True Crime: Rhianan Rudd - How Online Extremists Targeted A Child

When A Groomed Child Became A Suspect

The Missed Safeguarding Warnings

The water was still running inside the en-suite room at Bluebell House. Staff had first noticed a problem with the building’s water pressure and looked for a burst pipe. Then, on the morning of 19 May 2022, they went to check on the sixteen-year-old girl whose future had seemed unusually vivid only hours earlier.

The previous day, Rhianan Rudd had sat an English GCSE examination. She had spoken about an apprenticeship in horse care, travelling to Japan and the possibility of becoming a jockey. Records described her mood as good. At 11pm, she was in her bedroom and staff noted no concern.

To the state, however, Rhianan had also become something else: a national-security problem. Before she was old enough to finish her GCSEs, she had been investigated by counter-terrorism police and MI5, arrested, charged with six terrorism offences and separated from the government programme that was supposed to steer vulnerable people away from extremism.

Behind the frightening messages and extremist files was a child who had been drawn into the orbit of adult American white supremacists. She was vulnerable, autistic and sexually exploited online. By the time the criminal case was abandoned, the official language around her had changed. The schoolgirl once treated as a suspected terrorist had been formally recognised as a victim of modern slavery.

The question left behind is not whether Rhianan said alarming things. She did. It is how Britain should respond when a child can present both genuine risk and unmistakable vulnerability at the same time—and what happens when investigation, safeguarding, mental-health care and deradicalisation operate beside one another without ever becoming one coherent system.

The Girl Before The Case

Rhianan came from Bolsover in Derbyshire. Her mother, Emily Carter, remembered a loving, funny and clever girl who enjoyed animals, baking and making people laugh. Family photographs show the ordinary range of adolescence: bubble tea, pulled faces, affectionate selfies and the visual experimentation through which teenagers try out versions of themselves.

That ordinary identity matters because the label later attached to Rhianan was so consuming. “Terror suspect” can make everything that came before it seem like a prelude. It can turn childhood into evidence and vulnerability into background information, even when the child’s age is central to understanding how she was influenced.

Rhianan had a history of self-harm and autistic traits; an autism diagnosis would become part of the later review of her prosecution. Those facts did not make her destined for extremism, and autism does not explain extremist belief. They did, however, form part of the vulnerabilities that professionals were required to consider when judging her communications, her capacity to be manipulated and the likely effect of criminal proceedings.

The inquest heard that her behaviour changed. A girl described as bubbly and kind became quieter and more withdrawn. The coronavirus lockdown intensified isolation at the same time as much of teenage life moved behind screens, where adults with violent ideologies could reach children without crossing a front door.

Rhianan’s interests also darkened. Fascism and Adolf Hitler became fixations. She adopted racist and antisemitic ideas, gathered extremist material and produced communications that could not responsibly be dismissed as harmless role-play. Yet the route into that material was not a solitary journey of ideological discovery. Adults had helped build it around her.

The First Adult Influence

The first significant influence identified at the inquest was Dax Mallaburn, an American connected to white-supremacist ideology who had formed a relationship with Rhianan’s mother. He moved into the family home in 2017. According to the coroner’s findings as reported from the inquest, he played a material role in introducing and encouraging Rhianan’s interest in extreme right-wing material.

In autumn 2019, Rhianan made an allegation that Mallaburn had touched her inappropriately, then withdrew it. Following a social-services assessment, he returned to the home. The public record does not establish every detail of what happened within the household, and it would be wrong to turn an allegation and withdrawal into a definitive account. What can be said is that a safeguarding concern existed before the later terrorism investigation.

By the time Britain entered lockdown, Mallaburn’s relationship with Carter had ended and he had left the country. The ideological door, however, had already been opened. Rhianan was increasingly isolated, spending time online and becoming reachable by people who could reward provocation, intensify grievance and blur affection with obedience.

This is one of the case’s most important distinctions. A young person can repeat hateful ideas and still be exploited. Recognising exploitation does not make antisemitic threats harmless, but recognising threats does not cancel the duty to ask who supplied the worldview, who benefited from the relationship and how a child’s vulnerabilities were used.

The Man On The Other Side Of The Screen

Rhianan then came into contact with Christopher Brenner Cook, an Ohio-based white supremacist who was around eighteen when he communicated with her. She was fourteen. He sent links to racially motivated violent-extremist texts and, according to evidence aired at the inquest, exerted pressure within a relationship that mixed ideology, sexual exploitation and emotional control.

