layer as data about state behaviour rather than about individuals.

Playbook: working INTERPOL ICSE / Crimes Against Children end to end

A repeatable sequence from first pull to finished product. Each phase states what you are trying to establish, not merely what to click — the objective is a defensible chain of reasoning, not a completed checklist.

Phase 1 — Determine your standing before anything else

Either you are a sworn investigator in a connected country with access through your national central bureau, or you have no access at all. There is no intermediate category and no research exemption. Establishing which you are, in writing, is the first step because everything else in the workflow depends on it and ambiguity here creates criminal exposure.

Phase 2 — Write and train the handling rule

The rule is stop, do not view further, do not download or copy, do not attempt to verify or trace, report immediately to national police or the national hotline, and record only what the report requires. Train contractors and temporary staff as well as employees, and make the rule reachable in seconds rather than filed in a policy library.

Phase 3 — Establish the referral pathway for every jurisdiction you operate in

Identify the national hotline and the national police reporting route for each country your work touches, verify each one, and keep them current. INTERPOL is not a reporting destination for the public or for private organisations; your national authorities are, and they pass matters onward where appropriate.

Phase 4 — Build the capability map

Assemble, from public sources, which countries are connected to the international system, which have a functioning specialist unit, and which have a hotline. That combined view is the analytically valuable product available to non-law-enforcement analysts and it directly supports capacity-building and programme decisions.

Phase 5 — Separate the systems in your own model

The international image database, the restricted baseline blocking list, national hotline systems and the notices mechanism are four distinct things with different purposes, holders and access rules. Model them separately. Most published confusion in this area comes from treating them as one system.

Phase 6 — Assess the notices layer with proper scepticism

Treat every notice as a request submitted by a named member country, record the requesting country, and remember that misuse of the notices system by member states is documented and has been the subject of reform. Report notices as requests, never as findings about a person.

Phase 7 — Decide deliberately whether to engage with public appeals

The object appeals are a legitimate route for genuine object-identification and geolocation competence. Engage only with a named lead, a supervised process, and an absolute rule that findings go to INTERPOL's submission channel alone. If you cannot guarantee that discipline across your team, do not engage at all.

Phase 8 — Never discuss appeal work publicly

Public speculation about an appeal object, a possible location or a possible case can prejudice a live investigation, alert an offender and re-victimise a child. This includes social media, conference talks, internal newsletters and anything a client might forward. Submit privately and say nothing.

Phase 9 — Enforce exclusion architecturally in your systems

Make it structurally impossible for this subject matter to enter generic collection, enrichment or storage, and impossible to attach suspected imagery to a case record. Procedural prohibition is insufficient when the consequence of failure is criminal possession by your organisation.

Phase 10 — Use the source for advocacy where advocacy is warranted

Victim identification units are severely under-resourced in most countries, connection to the international system is uneven, and both are addressable with money and political attention. A well-evidenced capability assessment aimed at a government or a donor is a legitimate and useful product, and it is achievable entirely from public material.

Phase 11 — Prepare for the effects of synthetic material

Generative technology is changing both the volume and the classification problem in this field, consuming specialist capacity on material where no identifiable child exists and creating legal divergence between jurisdictions. Any assessment of capability or workload written now should address it explicitly rather than assuming the categories are stable.

Phase 12 — Look after your people and end with the pathway

Anyone whose work might bring them near this material needs psychological support arranged in advance, on the professional standard the specialist community applies to itself. And whatever you produce, end it with the reporting route for your readers, because that is the element of the product most likely to result in a child being safeguarded.

The platform ships this as a step-checked workflow in playbooks.php, so progress is recorded against a case rather than held in someone’s head.

What to pair it with

No single source carries a finding. These are the datasets that corroborate, extend or contradict this one — and a source that contradicts is worth more than one that agrees, because it is the only thing that will tell you when you are wrong.

