Skip to content
Extortion

Sextortion: they have intimate images and are demanding money

Someone you trusted online is threatening to send private images to your family and followers unless you pay. Do not pay — payment escalates. There is a path through this, and you are not walking it alone.

By Bob Vasic Published 4 min read

Sextortion: they have intimate images and are demanding money — Response Red advisory illustration

The essentials

  • Do not pay. Payment marks you as someone who pays — demands escalate and continue; refusal, statistically, is what makes them move on.
  • Stop responding, but do not delete the conversation — it is the evidence for every takedown and report that follows.
  • Hash-blocking services (StopNCII for adults; NCMEC's Take It Down for anyone under 18) can prevent images from being posted on major platforms without you ever sharing the images themselves.
  • This is industrialized crime run from scripts against thousands of targets at once — nothing about it is personal, and the operator's only lever is your silence.
  • If the target is a minor: a trusted adult and an immediate report (NCMEC / local police). The law protects the victim, and there is no trouble waiting for them — only help.

The script is always the same: a fast-moving online relationship, an exchange of images, then the pivot — screenshots of your follower list, a countdown, a payment demand. The terror is engineered; the operator has run this exact sequence hundreds of times this month.

Here is what they know that you don't yet: their business only works on victims who pay or stay silent. The moment you stop engaging and start reporting, you become unprofitable — and in the overwhelming majority of cases, they simply move to the next target.

Do this now

  1. Stop responding, stop paying. No more replies, no negotiation, no "final" payments. Every response and every dollar extends the extortion; silence and refusal end most of them.
  2. Preserve everything. Screenshots of the profile, the chat, the demands, usernames, and payment addresses. Do not delete the thread, however much you want to.
  3. Lock down your accounts. Set profiles private, tighten friend lists, and secure your email and socials with strong passwords and MFA — it limits both the leverage and the audience.
  4. Use the hash-blocking tools. StopNCII.org (adults) and Take It Down (minors) let you block images from major platforms by fingerprint — the images never leave your device. Report the account to the platform as well.
  5. Report to law enforcement. Police or IC3, with your preserved evidence. These cases are pursued, operators are arrested, and your report joins a pattern that helps take networks down.
  6. Tell one person. A friend, a sibling, a counselor — one trusted person breaks the isolation the scheme depends on. If the target is under 18, that person is a parent or trusted adult, and the report happens today.

What not to do

  • Do not pay — not once, not "just this time"; it reliably escalates the demands.
  • Do not comply with demands for more images; that deepens the leverage.
  • Do not delete the evidence in panic or shame.
  • Do not face it alone — isolation is the operator's whole strategy.
  • Do not harm yourself over this. It feels world-ending and it is not — it passes, it is handleable, and people come through it. If the thoughts get dark, contact a crisis line now (988 in the US).

Preserve the evidence

Whatever else happens, these are the artifacts the investigation — and any insurance claim, dispute, or prosecution — will be built from:

  • Profile screenshots, usernames, and URLs before the account vanishes.
  • The full chat including demands and payment details.
  • Payment addresses or handles they provided.
  • Timestamps of first contact, the pivot, and each demand.

Keep a clear head

The panic you feel was manufactured on purpose — the countdown, the follower screenshots, the escalating messages are a pressure script, not a preview of your future. In the great majority of refused cases, nothing is ever sent: distributing images earns the operator nothing once you are clearly not paying.

And if the worst happens anyway: it is survivable, takedown paths exist, and the shame belongs entirely to the criminal. The people who love you will see a person who was targeted by a professional predator — because that is what happened.

Questions victims ask

If I refuse to pay, will they actually send the images?

Usually not. Sending earns them nothing and costs them time better spent on the next thousand targets — the threat is the product, not the follow-through. It cannot be promised in every case, which is why takedown tools and reports run in parallel with refusal.

What if the images do get posted?

Immediate platform reporting plus hash-blocking gets non-consensual intimate imagery removed quickly on major services — it violates every mainstream platform's rules. It is a horrible day, not a permanent state, and the responses that matter are mechanical: report, block, document, and lean on your person.

This is happening to someone under 18. What is different?

Everything moves faster and with more protection: tell a parent or trusted adult now, report to NCMEC's CyberTipline or local police immediately, and use Take It Down. The minor is a victim in every legal sense — including of the images' existence — and the system is built to protect, not punish, them.

When the first hour is over, we take it from there.

Scoping, containment, forensics, and recovery — expert-led and evidence-safe, with AI removing the waiting. Engage a responder or talk to us about readiness.

Report an IncidentRequest Response