Sextortion

Sextortion: What to Do in the First 24 Hours

You have received a threat to distribute intimate content unless you pay. The next 24 hours matter more than anything that follows. This guide gives you a clear, ordered action plan.

Quick answer

What is the most important thing to do when sextortion begins?

Do not pay and do not respond to the threat. Every action you take in the first 24 hours either increases or reduces your long-term exposure. Payment increases it by confirming compliance. Negotiation increases it by maintaining the channel. Silence, documentation, blocking, and reporting decrease it by removing the scammer's leverage and creating a record that supports law enforcement action.

This feels counterintuitive when someone holds something deeply personal over you. The instinct to resolve the threat quickly by paying is understandable — and it is exactly what the scammer depends on. The data from thousands of sextortion cases is consistent: victims who pay face more demands; victims who block and report face either silence or a brief escalation that then stops.

The 24-Hour Action Plan

  1. Do not pay — not now, not ever. This is the single most important decision. Payment does not end sextortion; it begins an escalating series of demands. Once you have paid, the scammer knows you will pay again and the amounts increase.
  2. Do not delete anything yet. Your instinct will be to delete the conversation, the profile, and every trace of the contact. Do not. Every message, photo, threat, and payment demand is evidence. You will need this for reporting.
  3. Screenshot and document everything. Capture the scammer's profile, every threatening message, the payment demand and method, any account names, phone numbers, or email addresses they used, and any names they threatened to contact.
  4. Block simultaneously on all channels. Block the scammer on every platform they have contacted you through at the same time. If they contact you from a new number or account, block that too without responding.
  5. Report to your national cybercrime agency. US: ic3.gov. UK: actionfraud.police.uk. Australia: cyber.gov.au/report. Canada: antifraudcentre-centreantifraude.ca. Submit all the documentation you collected in step 3.
  6. Report the account to the platform. Dating apps, social media platforms, and messaging services all have fraud and blackmail reporting mechanisms. A reported account can be suspended, cutting off the scammer's ability to reach other victims from the same profile.
  7. Tell one trusted person. You do not need to tell everyone. But tell someone. Isolation is the scammer's weapon. Breaking it is yours.
  8. Protect your social accounts temporarily. Set social media profiles to private. This does not hide existing content the scammer may have, but it limits their ability to identify and contact additional people in your network.

After 24 Hours: What to Expect

The scammer will likely attempt to re-establish contact through a secondary account or phone number within the first 24 to 48 hours of being blocked. Block these without responding. They may also send a message to one person in your contact list as a demonstration of intent. This is the peak of the intimidation campaign for most cases. After this escalation — if met with no payment and no response — the majority of sextortion cases go quiet within one to two weeks.

If you need to identify who is behind the persona — for a civil claim, to support a police investigation, or for your own peace of mind — AllRussian can investigate the identity, phone number, and contact methods used in the scam.

Investigate the Scammer's Identity