Online child abuse referrals 'almost quadruple'

Cheshire Police reported online child-abuse referrals have risen from just over 180 in 2023 to nearly 800 in 2025, prompting Chief Constable Mark Roberts to prioritize digital investigations staff and propose cutting Police Community Support Officer (PCSO) roles. Plans confirmed in December would have cut around 60 posts to save £13m, with subsequent adjustments leaving proposals to axe 50 PCSO posts and retain 10 roles; the police and crime commissioner has opened a consultation where a proposed £2.14/month band B precept increase could preserve all 87 PCSOs pending government approval. The shift highlights operational trade-offs between local community policing and capacity for specialist digital investigations, creating potential governance and public-safety risks tied to budget constraints.

Analysis

Market structure: The 4x jump in Cheshire online child-abuse referrals (≈180→≈800 from 2023→2025) forces a reallocation of scarce public-safety budgets from low‑skill local roles (PCSOs) to digital forensics and cyber-investigations staff and contractors. Winners are niche digital-forensics vendors, cloud/SIEM/EDR providers and managed detection services that sell to police forces; losers are community-facing local services and incumbents with fixed-cost headcount exposure. Expect 6–18 month procurement windows and higher per-contract pricing power for specialist vendors as police forces replace headcount with outsourced tools and cloud services.

Risk assessment: Tail risks include a political U‑turn (central government emergency funding) or a high-profile failure that forces re-prioritisation back to local policing—either would cut tech spend or accelerate it dramatically; probability within 3 months is moderate given ongoing PCC consultation. Near term (days–weeks) watch for the PCC precept vote and any Home Office statements; medium term (3–12 months) risk is hiring bottlenecks, certification delays and contract cadence; long term (≥12 months) structural uplift in public-sector cyber budgets if backlog recurs or national standards tighten.

Trade implications: Direct plays are cyber/forensics vendors and UK-listed security tech: consider CRWD and PANW for enterprise/sovereign spend exposure and DARK.L for UK public-sector sensitivity; expect 6–12 month upside if multiple public forces follow Cheshire’s reallocation. Options tactics: buy 3–6 month call spreads to capture step-up in contracting activity while limiting premium; size exposure small (1–2% portfolio per name) initially and scale on contract announcements or a >60% PCC precept approval signal.

Contrarian angles: Consensus assumes gradual procurement; reality is lumpy — a single high‑profile case or a favourable PCC vote (threshold: >60% in favour) could trigger a rapid procurement wave and 10–30% upside in niche cyber/forensics small caps within 30–90 days. Conversely, political backlash preserving PCSOs would depress near-term tech spend; set explicit triggers (contract award, Home Office grant, or precept approval) before scaling positions to avoid mistimed exposure.

Key Decisions for Investors

• Establish a 1.5% net-long position in CrowdStrike (CRWD) and a 1.5% net-long in Palo Alto Networks (PANW) split 50/50, horizon 6–12 months to capture public-sector and enterprise cyber spend; use 3–6 month news-driven increments and trim at +20% or on negative macro shocks.
• Open a 1% long position in Darktrace plc (LSE: DARK) for UK-focused government/enterprise exposure; add another 0.5% if a UK Home Office or PCC contract/announcement is published within 90 days.
• Purchase 3–6 month call spreads on CRWD (buy 1x 5% OTM call, sell 1x 10% OTM) sized to cap premium to ~0.5% of portfolio to capture upside from accelerated public procurement while limiting downside.
• Use an explicit event-driven scaling rule: if Cheshire PCC consultation or equivalent in another force returns >60% support for a precept increase within 30–60 days or if a public-sector cyber contract >£2m is awarded to a named supplier, increase cyber/forensics exposure by +0.5–1.0% and rebalance cash by reducing 0.5% exposure in local-services/municipal-exposed equities.