There is additional guidance available in the December 18, 2025 developer update regarding private instances and consent: Developer Update - December 18 2025 - Official / Dev Updates - VRChat Ask Forum
This is my personal interpretation, and my interpretation may contain inaccuracies. I’m not affiliated with VRChat.
I’ll explain VR raves/clubs where provocative activity or content may or may not occur as an example. These have thrived for years on the following principles:
- The group advertises events only privately: You know a guy, you know a publicly accessible but hidden URL for a list of events from the group, you’re logged in to a particular website to see all events which may or may not have provocative content or behaviors directly, you’re in a Discord server, or you’re a member of that VRChat group with its group event announcements set to Group visibility (not Public and not an open-to-join group). If you know, you know. It’s mostly underground, and likewise only advertised in those underground circles in beforementioned places.
- Content in the VRChat group page itself is “safe for work”, per Creator Guidelines. It should not contain any inflammatory or suggestive content. This also includes event announcements and group posts in VRChat.
- A group should be transparent about what it is and what its rules are. There should be no surprises when someone joins your group. Typically a group gathers consent from the group rules or from a banner in the world near the entrance (far away from club activity), explaining what attendees are getting into before being potentially exposed to provocative activities or content which may or may not be encountered.
- The instances are Age Gated (Verified 18+). Group membership may be limited to Verified 18+ members only. The instances are Group members or Group+.
- A group actively moderates instances and usually has some sort of moderation structure in place (for safety).
- A group doesn’t permit hateful/abusive content (defined in the list of “never permitted” in Creator Guidelines).
- The groups usually strive to follow the VRChat Community Guidelines, Creator Guidelines and Terms of Service.
The nuanced statement from Community Guidelines comes from: “Private instances that advertise themselves publicly will be considered public for the purposes of moderation.” I don’t see an issue with private instances advertising themselves privately outside of VRChat, “if you know you know”.
It comes down to keeping the public face of VRChat clean and a safe environment, and gathering consent of attendees in private spaces designated for adults. Minors (persons under the age of 18) can’t consent, so Age Gating to Verified 18+ should be a requirement here.
Usually this also means the groups for adults should be set to Private visibility, are request to join/invite only/closed to new memberships. When a group is set to Private visibility, the group also cannot be represented in user profiles/nameplates and can never create Group Public instances, and are not indexed in group search for the purposes of “advertising themselves publicly”.
From my experience, before the View Reports button was removed on June 22, 2026, Trust & Safety does a good job of filtering the malicious/bad faith reporting for provocative avatars/avatar gallery photos from private spaces (mainly Group members/Group+) where provocative behavior or content among consenting adults may or may not be encountered, as long as the group lists the plausibility that participants may or may not encounter provocative activities or content in there.
As far as I understand the review process from blackbox testing, and from reports of my own (Open Reports/Closed Reports, the account status of the reported user, and the number of moderation notifications received correlated with a Closed Report), VRChat seems to get information from an in-app report which type of instance the report came from, seem to be likely to review the group status (public/private), instance type (public/private) and group rules. This seems to combat bad faith reporting of avatars with provocative content in private spaces to some extent.
There’s also some nuance: Creator Guidelines also state uploaded image content (gallery contents: icons, prints, photos, custom emojis) should be “safe for work” and not contain any inflammatory or suggestive content. Where avatars containing inflammatory content may contain some of this content in private instances among consenting adults, image content usually may not. The URLs for uploaded image content are publicly accessible for technical reasons (IIRC) to anyone without any requirements.
I would personally also avoid inflammatory behaviors or content in public and Friends+. Keep it PG-13 there, and be mindful if anyone can join at any time or if a non-consenting party may be surprised when joining.
In the event someone would get banned for avatars with inflammatory content in a private instance for verified 18+ consenting adults, that’s often an easy and fast appeal to Trust & Safety by stating said private avatar was only used in private spaces among consenting adults (misidentification or a bad faith report, acting within the Community Guidelines/Creator Guidelines), or by understanding the error made and making clear commitments with a plea to follow the Community Guidelines / Creator Guidelines in the future and by demonstrating to prevent the violation from happening again.
Inflammatory public content will nearly always get acted upon quickly once reported.
Lastly, content should still be tagged with content warnings for the ability to filter said content voluntarily - even among adults. Consent is important.