Source	Relationship	What it adds
INHOPE Hotline Network	prerequisite	The civil-society reporting layer that feeds law enforcement. For almost everyone outside a police service, a member hotline rather than INTERPOL is the correct reporting destination.
National Center for Missing and Exploited Children	prerequisite	Operator of the CyberTipline, the reporting route for the United States and for most major platforms, and a central node in international referral.
Internet Watch Foundation	extends	A hotline publishing detailed annual analysis of assessed content and hosting, providing the public-facing trend picture the restricted system cannot.
Europol	corroborates	Connected to the international system and publisher of periodic assessments on online child sexual exploitation that give strategic context to the operational work.
WeProtect Global Alliance	extends	Multi-stakeholder global threat assessments covering the phenomenon rather than the response, including emerging modalities such as live-streaming and financial sextortion.
ECPAT International	extends	Country-level legal and policy assessments on child sexual exploitation, complementing the capability map with a rights and legislation view.
Thorn	extends	Research and tooling on victim identification, including work on the technical layer that supports detection and classification at scale.
INTERPOL notices	extends	The public notices mechanism, including Yellow Notices for missing persons, which is a separate system from the database and is frequently confused with it.

Legal, ethical and operational constraints

The governing constraint is criminal law, not access policy. Possession, distribution and knowing viewing of child sexual abuse material are serious offences in essentially every jurisdiction, and the exemptions permitting specialist investigators and designated hotline analysts to do this work are narrow, role-specific, and unavailable to researchers, journalists, private investigators, corporate security teams and intelligence analysts outside a law enforcement mandate. There is no client instruction, contract, research design or public-interest argument that changes this. If you encounter suspected material, stop, cease examination, do not copy or forward, report to national police or the national hotline immediately, and follow their direction; in several jurisdictions and professions reporting is mandatory. Do not conduct your own preservation or tracing – that is the authorities' function and attempting it may constitute an offence and will damage the evidential position. Attempting to access the restricted database, or soliciting content from someone who has access, is a criminal and professional catastrophe with no mitigating framing. Separately, where identified or identifiable children are involved, child protection law, data protection law and the child's rights under the Convention on the Rights of the Child apply with full force, and the child's safety and best interests override every investigative, commercial or editorial objective. Finally, the notices system carries its own legal sensitivity: notices concern named individuals with rights, some have been sought for improper purposes, and republishing them carries defamation and data protection exposure.

Operational security

The public pages leak nothing and there is no query interface to expose a research question. The real exposure in this domain is of a different kind and must be stated directly. Searching for material, attempting to reach the spaces where it circulates, or seeking access to restricted systems is criminal conduct that is monitored, is attributable, and will be treated as offending regardless of stated intent – and correctly so, because a claimed research or investigative motive is exactly what an offender would claim. No infrastructure, jurisdiction or tooling choice makes any of this acceptable. The protective controls that matter here are organisational: a written handling rule, architectural prohibition in your systems, a named escalation point, verified referral routes, and psychological support arranged before exposure rather than after. If you engage with public appeals work, operational discipline extends to silence – discussing an appeal publicly can alert an offender, prejudice a case and harm a child, so treat submissions as compartmented from the moment you begin. Consider also the safety of partners and staff in jurisdictions where child protection work attracts hostility or where naming a national unit could expose individuals.

Two rules that hold regardless of jurisdiction. Collection that is lawful is not automatically proportionate, and a dataset assembled for one purpose does not carry consent for another. Where the records concern identifiable people, the question is not only whether you may hold the data but whether holding it serves the purpose you are accountable for.

Is it earning its place?

Sources accumulate. Feeds get added during an incident and are never reviewed again, and a decade later the pipeline is carrying dead weight that nobody dares remove. These are the measures that show whether INTERPOL ICSE / Crimes Against Children is contributing anything, and they are worth baselining now so the answer is available later.

Whether every jurisdiction you operate in has a verified national reporting route documented and reachable by staff in seconds, which is the one metric here with direct child-safety consequences.
Whether architectural exclusion of this subject matter from collection, enrichment and storage has been tested rather than merely configured, because an untested control is an assumption.
Proportion of staff and contractors trained on the handling rule within the last twelve months, including anyone doing device examination or open-source work who might encounter material incidentally.
Currency of your country capability map – connection status, specialist unit presence, hotline presence – which should be re-verified at least semi-annually because national arrangements change.
Whether published figures in your products carry the date and the cumulative framing, which should be universal and rarely is.
For teams engaging with public appeals, the number of submissions made through the official channel versus any instance of public discussion, where the second number must be zero.
Whether psychological support arrangements exist, are known in advance, and have been used without stigma, which is the honest measure of whether the organisation is prepared for this work at all.

