What to Do After Deepfake Extortion or Sextortion

What should I do if I am a victim of deepfake sextortion?

If someone is threatening to share a fake sexual image of you unless you pay, stop all contact with them, do not pay and do not send any images. Save the evidence before you block: screenshots of the messages, the account name and profile link, any payment details or wallet addresses they gave, and the dates. Then report the account on the platform and report the crime to police.

It does not matter that the image is fake, and it does not matter whether you ever shared a real image. The person threatening you committed the crime. You are not in trouble, and help is available. If you are under 18, tell a parent, teacher or another adult you trust; NCMEC and the police deal with these cases every day and will not blame you.

• Stop replying. Do not negotiate, argue or explain.
• Do not pay, and do not send more images, even fake ones.
• Save messages, usernames, profile links, payment details and dates.
• Report the account on the platform, then block it.
• Report to police or the FBI; involve NCMEC if anyone depicted is under 18.
• Use StopNCII.org or Take It Down to block copies.

How deepfake extortion works

Deepfake extortion starts with ordinary photos. The FBI's public service announcement I-060523-PSA, issued on 5 June 2023, warned that malicious actors take benign photos or videos, often from social media or video chats, and use content manipulation tools to turn them into sexually themed images that look like the victim. They then send the images to the victim and demand either money or gift cards, or real sexual images, threatening to share the fakes with family or friends.

The FBI noted that many victims, including minors, did not know their images had been copied and manipulated until someone else told them. Scammers often find targets through public profiles, and they research the victim's friends and family list so the threat feels specific.

A related scheme skips generation altogether: the extortionist claims to have explicit images that do not exist, sometimes quoting an old leaked password as proof. The response is the same in both cases.

Why you should not pay

Paying almost never ends deepfake extortion. Once a victim pays, the extortionist knows the threat works and usually asks for more. Many sextortion operations are run as businesses that work through long lists of targets, so the people behind them have no reason to delete anything.

Stopping contact takes away their main pressure, which is your fear in the moment. Most extortionists move on to other targets when they get no response. If they do post the image, the removal routes in the next section work, and having already reported the account makes takedown faster.

Look after yourself while this is happening. Extortion is designed to make you feel isolated and ashamed, and that feeling is the extortionist's tool rather than a sign you did something wrong. Talk to someone you trust, and contact a support line if you feel overwhelmed. In the US you can call or text 988 at any time.

Where to report deepfake extortion

Report through the platform first so the account can be removed, then to law enforcement. Which agency depends on where you live and the age of the person depicted.

When you file, include the extortionist's usernames and profile links on every platform they used, any phone numbers or email addresses, payment instructions such as wallet addresses or gift card types, and the times of each message. Investigators often link many victims through the same accounts and payment details, so even a report that does not lead to an arrest in your case can help stop the same people targeting others.

What parents and schools should do

Teenagers are frequent targets. NCMEC says it has seen a dramatic increase in sextortion reports, especially financial sextortion where the offender demands money from the child, and that teenage boys have been common targets. Its CyberTipline received more than 186,800 reports of online enticement, the category that includes sextortion, in 2023, a rise of more than 300% since 2021.

If a young person tells you, stay calm and thank them for telling you. The first message they need to hear is that they are not in trouble and that you will deal with it together. Then follow the same steps: stop contact, do not pay, save the evidence, report to NCMEC and police, and use Take It Down. Schools should have a named safeguarding lead who knows these routes and treats generated images with the same seriousness as real ones.

When an organization or executive is the target

Organizations face a version of this too: a fabricated compromising video or audio of an executive, sent with a demand for payment or a threat to leak it to the press. Treat it as a security incident. Bring in security, legal and communications, preserve the messages and media, do not pay or engage without legal advice, and notify law enforcement.

A documented analysis helps legal teams and investigators decide how to respond. Neural Defend's NeuroDetect lets authorized staff upload the image, video or audio into a case, review heatmaps and attention views down to regions, frames and audio segments, and export a forensic report covering observations, uncertainty, provenance and model context. The analyst makes the final call. Private cloud, on-premises and air-gapped deployment keep sensitive material inside the organization, and Neural Defend holds ISO/IEC 27001 and ISO/IEC 27701 certifications.

Analysis has limits. It can show signs that an image was generated or manipulated; it cannot identify the extortionist, and a person does not need a detector result to report a crime.