What is cyber flashing?
Definition
Cyber flashing is sending someone an unsolicited sexual image, usually a photo of genitals, by phone or online, often by AirDrop, text or social media. In England and Wales it is a criminal offence.
- Category
- Attacks
- Also called
- cyberflashing, cyber-flashing
- Last updated
Cyber flashing is the digital version of indecent exposure: a stranger or acquaintance sends a sexual image you didn't ask for. It often happens on public transport, where phone features such as AirDrop or Bluetooth sharing let someone send a preview to every nearby phone. It also happens through direct messages, dating apps and email.
What the law says
In England and Wales, section 187 of the Online Safety Act 2023 added a new offence, section 66A of the Sexual Offences Act 2003. According to the legislation, it covers intentionally sending or giving a photograph or film of someone's genitals to another person. "Sending" includes sending electronically, showing the image to someone and leaving it for a particular person to find. An image made or changed with computer graphics that looks like a photograph or film is covered too.
The offence is made out in two ways: the sender intends the recipient to see the genitals and to be caused alarm, distress or humiliation, or the sender acts for sexual gratification and is reckless about whether the recipient is caused alarm, distress or humiliation.
The law differs elsewhere. Rules in Australia vary between states and territories, and this entry doesn't cover them.
Cyber flashing vs. related terms
- Sextortion and catfishing involve deception or threats. Cyber flashing is the sending of an unwanted image, though it can be a first step in a scam.
- Cyberstalking is repeated harassment over time. One unwanted image can already be cyber flashing.
Why it matters
It is harassment, it can be frightening, and many people who receive these images don't report them. Screenshots matter, because the image itself may be the only evidence.
How to protect yourself
- 1
Lock down AirDrop and Bluetooth sharing
On an iPhone set AirDrop to Contacts Only. On Android turn off Nearby Share or limit it to your contacts. Switch it to receive from no one when you commute.
- 2
Don't open or reply
Decline the transfer and don't engage. Replying can confirm that your number or account is active.
- 3
Keep evidence and report it
Screenshot the message and the sender's name or number before you block them. Report it to the platform and to the police if you are in England or Wales. Hosting services and apps have reporting tools.
- 4
Limit who can message you
Set social media and dating accounts so only people you've accepted can send you messages, and keep your phone number out of public listings. Serus finds where your address and phone number are listed on data brokers and people-search sites and removes them for you.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
Is cyber flashing illegal?
In England and Wales, yes. Section 66A of the Sexual Offences Act 2003, added by the Online Safety Act 2023, makes it an offence. Laws elsewhere differ.
How do I stop cyber flashing on my phone?
Set AirDrop to Contacts Only or turn off Nearby Share and Bluetooth sharing in public. Restrict message requests on social apps.
What should I do if someone cyber flashes me?
Don't engage, take a screenshot, block the sender, report it to the platform and consider reporting it to the police.
Is a fake or AI-made image covered?
In England and Wales the offence also covers an image made or altered by computer graphics that appears to be a photograph or film.
Sources
Something wrong or out of date? Tell us and we'll re-check it.