There comes a moment, usually somewhere between the last year of primary school and the second year of secondary, when the question lands at the dinner table: "everyone has one except me." What follows is a negotiation about age, model, plan, screen time. Everything gets discussed except the one thing that genuinely changes in the child's life that day: they have just been given a phone number.
A number isn't just one more screen. It's a public, permanent address attached to a real identity, one that anyone can dial without permission. Parental controls filter apps, usage time, sometimes websites. What they almost never filter is what arrives via the phone's oldest and most open channel: the text message.
Here's how to approach that first phone from the messaging side — concrete settings, vocabulary to pass on, and a clear boundary between protecting and monitoring.
What really changes the day the SIM is activated
As long as a child is using a family tablet or an old handset with no SIM card, they're operating inside an app-based space: you install, you uninstall, you configure. The day a line is opened in their name (or in yours, as legal guardian), three doors open at once.
An entry point nobody controls
Text messaging has no friends list, no contact request, no moderation. Any number on earth can send a message to any other number. That's precisely what made it universal from 1992 onwards — and what makes it today the favourite channel for fraud campaigns.
An eleven-year-old receives exactly the same waves of smishing as an adult: fake parcel notifications, fake fines, fake training-account alerts, fake subscription renewals. The difference is that they have no frame of reference to decode them. They've never ordered a parcel, never received a letter from the tax office, never seen what a genuine message from a mobile operator looks like.
A number that starts circulating immediately
The moment it gets typed in somewhere — signing up for an online game, a sports club form, a verification code to create an account on a platform — the number enters databases. Some are legitimate, some have leaked, some are resold. The outcome is the same: a few weeks after activation, the first unsolicited messages arrive.
The useful habit, from day one: explain that a phone number is handed out like a home address, not like a username. You give it to real people, not to forms. For everything else — service sign-ups, games, competitions — an online service for sending or receiving one-off messages keeps the main line out of the picture.
A verifiable identity
Unlike a username, a French phone number is allocated within a framework defined by ARCEP and tied to an identified subscriber. It can't be recreated at will. That's what makes it valuable to services… and to anyone wanting to cross-reference information. A teenager's number, paired with a first name and a school, is enough to reconstruct an entire social environment.
The four real risks, in order of frequency
Alarmist talk about "the dangers of the internet" often misses the mark. Here's what actually happens, in statistical order.
| Risk | Frequency | What it looks like in practice |
|---|---|---|
| Spam and cold calling | Near certain, within the first few months | Fake competitions, promotions, "you've won", premium-rate subscriptions |
| Smishing (phishing by text) | Very common | Fake parcels, fake gift cards, links to data-harvesting pages |
| Group harassment | Common in secondary school | Class group chats that turn nasty, exclusion, screenshots shared around |
| Contact from an unknown adult | Rare but serious | Approach via a number obtained elsewhere, drifting towards a private messaging app |
This table has one virtue: it shows that 99% of prevention work concerns the first three rows. That's where the day-to-day learning happens.
Smishing, teenage edition
Campaigns targeting young people have their own codes. They don't talk about tax bills, they talk about:
- video game gift cards ("your Fortnite/Roblox code is ready, activate it");
- fake social media accounts ("your login has been blocked, sign in again here");
- fake prize draw wins tied to a sneaker or smartphone brand;
- contact impersonation ("it's Mum, I've changed number, could you…").
That last variant deserves particular attention. It works because it exploits a reflex of obedience. The family rule to establish once and for all: a parent changing their number is always confirmed in person or by calling the old number. Never through the message itself.
The settings to configure together, on the first evening
The best moment to set things up is during the initial configuration, while the child is still excited and willing to sit down for twenty minutes. Do it with them, not for them: every setting that gets explained is a setting they won't work around six months later.
In the messaging app
- Turn on filtering for unknown senders. On iOS, under Settings → Apps → Messages, the "Filter Unknown Senders" option moves messages from people outside your address book into a separate tab and silences notifications. On Android, Google Messages offers spam protection and dangerous-message detection in its protection settings.
- Disable content previews on the lock screen. A message displayed in full on a sleeping screen can be read by the whole class. Keep the sender's name, hide the text.
- Turn off automatic image downloads in MMS and RCS. This reduces exposure to unsolicited content and limits automatic read reporting.
- Check read receipts and typing indicators in RCS. This social information fuels constant pressure ("you read it and didn't reply"). Switching it off is a genuine act of mental comfort.
- Look together at what a legitimate operator message looks like. Comparing a real one with a fake one is worth more than ten minutes of abstract warnings.
On the line itself
- Ask the operator to block premium-rate numbers and carrier billing purchases. It's free, frequently forgotten, and it neutralises the bulk of hidden-subscription scams.
- Register the number with Bloctel, the do-not-call list managed on behalf of the French government. It won't stop fraudsters, but it eliminates legal cold calling.