Rhianan told police that Cook had made her send explicit images and had threatened to leave or harm her if she did not comply. Messages showed the language of a personal relationship, but the age difference and coercion destroy any meaningful idea of equality. This was not simply two politically extreme people exchanging books. It was an adult drawing a child further into a world of violence while obtaining sexual material from her.

Cook’s own trajectory makes the danger more concrete. In the United States, he later admitted involvement in a white-supremacist scheme to attack electricity infrastructure. In April 2023, a federal court sentenced him to ninety-two months in prison for conspiring to provide material support to terrorists in a plot designed to damage the economy and provoke social unrest. The United States Department of Justice described the plan as an attempt to advance white supremacy through attacks on power grids.

That later conviction does not prove that every message Rhianan sent was dictated by Cook. It does establish that the person influencing her was not an imaginary internet provocateur or merely an offensive teenager. He was involved in real extremist planning and capable of treating violence as a political instrument.

Online grooming often works through accumulated permissions. A boundary is crossed, normalised and then replaced by another. Attention becomes intimacy; intimacy becomes secrecy; secrecy becomes leverage. In Rhianan’s case, the available evidence supports a pattern in which extremist instruction and sexual coercion were intertwined, making it difficult to separate what she believed, what she performed to retain approval and what she feared would happen if she resisted.

The Warning That Reached Her Mother

By September 2020, the danger was no longer confined to private messages. Rhianan came downstairs and told her mother she had downloaded a bomb-making manual. Carter contacted Prevent, the government programme intended to stop people becoming terrorists or supporting terrorism.

It was an extraordinary act of parental escalation. Carter was not concealing what her daughter had done or minimising the material. She was telling the authorities that her child had entered a space she could not safely manage alone and asking for intervention before the situation grew worse.

Her expectation was that specialists would unpick the ideology and help restore the daughter she recognised. Prevent initially represented the safeguarding route: an attempt to address vulnerability and pull a young person away from violent belief without waiting for an offence. But the files and messages also raised a public-protection question that Prevent alone could not settle.

Investigators had to distinguish fantasy, provocation and online performance from intent and capability. Rhianan had talked about killing someone at school or attacking a Jewish place of worship. She possessed material concerning bomb-making and weapons. Even when such words come from a manipulated child, they create an obligation to assess whether anyone is in immediate danger.

The error would be to imagine that officials had only two clean choices: rescue a victim or stop a threat. Rhianan could be both vulnerable and risky. The harder question was whether the institutions around her were capable of holding both truths at once.

The Arrest

On 20 October 2020, police and MI5 decided not to arrest Rhianan because of concern about the effect on her mental health, including the possibility of further self-harm. That same day, she was treated in hospital after carving a swastika into her forehead. New information and concern about risk to others led to a different decision.

The next day, nineteen police officers and three detectives arrived at the family home. Carter later recalled that handcuffs would not fit her daughter’s wrists. Rhianan was small, frightened and now surrounded by the physical machinery of counter-terrorism. The image is difficult to forget because it captures the case’s collision in a single detail: the state confronting material serious enough to demand action in the body of a child too slight for its restraints.

Rhianan’s arrest stopped her engagement with Prevent under the policy operating at the time. The intervention designed to challenge extremist belief therefore receded precisely when the criminal investigation intensified. Security agencies continued trying to assess the risk, but safeguarding, prosecution and deradicalisation were no longer parts of one continuous plan.

The police search uncovered material that reinforced concern. Rhianan had extreme right-wing content, manuals and a bedroom display centred on Hitler. She had sent violent and antisemitic messages. Those findings explain why officials could not simply accept that grooming eliminated danger.

They also made it more important to examine the source of the material. During police interviews, Rhianan described coercion and online sexual exploitation. The existence of an adult extremist contact was not a minor mitigation to be considered after the threat assessment. It was evidence about how the apparent threat had formed.

From Bail To Six Terrorism Charges

The investigation continued for months. On 15 April 2021, Rhianan was arrested at Sheffield bus station after breaching bail conditions. That day, aged fifteen, she was charged with six terrorism offences, making her the youngest girl in Britain to face such charges.

Charging a child is not a finding of guilt. It means prosecutors believe the legal tests for bringing a case are met, including a realistic prospect of conviction and a judgment that prosecution is in the public interest. In Rhianan’s case, the decision was made urgently after the alleged bail breach and before every strand of the exploitation evidence was available to prosecutors.

At the 2025 inquest, a senior former counter-terrorism prosecutor acknowledged that the Crown Prosecution Service had not possessed the full evidential picture when Rhianan was charged. MI5 material identifying Cook and the nature of his influence had not initially reached prosecutors. The CPS could not itself make a referral into the National Referral Mechanism, the framework used to identify potential victims of modern slavery; that responsibility rested with designated first responders such as police and local authorities.

