Meta Opens a Direct I4C Line on Child Safety

Meta said on September 15, 2026 that it will report child safety cases directly to India’s I4C cybercrime portal. The US company is the first major tech platform to open that line to Indian police.

Until now those cases went to the National Center for Missing and Exploited Children in the United States. The new line follows a July notice over paid Instagram ads, a child-rights summons, and a Supreme Court clock that still treats an NCMEC filing as not enough under Indian law.

Meta Will Send Child Safety Reports Straight to I4C

A Meta spokesperson said protecting children on the company’s apps is a priority, and that the firm will work with the government so offenders are held responsible. Government sources, speaking the same day, called children’s online safety a “fundamental principle” for any social media company in India and “non-negotiable,” and said platforms that do not take proactive steps will face action.

To collectively strengthen our efforts to combat this harm, Meta will now report child safety matters directly to the cybercrime portal managed by I4C.

Meta spokesperson, company statement, September 15, 2026

That sentence is the shift. In a removed 160,000 accounts in India blog on July 7, 2026, Meta had said that when it finds apparent child exploitation it reports through NCMEC, and that in India NCMEC files to the national cyber-crime portal on Meta’s behalf. Indian officials spent August asking for something else: the file itself, sent straight to Indian agencies, including details on repeat offenders, rather than a wait on the US clearinghouse.

The company still publishes monthly India transparency reports under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and has named a Chief Compliance Officer, a Grievance Officer and a Nodal Contact Person. Direct I4C reporting is a different channel. It is meant to put Indian police on the same report Meta generates, without a US non-profit in the middle.

Government sources called the pledge a first step and said much more needs to be done. They said the Centre is still talking to other platforms about finding and taking down the same class of material.

The NCMEC Route Left Indian Police Waiting

US law is why the old path existed. Electronic service providers that find apparent child sexual abuse material must report it to NCMEC’s CyberTipline under 18 U.S.C. § 2258A. NCMEC then makes each report available to police in the country it thinks is the right jurisdiction. Meta has used that route for years, and in 2019 it helped Indian agencies start receiving those tips.

NCMEC, answering questions in August 2026, said reports “are made available to the appropriate law enforcement agency in, on average, less than 15 minutes from the time we receive it.” People close to I4C described a different wait, of months, before a tip is useful on the Indian side. The two claims describe different moments. NCMEC is talking about when a file is marked available. I4C is talking about when a station can act on it after it has moved through NCRB, the national portal, a state unit and a local Special Juvenile Police Unit.

Platform lawyers have treated the US Stored Communications Act as a hard stop on sending user content straight to Indian police. A platform executive said legal advisers had “identified a red line where we cannot violate the US Stored Communications Act.” That is why Google, X, Snap and others were, as of August 2026, still filing only with NCMEC even after the Supreme Court said that route does not finish the job under the Protection of Children from Sexual Offences Act.

The delayed-file problem is the part a child actually feels. Even when the child, the offender and the app are all in India, the report has been travelling through a US clearinghouse and then back. Direct I4C intake is meant to cut that loop. It does not, on its own, create more officers to read the queue.

How Many Reports Reach a Police Station?

NCMEC’s 2025 CyberTipline report counted 21.3 million suspected child sexual exploitation reports worldwide. India has sat near the top of that country list for years. The table below uses NCMEC’s India-linked totals beside child-pornography incidents logged on India’s own portal. They are not the same count, and they should not be read as a conversion rate.

NCMEC TIPS VERSUS INDIA PORTAL LOGS

NCMEC’s country table lists 1,933,900 CyberTipline reports linked to India for 2025, down from 2,252,528 in 2024 and 8,923,738 in 2023. Global CyberTipline volume also fell after 2023, so the India drop is not proof that abuse fell. The Ministry of Home Affairs, in a Rajya Sabha reply, said the National Cybercrime Reporting Portal logged 10,431 child-pornography incidents in 2025, 6,060 in 2024 and 2,957 in 2023.

The National Crime Records Bureau’s 2024 crime tables sit even further downstream. Of 1,238 cybercrime cases registered against children that year, 1,099 involved publishing or transmitting sexually explicit material involving children. Tips, portal logs and registered cases are three different machines. A direct Meta line feeds the first machine. It does not, by itself, move a case to the third.

Meta’s own enforcement numbers are large and still left paid ads on Instagram. In the July 7 blog the company said it had automatically removed more than 4 million suspicious accounts on Facebook and Instagram the previous year, on top of 36 million pieces of child-exploitation content, and that advanced tools covering languages used by most people online had removed 160,000 accounts in India in six months for suspicious off-platform links tied to child-exploitative activity. Between October and December 2025 it said it removed 13 million pieces of child sexual exploitation content, over 96 percent of them before a user reported them. It also said it is in a constant fight with criminals hiding among 3.5 billion users.

