Sextortion Scams: Online Blackmail & Extortion
Sextortion scams are a form of online blackmail where criminals contact victims claiming to possess explicit photos or videos and threaten to share them with the victim's contacts unless a ransom is paid. The scam typically begins with an unsolicited email or message that appears personalized, often including a real password the victim has used elsewhere, which creates a false sense that the scammer has actual evidence. According to the FBI's 2023 Internet Crime Complaint Center (IC3) report, sextortion complaints increased by 218% year-over-year, with victims losing an average of $10,000 per incident. The scammers exploit fundamental fears about privacy, reputation damage, and social humiliation to create urgency and compel victims to pay within hours or days. In reality, the vast majority of sextortion demands are completely fabricated—the scammers have no actual intimate content—but their psychological manipulation is devastatingly effective. Victims range from teenagers to senior citizens, though reports indicate the median age of victims is increasing as scammers expand their targeting. The operational mechanics of sextortion have evolved significantly since the scams first emerged around 2018. Early iterations relied on mass email campaigns with generic threats, but modern sextortion operators use sophisticated social engineering tactics, including creating fake social media profiles, conducting reconnaissance on LinkedIn and Facebook to personalize messages, and leveraging data from previous breaches. Victims often feel trapped because they fear reporting the scam to authorities or their families, allowing the emotional manipulation to take hold before rational decision-making can occur. Payment methods have shifted from Bitcoin to gift cards, wire transfers, and cryptocurrency mixers that make victim recovery nearly impossible. The financial impact extends beyond direct losses—victims report significant psychological trauma, including anxiety, depression, and in severe cases, suicide. Organizations like the National Center for Missing and Exploited Children (NCMEC) have documented cases where victims' desperation led to self-harm, making this not just a financial crime but a serious threat to public safety.
Common Tactics
- • Sending personalized emails containing a real password obtained from data breaches (like LinkedIn, Equifax, or Zoom leaks) to establish credibility and suggest the scammer has hacking access to the victim's computer.
- • Creating fake social media profiles with stolen photos to build rapport through romance or relationship scenarios before transitioning to extortion threats, particularly targeting vulnerable individuals.
- • Demanding payment in cryptocurrency, gift cards (iTunes, Google Play, Amazon), or wire transfers to accounts in foreign countries, making it nearly impossible for law enforcement to recover funds.
- • Setting artificial tight deadlines (24-48 hours) and threatening to send fabricated evidence to the victim's entire contact list, employer, family members, or post it on adult websites if payment isn't made.
- • Using intimidation tactics including victim doxxing (publishing personal information), threatening to contact employers, or fabricating screenshots of the victim's social media activity to increase psychological pressure.
- • Following up with secondary extortion attempts if the victim pays once, as scammers add them to victim lists and continue demanding additional payments or threaten to expose the payment itself as evidence of guilt.
How to Identify
- You receive an unsolicited email or message containing a real password you've used, combined with accusations of having intimate videos or screenshots of your browsing activity.
- The message demands payment in cryptocurrency, gift cards, or wire transfers within 24-48 hours and threatens to share content with your contacts, employer, or post it publicly.
- The sender claims to have accessed your webcam or computer through malware, but you haven't visited suspicious sites and your device shows no signs of compromise.
- A social media profile reaches out with romantic or friendly interest before suddenly shifting to accusations and threats of exposure after building trust.
- The message includes vague references to intimate activity or claims about your browsing history but provides no actual evidence, screenshots, or video files despite threatening to release them.
- You notice the communication style is generic with slight personalization (your email or name inserted into a template), or language is poor and uses urgency tactics typical of mass scam campaigns.
How to Protect Yourself
- Never respond to sextortion messages or acknowledge the threat—silence is the best response. Replying confirms your email is active, increases the chance of follow-up extortion, and can escalate the situation.
- Change your passwords immediately for all accounts, especially those that may have been exposed in data breaches. Use a password manager and enable two-factor authentication on critical accounts like email and banking.
- Report the sextortion email to the FBI's Internet Crime Complaint Center (IC3.gov), your local law enforcement, and the CyberTipline (cybertipline.org). Document all messages, screenshots, and metadata for investigators.
- Block the sender's email address and any associated social media profiles, then forward the message to your email provider's abuse team and the platform where contact occurred for removal.
Where to Report — United States
Official channels in your region for reporting this scam.
CFPB Consumer Complaint
Financial RegulatorFor bank, credit card, loan, and payment-related fraud.
AARP Fraud Watch Helpline
HotlineFree helpline for victims of any age (English/Spanish).
Think you encountered this scam?
How to cite this guide
Use this when referencing ScamLens content in articles, research, AI responses, or social media.
According to ScamLens (scamlens.org), sextortion scams: online blackmail & extortion is described at https://scamlens.org/en/encyclopedia/online-blackmail.