Safeguarding in sport

Why football clubs need more than a safeguarding email address

EFL and Premier League standards expect promoted whistleblowing routes and electronic case management. Why a single inbox is not enough.


Most football clubs have a safeguarding email address. It appears on the website, in the matchday programme and in the academy handbook. It is a sensible starting point, but on its own it rarely meets the standards football now sets, and it is seldom the route a frightened young player, a worried parent or an uneasy member of staff will actually choose.

This article looks at what the game's own standards expect, where a single inbox falls short, and what a more complete reporting arrangement looks like.

What football's standards expect

The Football Association sets the safeguarding policy and regulatory framework across football in England, and the leagues build on it with their own requirements.

The EFL Safeguarding Standards (2024 to 2025 edition, as published by a member club) are a useful benchmark. Among other things, they expect clubs to have:

  • a Board-level representative holding leadership responsibility for safeguarding;
  • effective procedures for responding to concerns about children and adults at risk, with staff confident to report;
  • safeguarding, complaints and whistleblowing procedures that are "easily understood and widely promoted";
  • an effective electronic case management system for recording and tracking concerns and allegations, which alerts safeguarding staff when a concern is reported and supports analysis of trends;
  • a safeguarding officer responsible for arrangements on match days and at other stadium events;
  • a systematic approach to understanding whether children and adults at risk feel safe, and to identifying barriers that stop them speaking out.

The Premier League's 2025/26 Safeguarding Standards point the same way. They call for robust procedures for reporting and responding to concerns, a whistleblowing policy, an electronic system for recording safeguarding concerns, safeguarding as a standing or regular Board agenda item, and "a variety of safe, inclusive, and accessible ways" for children and young people to express their views, with feedback showing that their input is valued.

The FA's own review of the first year of its 2024 to 2028 safeguarding strategy describes the roll-out of a new case management system across The FA and County FAs, a reminder that structured recording is now the norm at every level of the game.

Where a single inbox falls short

It depends on one person

A shared mailbox is only as reliable as whoever checks it. Holidays, staff changes and busy matchday weekends all create gaps. If a concern sits unread, the club may not know it exists until it is too late.

It is not anonymous

Sending an email reveals the sender's address, and often their name. For a young player worried about selection, a member of staff concerned about a senior colleague, or a volunteer who does not want to be seen as disloyal, that alone can be enough to stay silent. The standards ask clubs to identify barriers to speaking out. Fear of being identified is usually the first.

It is not a case management system

An email thread does not record who has seen a concern, what was decided, or why a case was closed. It does not produce the trend information the standards describe, and it is difficult to evidence at audit. Copying concerns into spreadsheets adds risk rather than reducing it.

It is not accessible to everyone

Football clubs bring together players, staff, volunteers and supporters from many backgrounds. Some will not have English as a first language. Some young people find it easier to speak than to write. An email address assumes the reporter is comfortable composing a written message to an unknown reader.

It does not suit the matchday

On a matchday, a steward, a supporter or a visiting parent may notice something that worries them. They need a route they can use there and then, from a phone, without searching for the right address.

What a complete arrangement looks like

Clubs that meet the standards well tend to share a few features:

  • Several clear routes. Welfare officers and designated safeguarding leads remain essential. A digital channel sits alongside them, not in place of them.
  • Separate entry points for different groups. The first team, the academy, staff and matchday operations each have different audiences and risks, so each benefits from its own reporting point.
  • A genuine anonymous option, with dialogue. Anonymous reports are far more useful when the safeguarding lead can ask follow-up questions without learning the reporter's identity.
  • Structured recording. Every concern is logged, assigned, actioned and closed, with an audit trail the Board and auditors can rely on.
  • Board visibility. Regular reporting on volumes, themes and response times, without exposing individual cases.

External routes also need to be promoted. The FA's guidance on reporting safeguarding concerns directs people to their club or league welfare officer, their County FA designated safeguarding officer or The FA's safeguarding team, and to the police or children's social care in an emergency. The NSPCC Helpline is available to any adult with concerns about a child on 0808 800 5000.

How Speak Out Safe supports clubs

Speak Out Safe works with clubs across the EFL and non-league game, including QPR, Birmingham City, Millwall, Middlesbrough, Notts County, Stockport County and Fleetwood Town, as well as the Irish FA's Club NI programme and the Essex Senior League.

Each club can have a dedicated portal and QR code for each part of the organisation, such as the first team, academy, staff and match day, so posters in the changing room, the training ground and the concourse each lead to the right place. Reporters can use tick-box forms or voice notes, which are turned into text, in 29 languages, and can remain anonymous while messaging the case handler in both directions. Access is controlled through defined roles for case handlers, administrators and read-only users, and safeguarding staff record notes, closure codes and outcomes, with statistics and a full audit trail. The platform runs under an ISO/IEC 27001:2022 information security management system, holds Cyber Essentials and supports UK and EU GDPR compliance, with UK-based support.

This article is general information, not legal or safeguarding advice. Always follow your club's safeguarding procedures and contact the police in an emergency.

If you would like to see how a concern reported from a QR code on the concourse reaches your safeguarding lead, book a demo with our team.

Similar posts

Get notified on new marketing insights

Be the first to know about new B2B SaaS Marketing insights to build or refine your marketing function with the tools and knowledge of today’s industry.