- Save 33700 in the contacts under a clear name: it's the official French service for reporting unwanted texts and calls. Forwarding a suspicious message to that number takes five seconds and gives the child something active to do, rather than a simple "just delete it".
The hardware that makes a difference (and the hardware that doesn't)
We tend to associate security with software. In the case of a first phone, several hardware choices have at least as much impact.
The handset itself. A first device doesn't need to be the latest flagship. It needs to receive security updates for several years — that's the only criterion that genuinely matters in the long run. A refurbished smartphone with a warranty often ticks that box on a reasonable budget, while easing the anxiety about breakage.
Physical protection. The leading cause of data loss among secondary school pupils isn't hacking, it's a drop in the playground. A reinforced shockproof case and a tempered glass screen protector prevent half the disasters and extend the device's life.
Backup storage. A teenager's conversations, photos and contacts vanish in one go if the phone is lost. Regular backups to a USB drive for smartphones or to a family hard drive make loss reversible — and avoid having to negotiate yet another cloud subscription.
What doesn't help: GPS trackers slipped into school bags and spyware apps that copy messages. Technically, they work. Relationally, they almost always backfire on whoever installed them — more on that below.
Finally, for families who prefer to postpone the leap into smartphones, the simple mobile phone for children, with no browser and no app store, remains an underrated option: calls, texts, and nothing else. The attack surface drops to almost zero.
The red line: protecting is not monitoring
This is the most delicate point, and the one most guides remain vague about.
French law allows parents, under parental authority, to set rules of use and to check what a minor is doing. But the CNIL regularly reiterates a principle that should guide every decision: monitoring must remain proportionate to the child's age and to the risk, and the child must be informed of what is being checked. Private correspondence remains, even at fourteen, private correspondence.
Three levels, according to age
9–11 years — Shared or basic phone, contacts limited to family and a few friends. Messages can be read together, out loud, the way you'd go over homework. Transparency is total and accepted.
12–14 years — The phone becomes a social space. Keep the security settings and the purchase blocking, but drop the systematic reading of conversations. Maintain one simple rule: "I don't read your messages, but you show me anything that makes you uncomfortable, without fear of losing your phone."
15 and over — Reading messages no longer has any justification outside a serious, documented situation. At this age, protection comes through competence: knowing how to report, block, capture evidence, file a complaint.
That last sentence holds the key to the whole approach. The "I'm confiscating your phone" penalty is the single biggest obstacle to reporting. A teenager who is being harassed or has fallen for a scam does the maths very quickly: speaking up means losing the device. So they say nothing, and the problem grows on its own. Explicitly stating the opposite — "coming to me will never cost you your phone" — is worth more than any monitoring software.
What to do when it happens anyway
A fraudulent message has been received
Don't reply, not even "STOP" to an obviously fraudulent sender (it confirms that a human is reading). Take a screenshot, forward it to 33700, block the number, delete it. If a link was opened and information entered: immediately change the password concerned, notify the bank if card details were entered, and file a report on cybermalveillance.gouv.fr, which offers a free assistance pathway.
Harassment takes hold in a group chat
Three steps, in this order:
- Preserve the evidence: time-stamped screenshots, before any blocking or deletion. That's the foundation of any case.
- Block and leave the conversation, without replying or negotiating.
- Report it: 3018, the free national helpline for digital violence (phone, app, chat), supports minors and their families and can obtain emergency content takedowns. Where the facts are clear, filing a police complaint remains possible; school harassment has been a criminal offence under French law since the act of 2 March 2022.
For parents who want to build a solid message rather than improvise, a guide to digital education for teenagers often does more good than a filtering app: it provides vocabulary, age-appropriate benchmarks, and ways of phrasing conversations that don't put teens on the defensive.
The five phrases to pass on before the first message
Rather than a list of rules, a few short formulas the child will actually remember:
- "A message that rushes you is a message that's lying to you." Urgency is the common signature of every text-message fraud.
- "No legitimate organisation asks for a code by message." Not the bank, not the operator, not a friend. A code you receive is a code you never pass on.
- "You don't click a link in a text, you verify it elsewhere." Open the official app or type the site address by hand.
- "Your number isn't a username." You don't hand it out in a game, a forum or a competition.
- "Showing me a message will never cost you your phone." That's a parental commitment, and it must be honoured to the letter.
Key takeaways
A first phone isn't an object, it's the opening of a permanent line of communication in a child's name. The useful protections fit into a single evening of setup: unknown-sender filtering, blocking of premium-rate numbers and carrier billing, hidden previews, 33700 saved, Bloctel activated.
The rest — and it's the longer part — is a matter of learning: recognising artificial urgency, never passing on a code, verifying a link elsewhere, keeping evidence, reporting. These reflexes will serve them throughout adult life, long after the screen-time question has stopped being argued over at the dinner table.
And as for surveillance: every minute spent reading a teenager's messages is a minute not spent teaching them to defend themselves. The second option is slower. It's the only one that lasts.
