Sextortion: What to Do in the First 24 Hours
If you’re reading this mid-crisis, here is the whole article in one line: do not pay, do not send more, screenshot everything, report, and tell one person. The panic you’re feeling is the product — it was manufactured on purpose, on a schedule, by someone who does this all day. The playbook below takes the schedule away from them.
How the trap is built
Sextortion is a script, and it moves fast on purpose. A new match or follower gets flirty quickly — often within hours — and pushes to trade private photos, usually being the first to send some (theirs are stock or generated). The moment yours arrive, the persona drops and the threats start: pay, or the images go to your family, your school, your employer, that neat list of your followers they screenshotted earlier. There is a countdown. There is always a countdown, because the deadline is what stops people thinking.
Two things to understand about the person on the other end. First, it is almost never personal — you were one of hundreds of simultaneous chats run from a call-centre-style operation. Second, their business model depends on volume, not follow-through: actually distributing images earns them nothing and burns the account they need for the next hundred targets. None of that makes the threat feel smaller at 2am. It is, however, why the playbook works.
The rules, in order
- 1. Do not pay. Not once, not “just to make it stop”. Paying does not buy deletion; it buys you a flag in their notes that says this one pays. The demands continue and often escalate. The FBI is unambiguous on this point, and so is every child-safety agency: payment invites more demands, not fewer.
- 2. Stop the conversation, keep the evidence. Before you block: screenshot the profile, the usernames, the chat, and any payment details they sent. You are not going to reread these — they’re for the reports, and the account will vanish once you stop responding.
- 3. Do not delete your own accounts. Going dark feels safer, but it destroys evidence trails and doesn’t stop anything. Lock accounts down to private instead.
- 4. Report to the platform, then block. Every major app has a dedicated report path for this; sextortion accounts get removed quickly because platforms are under real pressure about exactly this crime. Reporting also protects the next hundred people on their list.
- 5. Use the image-blocking tools — they actually work. If you are (or were in the images) under 18: Take It Down, run by NCMEC, creates a fingerprint of the image on your device — the image itself is never uploaded — and participating platforms use it to block the content from being posted. Adults: StopNCII.org does the same across its partner platforms.
- 6. Report it to the authorities. In the US: ic3.gov (FBI), and for anyone under 18 the NCMEC CyberTipline. In the UK: Action Fraud or CEOP for under-18s. Elsewhere, your national cybercrime unit takes these reports. You will not be in trouble — including if you’re a teenager who sent images. Investigators have seen ten thousand of these; yours will not shock them.
- 7. Tell one human being. A friend, a parent, anyone. Sextortion’s entire power source is the gap between you and everyone you know — the whole threat is built on the assumption that exposure would be unsurvivable, and that assumption never survives contact with one person who is on your side.
How common this is, and why that matters tonight
The threat only works because the target believes they are alone with it. They are not, and the numbers are worth knowing before you need them. The FBI’s Internet Crime Complaint Center received more than 75,000 sextortion reports in 2025, of which more than 5,700 involved minors and were referred to the National Center for Missing & Exploited Children. Those are the people who reported. The real figure is higher, for the obvious reason.
What follows from that scale is the single most useful fact on this page: this is an industry, not a person who is interested in you. The account working you is running the same script on dozens of people simultaneously, from a template, often from an organised operation. It has no particular investment in humiliating you — it wants a payment, and it will move on to a more responsive target the moment you stop being one. The threats feel personal because they are written to. They are not.
What actually happens if you don’t pay
Almost everyone facing this is running one catastrophic scenario on a loop at 3am, so it is worth stating what the pattern usually looks like in practice. In the overwhelming majority of cases the threatened mass-send does not happen. Distribution costs the operator effort and yields nothing — their leverage lives entirely in the threat, and it evaporates the moment the material is out. Paying, by contrast, is the one action that reliably produces more demands: it proves you can pay and that the pressure works, and it moves you onto a list of people for whom it worked.
This is not a guarantee, and nobody honest will give you one. It is why the guidance from every agency that handles this converges on the same instruction — do not pay, do not send more, report it — and why the practical steps below are about removing leverage rather than negotiating over it.
If you’re a parent or friend being told
The only wrong response is the lecture. Someone disclosing sextortion is handing you the thing the scammer said would end their world; if the reaction confirms the scammer’s framing, the next kid pays instead of telling.
If you are the one handling the practical side, evidence is what gets lost in the first hour. Step two above is the version to do tonight; screenshots taken in a panic tend to miss the usernames, timestamps and payment handles that make them useful to anyone later. Helping Survivors publishes a longer parent’s checklist for documenting sextortion — what to capture, and how to keep a timeline as it develops. Worth knowing before you click: it is a legal-services site affiliated with the law firm Milberg PLLC and it advertises representation, so work the reporting routes above first. Nothing on it replaces Take It Down, StopNCII, or a report to law enforcement.
Watch for the aftermath, too. The financial part usually resolves within days; the shame does not keep the same schedule. If you notice withdrawal, secrecy about devices, or talk that frightens you, treat it as seriously as you would any other crisis and get real support involved. In the US, the 988 Suicide & Crisis Lifeline is free and 24/7 — call or text 988.
Prevention, without the paranoia
The honest version of prevention is boundaries plus verification, not abstinence lectures. Never send intimate images to someone you haven’t verified as a real, live human — and verification in 2026 means an interactive video call, not a voice note or a photo holding today’s date. Be suspicious of anyone who escalates to trading pictures within hours of matching; that speed is the tell, and it’s the same faster-than-knowledge pressure that powers love bombing and every romance scam. And know that accounts get compromised: an image sent to a real partner can still leak through their account, which is why the blocking tools above exist for everyone, not just scam victims.
Sources
- Sextortion — FBI — the never-pay guidance and reporting paths
- Internet Crime Report 2025 — FBI Internet Crime Complaint Center — 75,000+ sextortion reports in 2025; 5,700+ involving minors
- Take It Down — National Center for Missing & Exploited Children — free hash-based blocking, under-18s
- StopNCII.org — SWGfL / Revenge Porn Helpline — the same service for adults; images never leave your device
- 988 Suicide & Crisis Lifeline — US — free and confidential, 24/7
- Helping Survivors — Documenting sextortion: a parent's checklist — Affiliated with the law firm Milberg PLLC — evidence-preservation steps for parents; the page also advertises legal representation
This page is practical safety information, not legal advice or counselling — and if the situation involves any risk to your safety, contact local emergency services first. The game’s Sextortion Bait chip exists so the pattern is familiar before it ever matters: one run costs nothing.
Keep reading
- You sent money to a scammer: what to do now — the first hour, reporting by payment rail, honest recovery odds, and the second scam that follows the first.
- Anatomy of a romance scam — the industrial script beat by beat, and the money rules that beat every variant.
- AI dating scams: deepfakes, voice clones and chatbot matches — the verification moves that still work when reverse-image search doesn't.
- First-date safety without the paranoia — the seatbelt checklist: verify, venue, transport, check-in, exit scripts.