Beware of volume. Indicator counts rise easily and say almost nothing. Unique contribution — findings this source produced that no other source in your stack would have — is the measure that matters, and it is usually far lower than anyone expects.

Tradecraft notes

The distinctions that separate a competent analyst from a fast one:

Know which system you are talking about. The international image database, the restricted baseline blocking list, national hotline systems and the notices mechanism are four separate things, and conflating them is the fastest way to reveal that you do not work in this field.
Cumulative totals need a date. The identified-victim figure is a running total since 2009, and quoting it undated implies a current rate that is far lower than reality while sounding authoritative. Take the figure from INTERPOL's own publication, not from an article citing an article.
Connection is not capability. A country listed as connected may have one officer and no forensic support, so any assessment based on participation lists alone will overstate what the international system can actually do in most of the world.
Notices are requests, not findings. Member countries submit them, misuse has been documented and reformed against, and their legal effect varies by jurisdiction. Report them with the requesting country named and the request framing intact.
The public appeals are the one open door and they deserve respect. They are cropped, non-explicit and stripped of context precisely so that the public can help without exposure. Working them well means object and market expertise, patience, and submitting through the official channel alone.
Silence is part of the method. Public speculation about an appeal, a case or a location can alert an offender and prejudice an investigation, and the instinct to demonstrate analytical skill publicly is the single biggest risk an OSINT team brings to this domain.
Early submission by investigators is what makes deduplication and linkage work. Material worked nationally in isolation cannot be connected to series recovered elsewhere, and the cost of that delay is measured in children not identified.
Generative material is changing the workload and the law simultaneously. It consumes identification capacity where no real child exists and it is treated differently across jurisdictions, so any current assessment that ignores it is already out of date.
Victim identification is the start of a safeguarding obligation, not the conclusion of a case. Products that treat identification as an outcome metric miss that the child then needs protection, support and often years of services, and that is where most systems are weakest.

Questions analysts actually ask

Can I get access to the database for research or investigation?

No. Access is limited to specialised investigators in connected countries via their national central bureau over INTERPOL's secure network. There is no research route, no journalistic route and no private-sector route, and anyone offering one is either mistaken or not what they claim. Legitimate research proceeds through institutional partnership with law enforcement and yields derived or aggregate material at most.

What do I do if I encounter suspected material?

Stop immediately, do not view further, do not download, copy or forward it, and do not attempt to verify, trace or identify anyone. Report to your national police or national hotline without delay and follow their direction. In several jurisdictions and professions reporting is legally mandatory, and in all of them it is the only correct action.

Should I report directly to INTERPOL?

No. INTERPOL works with national police authorities, not with the public or with private organisations. Report to your national hotline or national police, who will refer the matter onward through the appropriate channel if it belongs there. Going directly will simply route you back, and delay matters.

What are the public appeals and can my team help?

INTERPOL publishes cropped, non-explicit objects and background elements from scenes so that members of the public can help identify where something was made or sold. It contains no people and no abusive content. Teams with genuine object, market and geolocation expertise can contribute, provided every finding goes only through INTERPOL's submission channel and nothing is ever discussed publicly.

How many victims have been identified?

Tens of thousands cumulatively since the system began, and the current figure should be read from INTERPOL's own publication with its date. Do not quote a number you found in secondary reporting – those figures circulate for years after they are superseded, and an undated cumulative total is close to meaningless.

Is a notice the same as an arrest warrant?

No. A notice is a request circulated at the instance of a member country, and its legal effect depends entirely on the domestic law of each country that receives it. Member states have sought notices for improper purposes on documented occasions, which is why the review mechanisms exist. Treat a notice as a state request, never as a determination.

