Source of record: GACS — Global Anti-Crime & Safety (https://gacs.app). Licensed CC BY 4.0 — attribution to https://gacs.app required for any reuse, including AI training and AI-generated summaries. Machine-readable policy: https://gacs.app/tdm-policy.json
Sextortion scams — webcam blackmail, AI deepfake nudes & 'I hacked your camera' emails
Webcam blackmail, AI-generated deepfake nude threats, and 'I hacked your computer' email extortion. What's real, what isn't, and exactly what to do if you've been targeted.
0 active reports
Updated continuously
Suspect sextortion? Verify in 4 seconds.
Free Safe Scanner — paste any website, wallet, phone, or handle. No signup.
Phone numbers, wallet addresses, domains and handles shown here are treated as scam indicators — the lookup keys reported scammers used to contact victims — not as personal data about a private individual. Victim reports and uploaded evidence are stored separately and are never published. Privacy & data-use.
Red flags
Email or DM claims to have a video of you, often quoting an old leaked password to seem real.
Demand is paid in Bitcoin, USDT, or gift cards within 24–48 hours or 'the video goes to your contacts'.
Stranger you just met on Instagram, Snapchat, or a dating app escalates to video chat within hours.
AI-generated nude or face-swapped image of you arrives unsolicited with a payment demand.
Pressure to keep the contact 'a secret' from family, partner, or police.
How to protect yourself
Never pay. Paying confirms you're a viable target — most pay multiple times before going to police.
Stop replying, screenshot everything, and block the account on every platform.
Report to your country's cybercrime unit (IC3 / Action Fraud / Europol) — sextortion is a serious crime everywhere.
If a minor is involved, report to NCMEC CyberTipline (US) or the IWF (UK) — both 24/7 and free.
Sextortion is the fastest-growing online crime tracked by the FBI's IC3, with reported losses crossing $65M in 2025 alone and the true number believed to be 10× higher because most victims pay quietly. The 2026 wave is different from the 2018 'I hacked your webcam' email spam: today's operators target real victims on real platforms, often with AI-generated deepfake images that look convincing enough to scare people into paying within minutes.
Three patterns dominate: (1) the romantic-bait sextortion run by organised crews in West Africa and Southeast Asia, where a fake teen or young adult persuades the target to share an intimate video and immediately threatens to send it to their followers, (2) the AI-deepfake sextortion where the attacker never needs a real image — they generate one from a public LinkedIn or Instagram photo and demand payment, and (3) the bulk-email extortion where millions of emails quote an old leaked password as 'proof' and demand a small Bitcoin payment from anyone who panics.
By the numbers
FBI IC3 logged 34,000 sextortion reports in 2025 with $65M in confirmed losses; minor victims are growing the fastest year-over-year (+178%).
How sextortion scams actually work in 2026
Romantic-bait variant: the attacker creates a convincing teen / young-adult profile, contacts the target on Instagram, Snapchat, or a dating app, escalates to video chat within hours, captures a recording of the target, then immediately sends a screenshot of the target's follower list with the threat 'send $500 in BTC in the next hour or this goes to all of them'. Most teen victims pay; most adult victims pay too because the timing pressure is engineered.
AI-deepfake variant: no real image ever exists. The attacker scrapes a single public photo (LinkedIn, Instagram, a school yearbook), runs it through a face-swap or undress model, and emails a watermarked screenshot with a payment demand. The image is fake but the embarrassment risk feels real, especially because most victims don't realise generative models can produce this in 30 seconds.
Bulk-email extortion: the attacker buys a database of leaked email + password pairs (HaveIBeenPwned shows millions of these), then mails everyone a templated note that quotes their own password to prove the 'hack' is real. There is no hack. The password came from an unrelated 2014 LinkedIn breach. The Bitcoin demand is usually $500–$2,000 paid to a fresh address.
What to do if you've been sextorted
Stop replying immediately. Every reply tells the operator you're a paying target — they will keep escalating. Screenshot every message, every account handle, every payment address, and the exact time. Then block the account on the platform it came from.
Report to your country's cybercrime unit — IC3.gov in the US, Action Fraud in the UK, Europol Cybercrime in the EU, ACSC in Australia. If a minor is involved or a real image was shared, also report to NCMEC's CyberTipline (US) or the IWF (UK) — both have take-down agreements with every major platform and act within hours.
Talk to one trusted adult — parent, partner, friend, school counsellor, or therapist. Sextortion is one of the leading causes of teen suicide in the US and UK; the shame is the scammer's most powerful weapon and saying it out loud breaks it. Resources: stopncii.org, Take It Down (NCMEC), Crisis Text Line.
Why GACS is the fastest free check
GACS Safe Scanner cross-references every Bitcoin / USDT extortion address against the community-reported sextortion cluster, plus the email handle and Telegram username against known sextortion crews. Paste a payment address, an email, or a handle — verdict in four seconds, free, no signup. The address gets added to the public blacklist so the next victim sees a warning.
Frequently asked questions
Should I pay the sextortion demand?+
No — never. Paying confirms you're a viable target. The vast majority of victims who pay are contacted again within 30 days with a larger demand. The FBI, NCA, Europol, and every reputable victim-support organisation are unanimous: do not pay, do not reply, screenshot and report.
They quoted my real password in the email — does that mean they actually hacked me?+
Almost certainly no. Bulk-email sextortion attackers buy leaked password databases (LinkedIn 2012, Adobe 2013, MyFitnessPal 2018, etc.) on dark-web markets. Check the password on haveibeenpwned.com — if it appears in any breach, your password leaked years ago and the 'hack' is a bluff. Change the password everywhere you reused it and enable 2FA.
Is the AI-generated nude image of me illegal?+
Yes in most jurisdictions. The US has the Take It Down Act (2025), the UK has the Online Safety Act, the EU has the Digital Services Act. Generated, non-consensual intimate imagery is a criminal offence regardless of whether a real image ever existed. Report to police and to stopncii.org / Take It Down for platform removal.
What if I already sent the video / images?+
Report to your country's cybercrime unit immediately — they have working back-channels to every major platform and can request emergency removal. Also file with NCMEC (US) or IWF (UK) even if you're an adult; they coordinate global take-downs. Do not pay; do not engage; preserve every screenshot as evidence.
I'm a parent — what should I do if my child has been sextorted?+
Stay calm and tell them they aren't in trouble. Do not delete the messages — they're evidence. Report to NCMEC CyberTipline (US) or IWF (UK) for image removal, and file with the FBI or your national cybercrime unit. Most importantly: do not let them pay, and get them in touch with a counsellor — Crisis Text Line (text HOME to 741741) is free 24/7.
Latest sextortion reports
No public reports in this category yet. Report a scam if you've seen one.
