In the quiet margins between curiosity and criminality, a generation of technically gifted young people is finding itself at a crossroads — and in the United Kingdom, a small but growing programme is choosing to meet them there with conversation rather than handcuffs. The National Crime Agency's Cyber Choices initiative has spent eight years intercepting teenage hackers before their talent hardens into serious offending, offering one-to-one guidance, professional pathways, and the simple revelation that the skills drawing them toward crime are the same ones the legitimate world urgently needs.
Police redirect teen hackers toward legitimate cyber careers
It's quite a sense of achievement when you've succeeded in stopping professionals
Mark
Why does a sixteen-year-old unscrewing a computer tower feel like the beginning of a much larger story?
Mimi
Because it's the moment before the fork in the road. He had a skill and a curiosity, and without intervention, those things lead somewhere very specific. The programme exists because authorities realized that moment—that first breach—is when you can still reach someone.
Mark
What makes neurodiverse young people overrepresented in this kind of offending?
Mimi
It's not that autism causes hacking. It's that some neurodiverse individuals have an intense focus on technical systems, less social friction with online communities, and sometimes difficulty reading social cues about what's acceptable. They can get fixated. And online, there are communities waiting to exploit that fixation.
Mark
Owen Flowers was offered the programme and refused. What does that tell us?
Mimi
That intervention only works if someone accepts it. You can knock on the door, but you can't force someone through it. He went to prison instead. That's the alternative the NCA is trying to prevent.
Mark
Is there a real risk that teaching cyber skills to potential offenders makes them better criminals?
Mimi
It's a fair question. But the answer from the NCA is: they're already learning those skills online, in criminal communities. At least Cyber Choices offers them a legitimate path and someone watching over them.
Mark
What changed for Lucas when the police showed up?
Mimi
Fear, mostly. And then something else—someone taking his skills seriously enough to redirect them rather than just punish them. He realized there was a future in this, not just trouble.
Mark
How much does the scale of recent attacks—TfL, MGM Grand, the retail chains—drive the urgency of this work?
Mimi
Entirely. These aren't abstract threats anymore. Young English-speaking hackers are doing real damage to real organizations. The NCA sees the pattern and knows they need to intervene earlier, before someone becomes part of that network.
The Pulse
- Teenage hackers linked to breaches at Transport for London, MGM Grand, Marks and Spencer, and the Co-op signal that youthful cyber-crime is no longer a fringe concern but a front-line threat.
- Referrals to the NCA's Cyber Choices scheme have nearly doubled in pace, with close to 600 young people directed to the programme in just the last three years alone.
- Many of those referred are neurodiverse, drawn into online communities that celebrate hacking before they fully grasp the legal and human consequences of what they are doing.
- The programme's core tension is real: critics warn that teaching cyber skills to already-curious young offenders risks making them more capable criminals, and at least one participant later faced further allegations.
- Success stories like Izak — who went from hacking his school at fifteen to working as a cyber-security professional at twenty-one — show the window for redirection exists, but only if intervention arrives early enough.
- For young people like Lucas, still navigating the programme in rural Cumbria, the outcome remains unwritten — a reminder that the race between opportunity and criminality is never quite finished.
In the quiet margins between curiosity and criminality, a generation of technically gifted young people is finding itself at a crossroads — and in the United Kingdom, a small but growing programme is choosing to meet them there with conversation rather than handcuffs. The National Crime Agency's Cyber Choices initiative has spent eight years intercepting teenage hackers before their talent hardens into serious offending, offering one-to-one guidance, professional pathways, and the simple revelation that the skills drawing them toward crime are the same ones the legitimate world urgently needs. As English-speaking youth hacking groups emerge as a genuine force behind attacks on major institutions, the programme's quiet logic — that prevention is cheaper and more humane than prosecution — is being tested at scale.
Lucas was sixteen when he dismantled a school computer and carried its components home, driven by a desire to bypass restrictions and explore what the machine would let him do. When his school threatened expulsion and his mother called the police, what arrived was not a prosecution but a conversation — PC Sam Cooper, an officer with Cyber Prevent, whose job is to intercept young people before experimentation becomes a criminal record. Cooper has been meeting Lucas regularly, explaining consequences, and planning a visit to a local university to explore cyber-security courses. The goal is simple: turn a liability into a career.
The programme sits within the National Crime Agency's broader Cyber Choices scheme, which has handled more than 1,150 referrals over eight years, with the pace accelerating sharply in the last three. The urgency is not abstract. English-speaking teenage hacking groups have been linked to significant breaches at Transport for London and MGM Grand in 2024, and at Marks and Spencer and the Co-op in 2025. NCA cyber prevention lead Paul Foster described the shift plainly: western, English-speaking individuals are now more active in cyber-crime than ever before.
Most young offenders begin not with criminal intent but with curiosity — testing systems, bypassing filters, chasing the satisfaction of outwitting something designed to stop them. Online communities then celebrate and encourage that impulse until the line between exploration and crime disappears. Cooper noted that the majority of young people he works with are neurodiverse, often undiagnosed, with a deep affinity for technology and a more complicated relationship with social and practical reality. The case of Arion Kurtaj, who hacked Rockstar Games and was deemed unfit for trial due to autism, illustrated how complex these situations become. Two other young hackers convicted in the TfL breach were also autistic; one of them, Owen Flowers, had been offered a place in Cyber Choices at sixteen and refused to engage.
