Most football clubs have a safeguarding email address. It appears on the website, in the matchday programme and in the academy handbook. It is a sensible starting point, but on its own it rarely meets the standards football now sets, and it is seldom the route a frightened young player, a worried parent or an uneasy member of staff will actually choose.
This article looks at what the game's own standards expect, where a single inbox falls short, and what a more complete reporting arrangement looks like.
The Football Association sets the safeguarding policy and regulatory framework across football in England, and the leagues build on it with their own requirements.
The EFL Safeguarding Standards (2024 to 2025 edition, as published by a member club) are a useful benchmark. Among other things, they expect clubs to have:
The Premier League's 2025/26 Safeguarding Standards point the same way. They call for robust procedures for reporting and responding to concerns, a whistleblowing policy, an electronic system for recording safeguarding concerns, safeguarding as a standing or regular Board agenda item, and "a variety of safe, inclusive, and accessible ways" for children and young people to express their views, with feedback showing that their input is valued.
The FA's own review of the first year of its 2024 to 2028 safeguarding strategy describes the roll-out of a new case management system across The FA and County FAs, a reminder that structured recording is now the norm at every level of the game.
A shared mailbox is only as reliable as whoever checks it. Holidays, staff changes and busy matchday weekends all create gaps. If a concern sits unread, the club may not know it exists until it is too late.
Sending an email reveals the sender's address, and often their name. For a young player worried about selection, a member of staff concerned about a senior colleague, or a volunteer who does not want to be seen as disloyal, that alone can be enough to stay silent. The standards ask clubs to identify barriers to speaking out. Fear of being identified is usually the first.
An email thread does not record who has seen a concern, what was decided, or why a case was closed. It does not produce the trend information the standards describe, and it is difficult to evidence at audit. Copying concerns into spreadsheets adds risk rather than reducing it.
Football clubs bring together players, staff, volunteers and supporters from many backgrounds. Some will not have English as a first language. Some young people find it easier to speak than to write. An email address assumes the reporter is comfortable composing a written message to an unknown reader.
On a matchday, a steward, a supporter or a visiting parent may notice something that worries them. They need a route they can use there and then, from a phone, without searching for the right address.
Clubs that meet the standards well tend to share a few features:
External routes also need to be promoted. The FA's guidance on reporting safeguarding concerns directs people to their club or league welfare officer, their County FA designated safeguarding officer or The FA's safeguarding team, and to the police or children's social care in an emergency. The NSPCC Helpline is available to any adult with concerns about a child on 0808 800 5000.
Speak Out Safe works with clubs across the EFL and non-league game, including QPR, Birmingham City, Millwall, Middlesbrough, Notts County, Stockport County and Fleetwood Town, as well as the Irish FA's Club NI programme and the Essex Senior League.
Each club can have a dedicated portal and QR code for each part of the organisation, such as the first team, academy, staff and match day, so posters in the changing room, the training ground and the concourse each lead to the right place. Reporters can use tick-box forms or voice notes, which are turned into text, in 29 languages, and can remain anonymous while messaging the case handler in both directions. Access is controlled through defined roles for case handlers, administrators and read-only users, and safeguarding staff record notes, closure codes and outcomes, with statistics and a full audit trail. The platform runs under an ISO/IEC 27001:2022 information security management system, holds Cyber Essentials and supports UK and EU GDPR compliance, with UK-based support.
This article is general information, not legal or safeguarding advice. Always follow your club's safeguarding procedures and contact the police in an emergency.
If you would like to see how a concern reported from a QR code on the concourse reaches your safeguarding lead, book a demo with our team.