Instagram Ads, Then Notices, Then a Summons

The direct line did not arrive as a quiet product update. It arrived after a summer in which several Indian bodies opened files on the same ads.

THE PRESSURE RUN FROM JULY TO SEPTEMBER

1. Early July 2026: A media investigation says Instagram ran paid ads promoting child sexual abuse material in India, including copy such as “rape video” and “child video,” and sent users toward Telegram channels that hosted the material. Investigators described about 30 unique ads.
2. July 4, 2026: The Ministry of Electronics and Information Technology orders Instagram to disable all ads and content that promote or facilitate access to child sexual exploitative and abuse material, and demands a detailed explanation within 7 days. Officials tell Meta that this content is a violation and cannot sit behind safe-harbour protection. The National Commission for Protection of Child Rights takes suo motu notice.
3. July 7, 2026: Meta publishes its child-exploitation blog, denies that it “knowingly and deliberately” targeted ads featuring children to people with an inappropriate interest in children, and says its systems had already disabled several of the violating ads before the cases were flagged.
4. July 11, 2026: The explanation deadline lands. MeitY later says it has the response and is reviewing it.
5. Early August 2026: The National Human Rights Commission, which had asked Delhi Police to look at whether Meta met mandatory reporting duties under POCSO, issues a follow-up seeking action-taken reports from MeitY, police and Meta.
6. August 2026: Indian officials put the direct-reporting demand to Joel Kaplan, Meta’s chief global affairs officer, during talks in India, and ask for repeat-offender details as well as case files.
7. August 14, 2026: The Supreme Court issues notice on a plea by Just Rights for Children Alliance, with Bachpan Bachao Andolan, seeking to enforce the 2024 reporting directions against social media companies.
8. September 2, 2026: NHRC issues a further notice on the ads and on POCSO reporting.
9. September 9, 2026: The managing director and head of Meta India appear before NCPCR.
10. September 15, 2026: Meta agrees to report child safety matters directly to the I4C cybercrime portal.

MeitY Secretary S. Krishnan had said in July that the ministry would wait for Meta’s formal reply and then take a view. Union IT Minister Ashwini Vaishnaw had already told his officials to summon the company. The ads matter because they were paid inventory. Review is supposed to be stricter there than on an ordinary post, and the ministry asked how the ads cleared that review at all.

Sahyog Already Asked for Direct CSAM Reports

I4C did not invent this demand in September. The centre, set up under the Ministry of Home Affairs, became an attached office of the ministry on July 1, 2024. Its National Cyber Crime Reporting Portal at cybercrime.gov.in went live on August 30, 2019 and was dedicated to the country on January 20, 2020, with a special focus on crimes against women and children.

On its initiatives page, I4C says the NCRP supports anonymous reporting and fast removal of harmful content, with a six-hour window for child-related material. A second product, Sahyog, is built for a different job. The notices to intermediaries under the IT Act portal automates orders under Section 79(3)(b) so agencies can have unlawful information taken down or blocked. I4C also lists CSEAM reporting and hash sharing as Sahyog functions, which is the inbound side platforms have resisted.

In May 2025, after a meeting with social media companies, I4C told platforms to get on Sahyog and to treat CSAM reporting as a standing duty, pointing to the Supreme Court’s POCSO holding.

WHAT I4C TOLD PLATFORMS TO BUILD

• Sahyog onboarding: Join the portal so authorised agencies and intermediaries sit on one system.
• Nodal officers: Name a person who can take CSAM reports in real time.
• APIs: Build machine links for real-time CSAM reporting, not only email or web forms.
• Detection tools: Use AI to find and take down the material, and share hashes so copies are easier to catch.
• Action reports: Send periodic notes on what was found, removed and referred.

Platforms told I4C that following the Supreme Court in full risked a clash with US law, and that the reverse was also true. Meta’s September 15 pledge does not, in public, say that clash is gone. It says child safety matters will now go directly to the cybercrime portal I4C runs. Whether that product is NCRP, Sahyog, or a new intake built for platforms is not in the statement.

The legal floor is older than Sahyog. On September 23, 2024, in Just Rights for Children Alliance v. S. Harish, a bench of then Chief Justice D.Y. Chandrachud and Justice J.B. Pardiwala held that an intermediary cannot claim exemption under Section 79 of the IT Act unless it meets POCSO’s reporting rules, including Rule 11, which requires handing over the material and its source to the Special Juvenile Police Unit, the local police, or the cyber-crime portal.

