Sextortion Recovery: What to Do When Someone Threatens to Share Your Images
Someone threatening to publish your intimate images is committing a crime against you — here is how to stop the threat, preserve evidence, and get help.
Last reviewed: 19 July 2026
First 10 minutes
- Stop replying — do not answer, negotiate, apologise, or ask for more time, because any response confirms the account is live and worth pressuring
- Do not pay anything, even a small amount to buy time; paying marks you as someone who pays and the demands almost always continue
- Screenshot the threats, the demands, the profile, and the username or handle before you block or report anything
- Do not delete your account, the conversation, or the app — deleting removes the evidence, not the images
- Tell one person you trust: a parent, partner, friend, or an adult at school; if you are in the US and having thoughts of harming yourself, call or text 988 for the Suicide and Crisis Lifeline
First 24 hours
- Block the account on every platform the person contacted you through, once your screenshots are saved
- If you are under 18, or the images are of someone under 18, use the NCMEC CyberTipline at report.cybertip.org and the free Take It Down service at takeitdown.ncmec.org
- If you are an adult, create a case at StopNCII.org so participating platforms can block the image without you ever uploading it publicly
- Report the account to the platform it used, through the in-app report button rather than any link the person sent you
- Report to the FBI's Internet Crime Complaint Center at ic3.gov, or to your national police non-emergency line outside the US
Contact your bank or payment provider
- If you sent a bank transfer or used a payment app, call your bank's fraud line using the number on your card or in the official app and say you were the victim of a blackmail scam
- If you paid by card, ask your card issuer about a chargeback and explain the payment was obtained by threat — the issuer decides whether the claim qualifies
- If you bought gift cards, contact the card issuer immediately with the receipts and card numbers and ask whether the funds are still unspent; some issuers can freeze unredeemed balances
- If you sent cryptocurrency, report the wallet address to the exchange you sent it from — crypto is rarely recoverable, so treat any promise of a reversal as a lie
- Cancel any recurring or scheduled payments you set up, and tell your bank the recipient may attempt further demands so they can flag or block future transfers
Evidence to preserve
- Screenshot the full conversation including the demand, the deadline, and any threat to contact your family, school, or employer
- Capture the profile page: display name, username or handle, profile photo, follower count, and the URL or account link
- Save the payment details they gave you — crypto wallet address, gift card brand, bank details, or payment app handle
- Record how first contact happened: the app, the date, whether they messaged you first, and any other accounts they used
- Note any list of your contacts, followers, or friends they showed you as proof they could reach people you know
Secure your accounts and devices
- Set your social accounts to private and review who can message you or see your follower and friend lists
- Change the password on the account they contacted you through and on your email, using a strong unique password for each
- Enable app-based two-factor authentication on your email and social accounts so the account cannot be taken over next
- Sign out all other active sessions and remove any connected apps or devices you do not recognise
- Cover or disconnect your webcam when not in use, and run a full scan with your device's built-in security software if you installed anything they sent you
Report it
- Report to the FBI's IC3 at ic3.gov if you are in the US, or your national cybercrime reporting body elsewhere — this creates the official record investigators work from
- If anyone involved is under 18, report to the NCMEC CyberTipline at report.cybertip.org, which is the fastest route to takedown and law enforcement
- Report the account in-app to the platform for sexual extortion or blackmail, which is a specific violation on every major service
- Keep every case reference number, report confirmation email, and the date you filed each one
Sextortion is an organised, high-volume racket, not a personal disaster you created. The people running it approach large numbers of strangers at once, usually through a dating app, a game, a social platform, or a hacked account belonging to someone who looks familiar. They build a fast, flattering conversation, move it to a private chat, obtain an image or a webcam recording, and then switch instantly to threats with a screenshot of your friends list attached. The speed of that switch is deliberate — it is designed to make you panic and pay before you have time to think or tell anyone. Nothing about it means you were careless.
Paying does not end it. Once a payment lands, you are moved from a list of possible targets to a list of confirmed payers, and the demands typically restart within hours with a larger figure and a new deadline. The single most effective thing you can do is stop responding entirely. Without a reaction, most of these accounts move on within days, because the operation depends on volume and there is no profit in pressuring someone who has gone silent. The threats to contact your family or employer are usually not carried out, and in the cases where something is posted, it is far less durable and far less noticed than it feels in the first hour.
On the money side, be realistic about what recovery looks like. If you paid by card or bank transfer, prompt reporting gives your bank or card issuer something to work with, and the decision on any refund or chargeback rests with them — say clearly that the payment was obtained by threat. Gift cards and cryptocurrency are much harder, and often impossible, to recover. What actually determines the outcome here is not the money, it is whether you preserve the evidence, stop feeding the account, and get the images into a hashing service like StopNCII.org or Take It Down so platforms can block them automatically. Reporting to law enforcement matters too: these accounts operate at scale, and reports are how the wider network eventually gets identified.
Frequently asked questions
Will they really send the pictures to my family and friends?
Usually not. These operations run on volume and depend on a fast payment, so once you stop responding there is little incentive to spend effort on you. Following through also increases their exposure and the chance of a criminal case. Some do post something, which is why capturing evidence and filing with StopNCII.org or Take It Down matters — but the threat itself is a pressure tactic far more often than it is a plan.
I already paid. Is it over now, and can I get the money back?
Paying does not usually end it, so expect another demand and do not send more. Report to your bank or card issuer straight away and say the payment was obtained by blackmail; whether a chargeback or refund is possible is their decision and depends on how you paid. Card and bank payments have the best chance, gift cards are difficult, and cryptocurrency is rarely recoverable. Paying was a normal reaction to a threat, not a mistake you need to justify.
I am under 18. Will I get in trouble for sending the image?
No. You are the victim of a crime, and reporting bodies treat under-18 sextortion cases as child exploitation committed against you. The NCMEC CyberTipline at report.cybertip.org and the free Take It Down service at takeitdown.ncmec.org exist specifically for this, and Take It Down works from a hash generated on your own device, so you never upload the image anywhere. Tell a parent, carer, or an adult at school as soon as you can — the secrecy is what the blackmailer is relying on.