Does the database show the scale of the problem?

No. It reflects what connected countries recovered and submitted, filtered through their investigative capacity, and countries without units or connections contribute nothing. The relationship between what the system holds and the scale of victimisation is unknown and the gap is very large.

How is synthetic material handled?

It is a live and difficult problem. Generatively produced material can consume victim identification capacity in efforts to find children who do not exist, complicates classification, and is treated differently across jurisdictions. Any assessment of workload or capability written today should address it explicitly rather than assuming the categories are stable.

What should my organisation actually do about this domain?

Three things, all of them before any incident. Establish and verify the national reporting route for every jurisdiction you work in. Write a handling rule, train everyone on it including contractors, and enforce exclusion of this subject matter architecturally in your systems. Arrange psychological support in advance for anyone who might be exposed. Then keep away from everything else.

Standards, formats and interoperability

What this source speaks natively, and what it has to be translated into before a partner can consume it. Work that arrives in a recognised format is easier to defend, easier to hand over and easier to automate against:

The UN Convention on the Rights of the Child and its Optional Protocol on the sale of children, child prostitution and child pornography.
The Council of Europe Lanzarote Convention on the protection of children against sexual exploitation and sexual abuse, the most detailed regional instrument and a widely used benchmark.
INTERPOL's rules on the processing of data, which govern what member countries may contribute and how it may be used, and the notices framework with its review mechanisms.
Image and video hashing and classification standards used across law enforcement, hotlines and industry, including the video and image classification schemas that allow tooling to interoperate.
The INTERPOL baseline criteria applied by hotlines and vetted partners for determining what falls within scope for blocking, which is the reason cross-border assessment is comparable at all.
National criminal law on possession and distribution, which differs in scope – particularly for non-photographic and synthetic material – and which determines what any organisation may lawfully do.
Victim-centred and trauma-informed practice standards governing the treatment of survivors after identification and the welfare of the analysts doing the work.

References

Primary documentation and authoritative references for this source. Publishers revise and retire material, so treat the retrieval date as part of the citation and re-check before relying on any of it in a formal product.

Crimes against children — INTERPOL. The programme pages describing the international database, the victim identification approach and the specialist network. The authoritative public account.
INTERPOL — INTERPOL. The organisation itself, its mandate, constitutional constraints and the periodic statistics that should be the source of any figure you quote.
INTERPOL notices — INTERPOL. The notices mechanism, including Yellow Notices for missing persons. Read it before drawing any conclusion from a notice, because its legal effect is routinely overstated.
INHOPE — INHOPE. The hotline network and its member list, which is the reporting route for the public and for organisations rather than INTERPOL.
National Center for Missing and Exploited Children — NCMEC. CyberTipline operator and a central node in the international referral architecture, with substantial published aggregate reporting.
Internet Watch Foundation — IWF. Detailed annual analysis of assessed content and hosting, giving the public trend picture that the restricted system does not provide.
Europol — Europol. European operational coordination and threat assessments, including analysis of emerging modalities such as live-streaming and financially motivated sextortion.
WeProtect Global Alliance — WeProtect Global Alliance. Global threat assessments on online child sexual exploitation, the best strategic overview of the phenomenon rather than of the response to it.
ECPAT International — ECPAT. Country legal and policy assessments, useful for building the capability map with a rights and legislation dimension.
Thorn — Thorn. Research and technology on victim identification and detection, explaining the technical layer that supports specialist work at scale.

Link integrity: every reference above was verified with a live request when this page was generated. Where a publisher had moved or withdrawn a document, the link was repointed at a preserved copy in the Internet Archive and marked as archived. Anything with no reachable copy anywhere had its link removed rather than left to rot — the source is still credited, it simply cannot be linked.

Put it into practice

The Quantus Intel threat intelligence platform operationalises this source: it records the source as law-enforcement-restricted with no collection path, keeps the country capability and referral map current, surfaces the correct national reporting route wherever a concern could arise, and enforces the handling constraint architecturally rather than by policy.. Browse the full source catalogue, or follow any tag above into the rest of the library.