Social media intermediaries in addition to reporting the commission or the likely apprehension of commission of any offence under POCSO to the National Centre for Missing and Exploited Children (NCMEC) is also obligated to report the same to authorities specified under Section 19 of POCSO i.e., the Special Juvenile Police Unit (SJPU) or the local police.

Supreme Court of India, Just Rights for Children Alliance v. S. Harish, September 23, 2024

In other words, NCMEC was always extra. Section 19 was the Indian duty. Meta’s new line is closer to that duty. It is not a new statute.

Other US Platforms Still File Only With NCMEC

As of August 2026, Instagram, Facebook, WhatsApp, YouTube, X and Snap were still described as sending suspected CSAM reports only to NCMEC. Meta is now the first large US intermediary to say it will also file straight into the Indian portal. That is the template other companies will be measured against in the next round of MeitY and I4C meetings.

The Stored Communications Act problem does not vanish because one company signed a statement. Local Indian subsidiaries often do not control the servers that hold the content. A US parent that pushes images, chat logs or account keys to Indian police without a statutory path can walk into a US criminal prohibition. NCMEC exists partly as that path. A direct I4C feed has to be built so it does not dump the same content in a form US counsel will block.

One workaround floated in August was a metadata-only supplement: platforms would keep sending full reports to NCMEC and would share India-related fields with I4C without shipping the illegal files themselves. Meta’s public language on September 15 is broader than metadata. “Child safety matters” and “directly” are the words the company used. The specification of fields, evidence, hashes, and emergency versus bulk reports is still missing.

WHAT WE KNOW

• The pledge: Meta will report child safety matters directly to the I4C-run cybercrime portal, and it is the first major platform to say so.
• The legal baseline: The 2024 Supreme Court ruling already required reports to Indian police or the cyber-crime portal, on top of NCMEC.
• The trigger: The July ads investigation, the MeitY notice, NCPCR and NHRC files, and the Kaplan talks all sat on the table when the pledge was made.

WHAT IS UNCONFIRMED

• The product: Whether intake is NCRP, Sahyog, an API, or a staffed mailbox, and whether NCMEC filings continue in parallel.
• The contents: Whether Indian agencies get the media files, only hashes and account metadata, or both, and how repeat offenders are flagged.
• The rest of the market: No matching public pledge from Google, X, Snap or Telegram has been issued with Meta’s.

Hindi-language posts on the day of the announcement treated it as Meta bending after a government squeeze. The sharper point is narrower. The company is moving the report to a desk India already named in Rule 11, while every other large US app is still arguing that US law will not let them do the same thing.

The Court Listed the Case for September 24

Justices J.B. Pardiwala and K. Vinod Chandran, on August 14, 2026, asked MeitY and the Ministry of Law and Justice to answer the Just Rights for Children Alliance application. The petitioners want a working central portal for intermediary CSEAM reports, timely police action on every tip, names in the National Database of Sexual Offenders, and criminal process against platforms that ignore mandatory reporting. They also pointed to the paid ads. The matter is listed for September 24, 2026.

Meta’s I4C line will be read against that calendar. If the company can show live reporting into an Indian portal, it arrives at the hearing with a fact the 2024 judgment asked for. If the line is a statement without fields, hashes or a nodal officer who answers at night, the petitioners will say the gap is still the one the Court already described.

The Centre has said it remains in talks with other platforms and that failure to follow Indian law will not be tolerated. Safe harbour is the lever. The 2024 ruling already tied Section 79 protection to POCSO reporting. MeitY, in July, told Meta that CSEAM in ads is not a safe-harbour case. A direct reporting line is how a platform tries to get back under that shield. It is also how I4C finally sits at the front of a queue that used to start in Virginia.

Other companies can still file only with NCMEC until someone forces the same concession. The September 24 list is one pressure point. MeitY notices are another. Sahyog onboarding letters are a third. Meta has now given Indian police a door that used to open only after a US clearinghouse turned the handle.

Disclaimer: This piece is news reporting and analysis of public company statements, court rulings and government processes. It is informational only and is not legal advice, and it does not decide criminal or civil liability under the POCSO Act, the Information Technology Act, US reporting statutes or any other law. Anyone who needs advice on a reporting duty, a takedown, a specific case or platform compliance should consult a qualified Indian lawyer or the relevant police or cybercrime unit. Figures and statuses follow the cited statements, court records and government materials and may change as the I4C reporting line is built and as other platforms respond.