FaceSift

Sextortion: What to Do If Someone Threatens to Leak Your Photos

·10 min read

If someone is threatening to share intimate images or videos of you unless you pay or comply with a demand, the fear you feel right now is the entire point of the scheme — it is designed to make you act before you think. You are not the first person this has happened to, this is not your fault, and there is a clear, well-tested set of steps that works.

This guide covers what sextortion is and how it usually starts, why paying makes things worse rather than better, exactly what to do in the first hour, where to report it, and how to get ahead of material before — or after — it spreads.

Do these before anything else:

Do not pay, and do not send any more images
Do not delete the conversation or your accounts
Screenshot the full conversation and any payment demands
Submit the image to StopNCII.org (18+) or Take It Down (under 18) now
Block the account only after you have your evidence
Tell a trusted person — do not deal with this alone
If a minor is involved anywhere, contact NCMEC's CyberTipline immediately
01

How Sextortion Usually Starts

Sextortion is when someone threatens to share intimate images or videos of you unless you pay money, send more images, or do something else they demand. It happens to people of every age and gender, and it almost always follows one of a small number of scripts. Recognising the pattern helps you see that this is a known criminal scheme being run on you — not a unique personal failure.

A new online relationship escalates fast

Someone you met recently on a dating app, Instagram, or Snapchat builds intimacy quickly, then encourages or pressures you into sending intimate photos or video — sometimes on a call that they secretly record. Once they have material, the relationship persona disappears and the threats begin.

A hacked or compromised account

Malware, a phishing link, or a reused password gives someone access to photos already stored on your device or in cloud backups — no explicit content had to be sent by you at all. They contact you claiming to have found this material and demand payment to not release it.

AI-generated or 'nudified' images

Ordinary, fully clothed photos from your public social media are run through an AI tool that generates a fake explicit image. The threat is built entirely on fabricated content, but the panic and the demand are identical to a real-photo case. Being able to prove an image is fake matters here — see our guide on spotting AI-generated faces.

A webcam or video call is secretly recorded

During a video call — often on an adult site, but sometimes a normal dating app call — the other person is recording without your knowledge and later sends you a clip along with a payment demand.

02

Do Not Pay, and Do Not Send More

This is the single most important thing in this guide. Paying does not make the threat go away — it confirms to the extortionist that you will pay, which is followed almost every time by a second, larger demand. The same is true of sending additional images to try to appease them, or agreeing to a video call to 'prove' something.

Payment marks you as a repeat target

Extortionists often run dozens of victims simultaneously using scripts. A victim who pays once is flagged internally as compliant and re-targeted with escalating demands. Cases where a victim pays five or six times before the material is leaked anyway are common — payment provides no guarantee.

The threat to 'leak to your contacts' is designed to panic you

Scammers frequently claim to have already messaged your friends, family, or employer, or threaten to within minutes. In the overwhelming majority of cases this is a bluff intended to force a fast, panicked payment before you have time to think or seek help.

There is no way to verify they will stop

Nothing prevents the extortionist from releasing the material after being paid, or from returning weeks later with a new account and a new demand. The only way to actually end the leverage they hold over you is to remove the threat's power — by reporting, documenting, and getting ahead of the material with hash-blocking tools — not by paying for a promise a criminal has no reason to keep.

03

What to Do in the First Hour

Do not respond to the threat itself

Do not argue, plead, negotiate, or explain your situation. Anything you say can be used to refine the pressure applied to you. If you need to buy time while you gather help, a single neutral message such as 'I need some time to get the money together' is the only reply worth sending — and only if you need a short window to act on the steps below.

Screenshot everything before you block

Capture the full conversation, the profile or account used to contact you, any images or video sent to you, and any payment details (crypto wallet address, gift card instructions, payment app handle). This is your evidence for reporting — do not delete the conversation or the account's messages.

Do not delete your own accounts or the images

It is tempting to delete everything to make the situation disappear. Do not — deleting removes the evidence trail platforms and law enforcement need to act, and it does nothing to stop material that has already been sent to the extortionist.

Submit to StopNCII or Take It Down immediately

Do this before anything is posted, not after. Both services hash the image on your device and share only the fingerprint with partner platforms — the actual image is never uploaded anywhere. See the full resource list below for the difference between the two.

Cut off contact after documenting

Once you have your screenshots, block the account across every platform where it has contacted you. Continued contact only gives the extortionist more material to work with and prolongs the psychological pressure.

Tell someone

A trusted friend, family member, or — if you are a minor — a parent, school counsellor, or teacher. Sextortion relies on shame and isolation to work. Involving someone else breaks that isolation immediately and gives you support for the reporting steps ahead.

04

Where to Report It

Reporting is not a last resort — it is one of the most effective steps you can take, and the tools below are built specifically for this. Use the ones that apply to your situation; several can be used at the same time.

StopNCII.org

Adults (18+)

A hash-matching service backed by Meta and the Revenge Porn Helpline. You submit the intimate image from your own device — it never leaves your device or gets uploaded anywhere. A digital fingerprint (hash) is created and shared with partner platforms (Facebook, Instagram, TikTok, Bumble, OnlyFans, Reddit, Pornhub, and others), which then block that exact image from being uploaded on their services.