Critics raise a legitimate concern: could the programme inadvertently sharpen the skills of those it is trying to redirect? Foster acknowledged the risk but framed the alternative starkly — without something like Cyber Choices, where else would these young people take their curiosity, and where would that take them?
For Izak, now twenty-one and working in cyber-security in Leicestershire, the answer is clear. He hacked his school at fifteen for access to Photoshop, drifted toward online groups promising easy money, and was redirected by a police visit toward legitimate training. He learned to use his abilities, as he put it, for good. Whether Lucas follows a similar arc remains to be seen. What is certain is that the window for that redirection is narrow — and narrowing further as young people engage with technology and online communities at ever younger ages.
Lucas was sixteen when he unscrewed a school computer tower and carried the internal components home to test. He wanted access to blocked websites and the freedom to play games, so he started tinkering with the system's defenses. "It's quite a sense of achievement when you've succeeded in doing something that two or three trained professionals have spent a lot of time trying to stop you doing," he said. His school nearly expelled him. His mother, alarmed and uncertain how serious the situation had become, made a decision that would change his trajectory: she called the police.
What arrived at their rural Cumbria home was not a squad car or handcuffs, but PC Sam Cooper, an officer with Cyber Prevent—a nationwide programme designed to intercept young people before curiosity about computers hardens into criminal activity. Cooper has been meeting with Lucas regularly since early this year, part of a quiet intervention that operates in the margins of the criminal justice system. The programme works like a hacker's second chance: one-to-one conversations, usually at home, where an officer explains the real consequences of cyber-attacks, then gradually steers a young person toward legitimate training and professional pathways. Cooper plans to take Lucas to a local university to explore cyber-security courses, hoping to channel his evident talent into a career rather than a crime.
The scale of the problem has grown sharply. The National Crime Agency's Cyber Choices scheme has handled more than 1,150 referrals over eight years—nearly 600 of them in just the last three years. Young, English-speaking hackers have become increasingly visible in major attacks: they were linked to breaches at Transport for London and MGM Grand in 2024, and at Marks and Spencer and the Co-op in 2025. Some operate in groups; others target individuals for cryptocurrency. Paul Foster, who leads cyber prevention at the NCA, described the shift plainly: "Certainly English-speaking, western world individuals that we know are now more active in cyber-crime."
Most young offenders do not begin with criminal intent. They start by experimenting—testing systems, bypassing restrictions, exploring what's possible. Then they encounter online communities where hacking is celebrated and encouraged, and the boundary between curiosity and criminality blurs. Cooper noted that many of the young people he works with are neurodiverse, often undiagnosed. "The vast majority of individuals I'm dealing with are neurodiverse," he said. "They obviously have more affinity with computers than they do with practical and social reality." Some become fixated on technical goals and resistant to adult guidance; that's where intervention becomes crucial. The case of Arion Kurtaj, a teenager who hacked Rockstar Games, illustrated the complexity: he was deemed unfit to stand trial due to autism. Two other young hackers convicted in the TfL breach were also autistic, a factor the judge weighed when sentencing them to five and a half years in prison. One of them, Owen Flowers from Walsall, had been offered a place in Cyber Choices when he first got into trouble at sixteen. He refused to engage.
Critics worry that teaching cyber skills to young people already interested in hacking could make them more dangerous offenders. A teenager enrolled in the programme was later alleged to have committed further crimes. Foster acknowledged the concern but framed the alternative starkly: "My fear is that if we didn't give them something like Cyber Choices, where would they get that input and where would that input take them?" The programme's logic is preventive—intervene before talent, curiosity, and online influence calcify into serious offending.
For Lucas, the shock of a police officer at the door was enough to make him reconsider. He admits he would have continued pushing boundaries, testing systems, exploring deeper into hacking if he had not been caught and offered this path. Elsewhere, the programme has produced clearer success stories. Izak, now twenty-one and working as a cyber-security professional in Leicestershire, hacked his school computers at fifteen to access Photoshop for graphic design. He was also drawn toward online criminal groups advertising easy money. A visit from local police redirected him toward the programme, which helped him see his technical skills as an asset in legitimate work rather than a liability. He learned to use his abilities, as he put it, "for good."
The question facing authorities is whether early intervention can scale fast enough. As teenage hacking groups play an increasingly prominent role in attacks on major organisations, and as young people engage with devices and online communities at younger ages, the window for redirection narrows. The NCA's hope is that Cyber Choices can reach young people before curiosity becomes crime—before the next Lucas or Izak disappears into a criminal network with no way back.
Notable Quotes
My fear is that if we didn't give them something like Cyber Choices, where would they get that input and where would that input take them?— Paul Foster, NCA cyber prevention lead
The vast majority of individuals I'm dealing with are neurodiverse. They obviously have more affinity with computers than they do with practical and social reality.— PC Sam Cooper, Cyber Prevent officer
Want the full story?
Read the original at BBC News ↗
Crime & Justice