Online blackmail schemes lean on panic and shame to get fast cash from ordinary people. A stranger, or a new online friend, threatens to release private photos or webcam footage unless you pay. The sources behind this piece say paying rarely ends it. Knowing how these schemes unfold can help you slow down and get help before you send anything.

What sextortion and financial sextortion look like

Sextortion means threatening to share nude or explicit images. In the traditional version, the offender pressures the victim into sending more sexual imagery. In financial sextortion, the demand is for money or gift cards in exchange for keeping the images private. The archived ICE page repeats NCMEC's finding that as many as 79% of predators now seek money rather than more imagery.

The scale is large. NCMEC reported receiving more than 50,000 reports of financially motivated sextortion in 2025, about 137 a day. That is up from more than 36,000 in 2024. These are reports received, not a count of every incident.

One common path starts with a fake persona. The ICE page describes adult predators posing as young girls on gaming platforms, apps and social media, and targeting boys aged 14 to 17. In some schemes the predator secretly records an explicit video call. Then the predator reveals the recording and demands payment to keep it from being posted.

A phone lying face down on a kitchen table beside a mug and a notepad, with soft daylight from a window and hands resting calmly in the blurred background.
A phone set face down beside a mug and notepad. Stepping away from the screen is a reasonable first move before deciding anything.

Warning signs and red flags

The pattern is fairly consistent. NCMEC says offenders often move a conversation quickly to private messaging and encrypted apps. That makes cases harder to detect and connect. If a new contact pushes you off a public platform within minutes, treat it as a flag.

The other sign is the demand itself. Threats to post images or recordings unless you pay or send more explicit material are the core of the scheme. So is a request for money or gift cards in exchange for silence. Blackmailers also tend to push speed, because a rushed victim has less time to ask anyone for advice.

Account takeover adds a second route. The FBI says some actors steal explicit content from social media and personal accounts, then post or sell it on criminal marketplaces. The listings can include the victim's name, date of birth, email, phone number and username. Victims of stolen content often face further harassment, sextortion, stalking or targeted attacks.

  • Texts saying your account will be disabled unless you share a verification code.
  • Emails about a "new login" with a link to change your password.
  • Requests to move to private or encrypted messaging.

How account takeovers and content theft work

According to the FBI Internet Crime Complaint Center, attackers make high-volume password and PIN attempts using curated lists. Another trick is a text claiming your account will be locked unless you hand over a verification code. The attacker then requests a password reset, which sends a code to you. Give up that code and the attacker is in.

Phishing works the same way. Emails imitate social media support, use look-alike domains and show a "new login" alert with a link to change your password. Once you click and enter details, the attacker has access. From there, stored photos and message histories are exposed.

The FBI also warns about a group called The Com. Its members typically range from 11 to 25 years old, and many are minors. The FBI says they engage in extortion and sextortion of minors, and recruit through gaming sites and social media based on shared interests or through other members.

What to do if you are targeted

NCMEC advises that paying or cooperating rarely stops blackmail. It also says victims should get help before deciding whether to pay or comply. These problems can be very complex, so NCMEC recommends involving adults or professionals.

NCMEC can help get explicit images removed. You can notify companies directly, or report to the CyberTipline at cybertipline.org for help with the process. Take It Down is a free NCMEC-linked option for removing explicit images from the internet. For support, NCMEC lists [email protected] and 1-800-THE-LOST.

One statistic is easy to misread. In public sextortion reports where the relationship to the victim was known, 94% came from the child victim or their parent. That describes who filed the report. It says nothing about who made first contact. It does suggest that reaching out is what most reporting families did.

Be wary of anyone who offers to fix this for a fee. Paid services that promise guaranteed removal deserve skepticism, and the FTC has a page on avoiding deceptive sextortion assistance services. Check it for its current advice.

Protecting your accounts

The FBI's tips for guarding against stolen content are basic and worth doing. Avoid storing sensitive images or videos on social media or other internet-accessible sites. Use unique, complex passphrases and PINs, plus multi-factor authentication. Skip passwords based on your name, birthday or other personal details.

Do not click embedded links in emails or texts. Go directly to the website to deal with an account concern. You can also view an email on a computer and hover over a link to check the URL. The FTC's page on online privacy and security covers general habits.

Some questions are not answered by the sources used here. They do not explain how to report to the FBI's IC3 or local police, or what evidence to keep. They do not say what to do if you have already paid, or whether a bank or card issuer can help. They also do not separate out protections for adult victims. If any of those apply to you, ask NCMEC, your local police or a legal professional. The FTC also has a page on image-based abuse.