Tip:Do this even if nothing has been posted yet. It works proactively — submit any image you are worried about being leaked, before it is leaked.

Take It Down (NCMEC)

Anyone under 18, or images taken before you turned 18

Run by the National Center for Missing & Exploited Children at takeitdown.ncmec.org. Works the same way as StopNCII — on-device hashing, no upload of the actual image — but is specifically designed for minors and partners with a wider set of platforms that host this kind of content.

Tip:If a minor is involved anywhere in this situation — as the victim or as the person depicted — this is child sexual abuse material under the law. Contact NCMEC's CyberTipline (1-800-843-5678 or CyberTipline.org) immediately in addition to using this tool.

Platform report tools

Everyone

Instagram, Snapchat, TikTok, and Facebook each have a dedicated report category for 'nudity or sexual content involving me' or 'threatening to share my private images' — separate from the generic abuse report. These go to a specialised trust and safety queue rather than the general moderation pool.

Tip:Report the account before you block it. Blocking first can prevent the platform from being able to see the threatening messages tied to that account when you file the report.

FBI IC3 / local police

Adults facing extortion or financial demands

Sextortion is extortion — a crime — regardless of whether explicit images exist yet. File a report at ic3.gov (FBI Internet Crime Complaint Center) and with your local police department. Bring your documentation: screenshots, usernames, payment demands, any wallet addresses or payment handles given to you.

Tip:Law enforcement has seen this exact scheme thousands of times. You will not be the one in trouble, and you do not need to have paid anything for a report to be valid.
05

If Images Have Already Been Posted

Material being posted feels like the worst-case scenario has arrived, but it is still very much a solvable situation. Platforms are legally and contractually obligated to remove non-consensual intimate imagery, and most respond quickly once a report is categorised correctly.

Report it as non-consensual intimate imagery, not generic content

Every major platform has a specific reporting category for this — using it routes your report to a specialised team instead of the general moderation queue, which is dramatically faster.

Submit the exact URL to StopNCII or Take It Down as well

Even after content is posted, hash-matching prevents the same file from being re-uploaded elsewhere after the first copy is removed — which is common, since these images are often mirrored across multiple sites.

Use Google's 'Results about you' tool to de-index it from search

At myaccount.google.com you can request removal of search results showing the content, which limits how easily it can be found even while platform takedowns are still in progress.

File a police report and keep your case number

Non-consensual intimate imagery is a specific criminal offence in most US states, the UK, and much of the EU. A police report creates a paper trail that strengthens every other removal request you file.

06

Finding Out Who Is Really Behind It

Sextortion frequently starts as a romance scam or catfish relationship that escalates once trust is established. The profile photo the extortionist used to build that relationship is often stolen from someone else entirely — which matters both for your own understanding of what happened and for the report you file with platforms and law enforcement.

Run their profile photo through a reverse face search: Upload the photo they used to FaceSift to check whether that face appears elsewhere online under a different name. A stolen identity is strong supporting evidence for your report — it confirms the account was built on deception from the start, which is useful context for platform trust and safety teams and for law enforcement. See our guide on spotting a fake profile for the wider pattern this usually follows.

07

Reducing the Risk Going Forward

None of this is about restricting your life or your relationships — it is about closing the specific gaps that sextortion schemes rely on.

  • Verify who you're talking to before sharing anything intimate. A quick reverse face search and a spontaneous video call catch the majority of fake profiles before any material has been shared. Do this early — before weeks of built-up trust make it feel unnecessary.
  • Cover your webcam when not in use. A simple physical cover defeats the malware-based recording scheme entirely, regardless of what software is compromised on your device.
  • Use unique passwords and two-factor authentication. A large share of 'we hacked your device' sextortion attempts are bluffs relying on a reused, previously breached password. Unique passwords and 2FA remove that leverage even if an old password leaks.
  • Assume anything sent digitally can be saved or forwarded. Disappearing-message features do not reliably prevent screenshots or screen recording. This is not a reason to avoid intimacy — it is context for deciding who you trust enough to share with.
  • Know the resources before you need them. Bookmark StopNCII.org and takeitdown.ncmec.org now. In an actual incident, having the next step already known removes one more source of panic.

Complete response checklist

  • 01Do not pay, negotiate, or send additional images
  • 02Do not delete the conversation, account, or images
  • 03Screenshot the full conversation, profile, and any payment demands
  • 04Submit the image to StopNCII.org (18+) or Take It Down (under 18)
  • 05If a minor is involved, contact NCMEC's CyberTipline (1-800-843-5678) immediately
  • 06Block the account only after documenting the evidence
  • 07Tell a trusted person — do not handle this alone
  • 08Report the account using the platform's dedicated non-consensual imagery category
  • 09If content is posted, submit the exact URL for takedown on each platform it appears
  • 10Use Google's 'Results about you' to de-index any posted content from search
  • 11File a report with ic3.gov (FBI) and your local police department
  • 12Run a reverse face search on their profile photo to check for a stolen identity
  • 13Cover your webcam, use unique passwords, and enable two-factor authentication going forward

Related guides

Check if their profile photo is stolen

Sextortion often begins with a fake identity. Upload their profile photo to FaceSift and find out where that face really appears online — evidence that can support your report.

Check a Profile Photo →