A message arrives claiming the sender has compromising images, video, or account access and will send it to your contacts, family, or employer unless you pay immediately. The shame and fear this triggers are the tools the scam relies on. Most email-based threats are entirely fabricated. The correct response in almost every case is to not pay, not respond, and report — not to comply.
If you are experiencing severe distress from a sextortion threat, please reach out for support. The 988 Suicide and Crisis Lifeline is available 24/7 by calling or texting 988. The Crisis Text Line is available by texting HOME to 741741. You are not alone, and this situation is manageable.
If a minor is involved in any way, report immediately to the NCMEC CyberTipline at missingkids.org or call 1-800-843-5678.
Sextortion is a form of online extortion in which a perpetrator threatens to distribute intimate, compromising, or sexually explicit images or information about a victim unless demands — usually for money or additional images — are met. It operates across two fundamentally different scenarios that require different responses, and correctly identifying which type you are facing is the most important first step.
The first and most common type is mass-distributed fabricated email sextortion. The sender claims to have hacked your device, recorded you through your webcam, and obtained intimate footage. They include a real password of yours — obtained from a publicly available data breach database — to make the claim seem credible. The recording does not exist. This is a numbers game: the same email is sent to millions of addresses, and a small percentage of recipients pay without verifying the claim.
The second type involves genuine material — images or video the perpetrator actually possesses, obtained through a prior relationship, a deceptive online interaction where the victim was manipulated into sharing content, or through hacking. This type requires immediate reporting to law enforcement and platform action, and the FBI’s IC3 has dedicated resources for exactly this situation.
You receive an email — often with one of your real passwords in the subject line — claiming the sender hacked your device, installed spyware through a compromised adult website, and has been recording you through your webcam. They claim to have a split-screen video of what you were watching alongside footage from your webcam. Payment is demanded in Bitcoin, typically $500 to $2,000, within 24–48 hours or the “recording” will be sent to your contact list. The password came from a breach database. The recording does not exist. This email is sent to millions of recipients simultaneously.
A scammer — often posing as an attractive person on a dating app, Instagram, or Snapchat — initiates contact, builds a relationship over days or weeks, and gradually guides the conversation toward sharing intimate images or video. Once material is received, the pretense ends and the demand begins: pay or the content will be sent to your contacts. This variant is particularly prevalent among teenage boys — organized criminal groups in West Africa and Southeast Asia specifically target this demographic with industrialized operations running hundreds of simultaneous deceptions. The FBI has documented numerous tragic outcomes among teenage victims who did not know help was available.
A perpetrator gains access to a victim’s email, social media, or cloud storage account and discovers intimate images stored there. They then contact the victim with proof of access and demand payment for the images’ deletion. Unlike the fabricated email scam, this type involves genuinely compromised material. The correct response is the same — do not pay — but immediate account security actions (changing passwords, enabling 2FA, contacting the platform) are additionally urgent because the account access itself must be terminated.
An emerging variant uses AI tools to generate explicit deepfake images using publicly available photos of the victim — sourced from social media profiles — without any genuine intimate material having been shared or stolen. The perpetrator presents the AI-generated images as real and threatens distribution. This variant is documented with increasing frequency, particularly targeting minors whose social media photos are publicly accessible. The images are fabricated, but the extortion threat and the psychological harm are real.
Step 1: Do not pay. Step 2: Do not respond or engage further. Step 3: Preserve all evidence — screenshots, emails, account names, any payment addresses mentioned. Step 4: Report to the FBI at ic3.gov — include all evidence. Step 5: If a minor is involved, also report to NCMEC CyberTipline at missingkids.org immediately. Step 6: Contact the platform where the interaction occurred to report and remove the perpetrator’s account. Step 7: If you shared a real password, change it everywhere it was used and enable multi-factor authentication.
The real passwords that appear in sextortion emails come from data breaches — meaning your credentials are circulating in databases that criminals purchase. Identity theft protection services with dark web monitoring alert you when your credentials are found in breach databases, giving you the chance to act before the next threat arrives.
See Our Identity Theft Protection Rankings →The FBI has specifically elevated awareness about sextortion schemes targeting teenage boys, describing it as a crisis-level threat. Organized criminal groups — primarily operating from Nigeria and the Ivory Coast — run sophisticated, industrialized operations targeting minors through Instagram, Snapchat, and other platforms popular with teenagers. They pose as peers or attractive young women, build rapid rapport, obtain intimate images, and immediately pivot to extortion demands.
The psychological impact on teenage victims is severe. Young people who have shared intimate images and face the threat of exposure to parents, peers, and schools often experience acute distress. Parents whose children are targeted should know: the shame belongs to the criminal, not the child. The FBI and NCMEC both offer resources specifically for minors and their families, and law enforcement treats these cases with urgency. Immediate reporting dramatically improves outcomes.
If you are a parent reading this after discovering your child has been targeted: do not delete any evidence, do not pay any demand, contact the FBI immediately, and contact the NCMEC CyberTipline. If your child is in acute distress, contact 988 for crisis support. The situation is difficult but manageable with the right immediate steps.
The real passwords that appear in sextortion emails come from data breaches — meaning your credentials are circulating in databases that criminals purchase. Identity theft protection services with dark web monitoring alert you when your credentials are found in breach databases, giving you the chance to act before the next threat arrives.