Defence lawyers initiated an NRM referral four days after the charges. That timing is critical. By then, the state had already placed Rhianan within the criminal process, but the formal mechanism for asking whether she was a trafficked or exploited child had only just begun.

Rhianan moved to Bluebell House Residential Home in Nottinghamshire as part of her bail arrangements. Separation from her phone and online networks could serve a protective purpose, and the home later became a place in which she made real progress. Yet the move also separated her from home while the fear of trial and prison hung over her.

What The Evidence Did And Did Not Show

The case against Rhianan was not imaginary. Her messages included violent statements, her devices contained bomb-making and weapons material, and her presentation suggested a sustained fascination with Nazism rather than one isolated search. Security agencies had to test whether she had moved from hateful expression towards preparation.

At the same time, the evidence of exploitation was unusually strong. Cook was an adult extremist. He supplied ideological material, developed an exploitative personal relationship with a child and coerced sexual images. Mallaburn had already influenced Rhianan’s interest in extreme right-wing ideas. Her autism, mental-health history and age affected how intention and culpability had to be assessed.

The difficulty was not choosing which body of evidence was “real.” Both were real. The violent content showed why the authorities investigated; the grooming evidence showed why criminal intent could not be inferred from possession and messages alone. A child can take concrete steps under another person’s influence, and exploitation can increase rather than reduce danger.

That is why the language used around Rhianan matters. Calling her only a terrorist suspect ignored the architecture of manipulation behind the files. Calling her only a passive victim risks understating statements that understandably alarmed police and Jewish communities. The accurate description is more demanding: she was an exploited child whose conduct raised a legitimate security concern.

How The Grooming System Worked

Documented Behaviour

The documented pattern began with adult exposure to white-supremacist ideology, continued through an online relationship with Cook and escalated alongside isolation during lockdown. Rhianan downloaded violent extremist material, adopted fascist imagery and produced antisemitic threats. Cook sent ideological texts, pursued a personal relationship with a fourteen-year-old and coerced explicit images through threats of abandonment or harm.

What Qualified Experts Said

The public inquest record includes professional assessments of Rhianan as both vulnerable and capable of presenting risk. An MI5 behavioural-science assessment reportedly described her as “both vulnerable and risky at the same time,” recognising that exploitation could heighten rather than neutralise the danger. The coroner did not diagnose a motive or reduce the case to one psychological explanation; her findings instead traced significant radicalising influence to Mallaburn and Cook.

What Can Reasonably Be Inferred

The sequence is consistent with grooming that fused belonging, fear and ideological escalation. Extremist identity may have supplied Rhianan with attention and a ready-made persona during isolation, while sexual coercion gave Cook leverage. Her provocative behaviour may also have expressed distress, fascination, genuine belief or a mixture of all three. No single explanation can safely account for every message.

The pattern shows why intervention must address relationships, not merely remove content. Deleting an account or confiscating a phone cannot by itself undo an identity reinforced through approval, secrecy and fear. Equally, describing all extremist speech by a child as performance would risk missing a developing capacity for harm.

What Cannot Be Known

The surviving record cannot precisely divide Rhianan’s own beliefs from ideas performed for adult approval. It cannot reveal what she would have done without intervention, and it cannot establish that autism caused either radicalisation or self-harm. Explanation is not excuse, but culpability cannot be measured responsibly without considering age, coercion and the adults who shaped the environment.

The Finding That Changed The Prosecution

The NRM process eventually produced a formal conclusion that Rhianan had been a victim of criminal and sexual exploitation. Prosecutors reviewed the case again as her autism diagnosis and further evidence of vulnerability became available. The new material cast doubt on whether the intention required for a prosecution could be proved.

In December 2021, the six charges were discontinued. Rhianan had not been acquitted after a trial, nor had a court ruled that every allegation was false. The prosecution concluded that there was no longer a realistic case. That distinction matters, but so does the human reality: after eight months living under terrorism charges, the state no longer believed it could prove them.

The formal recognition of exploitation arrived late. Police and Derbyshire County Council had been in positions to refer Rhianan earlier, and the later inquest found there had been enough information to consider her a potential victim. An earlier referral would not necessarily have stopped the security investigation, but it could have placed victim status inside the decision-making framework sooner.

For Rhianan, the end of the prosecution did not erase the experience of arrest or the fear of imprisonment. The chief coroner would later find that she had been highly affected by the arrest and worried about being sent to prison. It was unclear what her lawyers told her when the charges were dropped, leaving open the possibility that even apparent relief carried confusion or psychological consequences.

