Doxxing Extortion Scam on Telegram
How extortionists use Telegram's anonymity and disappearing-message tools to threaten victims with the publication of private personal information unless a ransom is paid.
Part of: Doxxing Extortion Scam
Last reviewed: 13 July 2026
Telegram's combination of anonymous usernames, disappearing messages, and large public channels makes it a common venue for doxxing extortion. A scammer who has obtained — or claims to have obtained — a victim's home address, workplace, phone number, or family details contacts them through a Telegram account with no identifying information and threatens to publish the data in a public doxxing channel or send it directly to the victim's contacts unless payment is made.
Telegram channels dedicated to doxxing and 'exposing' individuals are unfortunately well established, giving the threat added weight because the extortionist can point to a real audience where the information would be posted. Because Telegram accounts can be created and abandoned instantly and usernames reveal nothing about identity, tracing the person behind the threat is difficult without law enforcement involvement.
How this scam works on Telegram
The extortionist messages the victim directly on Telegram, sometimes after finding contact details through a data breach, social media scraping, or a prior online dispute, and shares a partial piece of personal information as proof — a home address, phone number, or workplace — to demonstrate the threat is credible.
A payment demand follows, typically in cryptocurrency given Telegram's crypto-friendly user base, with a deadline before the extortionist claims they will post the remaining information to a public doxxing channel or forward it to the victim's family, employer, or online community. Some scammers create a decoy channel or post a censored preview to increase pressure.
As with other extortion formats, paying does not reliably end the threat; some victims report repeat demands once a first payment establishes they are willing to pay, and the account may simply go silent or block the victim without ever intending to publish anything in the first place.
Common red flags
- An anonymous Telegram account contacts you with personal information and a threat to publish more
- A partial 'proof' of your address, phone number, or workplace is shared to establish credibility
- Payment is demanded in cryptocurrency with a short deadline before information is allegedly posted
- The extortionist references a specific doxxing or exposure channel where the material will supposedly go
- The account has no message history, a generic or randomly generated username, and no public profile
- Demands increase or repeat after an initial payment is made
How to protect yourself
- Do not pay — there is no reliable way to confirm the threat will stop, and payment can invite repeat demands
- Screenshot the conversation, the Telegram username/ID, and any 'proof' shared before blocking the account
- Report the account to Telegram directly, which has a reporting mechanism for harassment and extortion
- Tighten your own privacy settings across social media and consider a data-removal service to reduce publicly scraped information
- Alert close family or your employer proactively if sensitive information (like your address) may already be exposed
- Contact local police, especially if the threat includes any indication of physical danger
How to report it
- Report the account and conversation directly within Telegram using the app's built-in report tool
- File a report with your national cybercrime or fraud reporting body (e.g., IC3, Action Fraud, ACSC)
- Report to local police, particularly if the threat suggests any risk to your physical safety
Frequently asked questions
Can Telegram trace who is behind the anonymous account?
Telegram does not publicly reveal user identities, but it can act on reports by suspending accounts and, in serious cases involving law enforcement requests, may assist investigations. Reporting the account is still worthwhile even without an immediate identity reveal.
Should I pay just to stop the immediate stress?
It's understandable to want the threat to end quickly, but paying rarely guarantees it will. Many extortionists on Telegram treat a first payment as confirmation you'll pay again rather than as a resolution.
What if the information they have is already publicly available somewhere?
Even information gathered from public sources can be weaponised through doxxing, especially when compiled together (address plus workplace plus family names). Data-removal or people-search opt-out services can reduce what's easy to find in future.
Is doxxing extortion actually illegal?
In most jurisdictions, threatening to publish private information to extract payment constitutes extortion or blackmail, a criminal offence, regardless of whether the underlying information is technically public. Report it to police.
If I already paid in cryptocurrency, can I get it back?
Cryptocurrency transactions are generally irreversible. Report the wallet address to your national fraud authority; recovery may depend on the payment method and timing, but a refund from the extortionist itself is very unlikely.