Many teenagers who get involved in hacking do not initially see themselves as criminals. For many, it starts with curiosity — trying to bypass school internet restrictions, explore computer systems or test their programming skills. But authorities warn that such experimentation can quickly lead to serious cybercrime if left unchecked.

To address the issue, UK police and the National Crime Agency (NCA) have expanded Cyber Choices, a rehabilitation programme designed to divert young hackers away from criminal activity and towards careers in cyber security.

One such teenager is Lucas, who began hacking his school’s computer systems at the age of 16 to access blocked websites and games. His actions nearly led to expulsion before his mother contacted police for help. Instead of prosecution, Lucas was introduced to Cyber Choices, where officers explained the legal and real-world consequences of cyber-attacks while helping him develop his skills through legitimate pathways.

Police officers work with participants over several months, identifying their interests and encouraging them to pursue cyber security qualifications, university courses and professional careers. The programme focuses on turning technical talent into a positive asset rather than allowing it to be exploited by criminal groups.

According to the NCA, more than 1,150 young people have been referred to Cyber Choices over the past eight years, with nearly 600 referrals occurring in the last three years, reflecting growing concern over youth involvement in cybercrime.

Authorities say English-speaking teenage hackers have become increasingly prominent in major cyber-attacks, including incidents targeting Transport for London (TfL), MGM Grand, Marks & Spencer and the Co-op. Young hackers are also increasingly involved in attacks aimed at stealing cryptocurrency.

Police say many of the teenagers they encounter are neurodiverse, with a significant number being autistic. Officers believe some become intensely focused on technological challenges without fully understanding the legal or ethical consequences of their actions.

The programme has drawn scrutiny after some participants allegedly reoffended, leading critics to question whether teaching advanced cyber skills could backfire. However, the NCA argues that providing guidance and legitimate opportunities offers a better alternative than leaving talented young people vulnerable to online criminal networks.

The initiative has also produced success stories. Izak, now a 21-year-old cyber security professional, joined Cyber Choices after hacking his school computers as a teenager. Encouraged by police to “use his cyber skills for good”, he eventually turned his interest in hacking into a legitimate career.