A Year Without Direct Mental-Health Support

One of the most serious findings concerned the gap between what professionals assumed was happening and what Rhianan actually received. From May 2021 until her death in May 2022, she had no direct input from Nottinghamshire Child and Adolescent Mental Health Services during a period that included prosecution, the collapse of the case and renewed Prevent work.

Specialist forensic child and adolescent mental-health services were involved, but the coroner found no positive effect from that involvement. There was no clear care plan and no effective coordination of the agencies around Rhianan. More troublingly, the presence of a specialist service may have created the appearance that she was receiving meaningful therapeutic help when little direct work was reaching her.

Derbyshire County Council should have referred Rhianan for mental-health support earlier and arranged longer-term therapy. These were not abstract administrative imperfections. Rhianan had known vulnerabilities, a history of self-harm, an autism diagnosis, the aftermath of sexual exploitation and the stress of a national-security investigation.

Yet it would also be inaccurate to describe Bluebell House only as a place of decline. Evidence showed that Rhianan made progress there. She became more open, interactive and future-focused. She said she felt safe and wanted to remain at the home until she was eighteen. Those positive developments are crucial because they explain why the final act was not predicted with confidence.

The Investigation That Did Not End

Although the criminal charges were discontinued, MI5 continued to assess Rhianan until the day she died. A senior witness told the inquest that this was necessary to understand whether she posed a threat to national security. The service was seeing more children in its work and struggling with the difference between online bravado and concrete movement towards violence.

Internal discussion revealed discomfort as well as uncertainty. Officers recognised her self-harm and vulnerability and wanted national guidance for cases involving children. Intelligence work could identify risk, but MI5 was not a mental-health provider. The result was a familiar institutional danger: each organisation could explain the boundary of its own role while the child remained whole, complicated and in need of coordinated care.

Counter-terrorism policing later described Rhianan’s case as a “stark moment” in managing growing numbers of children who present vulnerability alongside potential risk. In its response to the inquest, it said practice had evolved towards rehabilitation and deradicalisation where feasible, rather than investigation and conviction alone.

That statement acknowledges the broader significance without conceding that the original investigation was unnecessary. It is possible to accept that police faced a real threat-assessment duty and still conclude that the system around the investigation failed to deliver the safeguarding and therapy Rhianan needed.

The Final Prevent Sessions

Prevent engagement resumed after the prosecution ended. Professionals had agreed to pause more probing work at one point because of concerns around Rhianan’s mental health. She was also preparing for GCSEs, without direct CAMHS involvement and navigating renewed access to online spaces connected to her earlier life.

Shortly before her death, the focus of a final Prevent session changed. The coroner found that the session probably explored difficult topics more challengingly than was desirable. The change had not been discussed with other professionals and was inappropriate in the circumstances.

That finding does not establish that the session caused Rhianan’s death. Temporal proximity can feel persuasive, especially in retrospect, but an inquest must separate concern from proof. The chief coroner was not satisfied that the missed opportunities could be causally linked to what happened on 19 May.

The distinction is painful but essential. A service can act inadequately without being proved to have caused a death. Conversely, an inability to prove causation does not make inadequate practice acceptable. The lesson lies in improving coordination and care, not inventing certainty that the evidence could not support.

The Last Ordinary Day

Rhianan’s final full day contained the kind of details that resist a simple narrative of inevitable decline. She sat an English GCSE examination. She spoke about work with horses, travel and career paths. Staff recorded a positive mood and saw protective factors that appeared stronger than the known risks.

There were also signs of continuing conflict. Rhianan had worried about an old Telegram account and material that might incriminate her. An Instagram reaction to a costume had distressed her. In April 2022, she had worn camouflage with a German flag on Hitler’s birthday and begun speaking in a German accent, behaviour that renewed concern about the persistence of extremist identity.

Those details do not form a neat arrow towards one outcome. They show a teenager moving between progress and disturbance, aspiration and fixation. The possibility of a horse-care apprenticeship could coexist with unresolved fear about investigation. A good mood could be genuine without guaranteeing safety the following morning.

When staff discovered Rhianan in the en-suite on 19 May, they attempted CPR and emergency services attended. She died aged sixteen. The later post-mortem evidence identified neck compression, but the legal conclusion about her intention was more cautious than many headlines would suggest.

What The Inquest Found

The inquest heard evidence across sixteen days from police, MI5, prosecutors, social services, NHS organisations, Prevent and the children’s home. On 9 June 2025, Chief Coroner Judge Alexia Durran delivered a narrative conclusion at Chesterfield Coroner’s Court.

