Being blackmailed with photos: what to do right now

Someone has intimate images of you, or says they do, and is threatening to send them to your family, your followers or your employer unless you pay. Your heart is going and you want to make it stop in the next five minutes.

Read this before you do anything, because the instinctive response — paying — is the one that reliably makes it worse.

The first six steps

1. 11. Do not pay

   This is the most consistent finding across every law enforcement report on the subject. Paying does not end it. It identifies you as someone who pays, and the demands continue — often escalating, sometimes for months. Some victims have paid repeatedly before stopping, and the images were never released at any point.

2. 22. Stop replying

   Every reply is information. Engagement, negotiation, pleading and threats all signal that the pressure is working. Silence is the response the script has no answer to.

3. 33. Do not delete anything

   The urge to erase it all is strong and it destroys your evidence. Screenshot the profile, the messages, the username, the payment details and any links. Save them somewhere outside the app.

4. 44. Lock down your accounts

   Set social profiles to private and restrict who can see your friends and followers list. Most threats to "send this to everyone you know" depend on being able to see who you know. Removing that access removes most of the leverage.

5. 55. Report it

   Report the account on the platform, then report the crime. In the US, the FBI's IC3 at ic3.gov. In the UK, your local police and the Revenge Porn Helpline. Elsewhere, your national cybercrime unit. You will not be in trouble for having taken the photos.

6. 66. Tell one person

   The isolation is part of the mechanism. Telling one person you trust takes most of the power out of the threat, because the thing being threatened is exposure — and you have just removed the element of surprise.

Get your images blocked, for free

These services exist specifically for this and most people have never heard of them. Both work by creating a digital fingerprint of the image on your own device — you never upload the picture itself anywhere.

• StopNCII.org — for adults. Creates a hash of your image locally and shares only that hash with participating platforms, which then block matching uploads. Run by the Revenge Porn Helpline.
• Take It Down — for anyone who was under 18 when the image was taken, even if you are an adult now. Operated by NCMEC and works the same way.
• Platform reporting — every major platform has a dedicated route for non-consensual intimate imagery, and these are handled faster than normal reports.
• Google removal — you can request removal of non-consensual intimate images from search results even if the host site refuses to take them down.

The threat is usually weaker than it feels

Three things are true of most sextortion cases, and knowing them changes how the next hours feel.

First, it is almost always volume crime. The same script is being run against hundreds of people at once by an operation that has no particular interest in you. Carrying out the threat costs them effort and yields nothing, which is why in a large share of reported cases the images are never distributed at all — including cases where the victim refused to pay.

Second, they frequently have less than they claim. Fabricated screenshots, claims of a hacked device, claims to have your whole contact list — these are standard bluffs. A specific threat with no actual evidence attached is a strong sign there is nothing behind it.

Third, they are committing a serious crime and you are not. Having taken an intimate photo is not illegal, not shameful and not the point. Threatening to distribute it is a crime in most jurisdictions, with dedicated units investigating it.

Checking whether anything was actually posted

Many people spend weeks not knowing whether the threat was carried out, which is its own kind of harm. A reverse image search is the practical way to answer that question rather than refreshing your own name in a search engine.

1. 1Search the specific image if you have a copy

   A plain reverse image search finds exact copies of a file across indexed pages — image hosts, forums, blogs. This is the direct test of whether that picture has been published somewhere public.

2. 2Run a face search for the wider picture

   A face search finds other pictures of the same person rather than the same file, which catches cropped or re-encoded versions and any fake profiles built using your photos.

3. 3Document anything you find

   URL, date and a screenshot, before you report it. Removal requests go faster when the evidence is attached.

4. 4Set up monitoring if the worry persists

   Checking manually every day keeps you inside the anxiety. An automated check that tells you if something appears is better for both the practical problem and your head.

If you are under 18

This is a crime against a child and it is treated that way. You will not be in trouble.

• Tell an adult you trust today. A parent, a teacher, a school counsellor — anyone.
• Use Take It Down (takeitdown.ncmec.org), built exactly for this and free.
• In the US, NCMEC's CyberTipline. In the UK, CEOP and Childline. These services move quickly on cases involving minors.
• Do not send any further images, and do not pay, no matter what is threatened.

The next few weeks

The acute phase usually passes faster than it feels like it will. Blocked and unanswered, most of these operations move on within days because their model depends on quick turnover.

• Expect a few more messages from new accounts. Block each one without reading past the first line.
• Keep your evidence folder even after things go quiet.
• Watch for a follow-up "recovery" or "deletion service" approach — that is the same operation or another one working from the same list.
• Talk to someone about the aftermath. The anxiety outlasts the threat in most cases, and that part is treatable.