Sextortion

Sextortion Involving Russian and Ukrainian Women: What to Know

A person presenting as an attractive Russian or Ukrainian woman engages you in an intimate online conversation, obtains compromising images or video, then demands money to keep them private. This is sextortion — and it follows a precise operational script.

Quick answer

How does sextortion using a Russian or Ukrainian persona work?

Sextortion with an Eastern European persona typically begins on a dating platform, social media, or messaging app. The scammer — usually operating from West Africa, Southeast Asia, or a scam compound — uses photos of an attractive Russian or Ukrainian woman and builds a warm, flirtatious relationship over days or weeks. The conversation is gradually steered toward exchanging intimate photos or video.

Once the victim has shared material, or has been recorded during a video call without their knowledge, the threat is delivered: pay or the content is sent to your contacts. The scammer typically has already harvested your Facebook friends list, LinkedIn connections, or contact list. The payment demand is usually modest initially — designed to feel manageable — and escalates with each compliance.

The Sextortion Playbook Step by Step

  1. Platform contact. Initial contact on a dating app, Instagram, Facebook, or via a WhatsApp message from an unknown number claiming to have the wrong contact. The profile features attractive photos of a Russian or Ukrainian woman.
  2. Relationship building. Warm, flirtatious daily contact. The persona is attentive, complimentary, and moves quickly toward intimate communication. There is no request for money at this stage.
  3. Intimate escalation. The conversation is steered toward exchanging photos or video calls. If the victim is reluctant, the scammer shares intimate content of the persona first to normalise the exchange.
  4. Recording or content acquisition. The victim either sends intimate material directly, or is recorded during a video call using screen-capture software without their knowledge.
  5. The threat. Within hours of obtaining material, the scammer reveals they have the content and threatens to send it to the victim's contacts — which they have already identified from public social media.
  6. The demand. An initial payment is demanded, typically $200 to $500, framed as a one-time fee. Payment almost always leads to a second, larger demand.

Do Not Do This

  • Do not pay — payment signals compliance and generates larger demands
  • Do not send more content — this gives the scammer additional leverage
  • Do not engage in extended negotiation — it prolongs exposure
  • Do not delete evidence before reporting — law enforcement needs the records
  • Do not contact the scammer from a secondary account — they track this

Do This Instead

  • Screenshot all threats, profiles, and payment demands
  • Block the scammer on all platforms immediately
  • Report to FBI IC3 (ic3.gov), Action Fraud, or your national cybercrime unit
  • Report the account to the platform — include the screenshots
  • Tell a trusted person — isolation is what the scammer depends on
  • Commission a profile identity check if you need to identify who is behind the persona