She concluded that Rhianan’s death resulted from a self-inflicted act but that it was not possible to determine her intention. The coroner was not satisfied, on the balance of probabilities, that Rhianan intended to take her own life. That is legally different from a conclusion of suicide, even though the physical act was self-inflicted.

The coroner identified several missed opportunities. Police and Derbyshire County Council could have referred Rhianan earlier to the National Referral Mechanism. The council should have sought mental-health support sooner. Nottinghamshire CAMHS left her without direct input for a year, and forensic CAMHS failed to create effective care or coordination. The final shift in Prevent’s work was inappropriate.

At the same time, the coroner found the investigation and prosecution necessary and appropriate in the circumstances. She was satisfied that the missed opportunities were not systemic or could not be causally linked to the death, and Article 2 of the European Convention on Human Rights was not engaged. No Prevention of Future Deaths report was issued, partly because changes had already occurred.

Those findings resist campaigning shorthand from either direction. The inquest did not say the state caused Rhianan’s death, and it did not say every agency performed well. It confirmed both legitimate security concerns and serious safeguarding gaps. The published summary of the findings records the absence of direct mental-health support, the delayed victim referral and the inappropriate change in Prevent’s approach.

What The Record Cannot Prove

The record cannot prove that an earlier NRM referral would have prevented Rhianan’s death. It cannot show that uninterrupted Prevent work in 2020 would have reversed the radicalisation, or that avoiding prosecution would have removed the danger she may have posed. It cannot identify one conversation, decision or institution as the decisive cause.

It also cannot justify the idea that Rhianan was simply a dangerous ideologue who manipulated every adult around her. The official modern-slavery decision recognised exploitation, and the coroner found two adult extremists significantly influenced her. Any account that treats the extremist files as self-explanatory leaves out the relationships that put them within reach.

Nor can the positive reports from Bluebell House prove that risk had disappeared. A young person can have goals and still experience sudden distress. The coroner’s uncertainty about intention should be preserved, not converted into a more definite story because certainty is emotionally easier to narrate.

The Larger Problem Of Children And Extremism

Rhianan’s case arrived as security agencies were seeing more minors in counter-terrorism work. The internet lowered the barriers between ideologues and vulnerable children, enabling relationships to develop across borders, outside school and family observation. Extremist communities could offer identity, status and belonging while directing young people towards propaganda, technical material and escalating tests of loyalty.

Traditional criminal categories struggle with that pattern. The groomed child may possess illegal material, make threats and even take steps that create risk. A safeguarding response that ignores capability can fail the public; a security response that ignores exploitation can punish the mechanism through which the danger was created.

The solution is not a presumption that children cannot be dangerous. It is a child-specific system able to assess threat and exploitation simultaneously. That requires early modern-slavery screening, specialist interviewing, rapid exchange of relevant intelligence with prosecutors, uninterrupted mental-health provision and deradicalisation work coordinated with care rather than suspended by process.

Rhianan’s experience also shows the danger of professional reassurance by proxy. Several services may be “involved” while no one is delivering regular therapy or holding the combined plan. Meetings, referrals and case ownership can create administrative density without human contact. The inquest’s recurring theme was that professionals believed support existed when direct support was thin.

A Child Behind A National-Security Label

Emily Carter has argued that her daughter should have been treated as a victim from the beginning. The coroner did not wholly endorse that claim, because the investigation and prosecution were found reasonable and proportionate. But the inquest gave weight to the central part of the family’s concern: institutions had enough information to consider exploitation sooner and still failed to secure consistent mental-health care.

Public debate often demands a verdict on the whole system—failure or success, protection or criminalisation. Rhianan’s case offers something harder. Counter-terrorism officers may have been right to investigate the risk and wrong not to activate victim protections earlier. A residential home may have helped her thrive and still been unable to foresee the final act. Prevent may have been necessary and handled its final change of focus poorly.

The label “schoolgirl terrorist” compresses those contradictions into three words. It gives the extremism priority and the childhood only a qualifier. The more accurate legacy is not that a terrorist was discovered in a Derbyshire bedroom, but that a vulnerable child was groomed into conduct serious enough to frighten the public and then moved through systems that never fully integrated what she had done with what had been done to her.

The running water at Bluebell House first sounded like a maintenance problem. It became the detail that led staff to Rhianan’s room and, later, part of the last morning examined by the inquest. It now carries a wider meaning: many organisations were present around this child, many alarms had sounded, and still the support she needed did not reliably reach her.