Sextortion: How It Works, What to Do, and Why Teen Boys Are Most at Risk

Sextortion: How It Works, What to Do, and Why Teen Boys Are Most at Risk

It starts with a follow request on a Tuesday evening. A girl he doesn't recognize, but she's cute, seems interested, and her profile looks real enough. By Wednesday night, the conversation has turned personal. Thursday morning, she asks for a photo. He sends it.

And then the trap closes.

Within sixty seconds, the tone shifts. She's gone. A different voice — cold and direct — tells him they have the photo, they have his contact list, and they want $500 in Venmo or gift cards within an hour before his family and his entire school sees it.

This is sextortion. It's happening to thousands of teenagers every year, it moves faster than most adults realize, and it is absolutely not the victim's fault.

If this is happening right now, skip directly to What to Do Right Now. The rest of this article will still be here.

How the Scam Works: Three Phases and Under 48 Hours

Sextortion is extortion using sexual material — real or claimed — as leverage to demand money or additional explicit content. Financial sextortion specifically aims at a cash payout, with the threat of distributing the material to the victim's contacts if they don't comply.

The playbook is scripted and efficient. It runs in three phases.

Phase 1: The approach. A profile reaches out through Instagram, Snapchat, Discord, Telegram, or a dating app. It usually presents as a teenage girl or an attractive young woman with a plausible story. The photos look real — because they're stolen from someone's actual social media account. There might be a few posts, some followers, enough surface-level credibility to pass a quick glance without suspicion.

Phase 2: The escalation. After a short period of building rapport — sometimes just a few hours — the conversation steers toward exchanging photos. Sometimes it starts with something innocuous that gradually escalates. The moment the victim sends anything the scammer can use, Phase 3 begins.

Phase 3: The demand. The persona disappears immediately. The scammer reveals they have the image and they have the victim's contact list (often scraped from the platform during the conversation). They issue a deadline — pay now in gift cards, crypto, or a payment app, or the image goes to everyone. The urgency is the point. Panic is the mechanism. They don't want the target to think; they want them to react.

Here's what they don't tell you: paying doesn't end it. It signals that this person will pay under pressure, and follow-up demands come quickly.

Who's Getting Targeted — and Why Teen Boys Specifically

This isn't a scam that spreads evenly across demographics. It concentrates heavily on teenage boys.

From October 2021 to March 2023, the FBI and Homeland Security Investigations received over 13,000 reports of financial sextortion involving minors, representing at least 12,600 identified victims. The vast majority were boys, primarily between the ages of 14 and 17. At least 20 of those victims died by suicide. The FBI has continued to flag this as an escalating and rapidly worsening threat in every advisory since.

Teen boys are targeted at high rates partly because of how shame operates. Scammers understand that teenage males are less likely to tell a parent, a counselor, or a friend what happened — especially about something involving explicit photos. That isolation is a feature of the scam, not a side effect. It's what keeps victims compliant and keeps the demands coming.

The scammers themselves are not acting alone. FBI advisories indicate that the operations running these scams are organized criminal networks, primarily based in West Africa — Nigeria and Ivory Coast in particular — or Southeast Asia, especially the Philippines. They work in shifts, run dozens of victims simultaneously, operate from scripts, and move on quickly if someone doesn't pay. This is not a teenager doing something stupid online. This is organized crime running a factory-scale extortion operation.

That "I Hacked Your Webcam" Email Is (Almost Certainly) a Bluff

There's a second flavor of sextortion that operates differently and deserves its own space: the mass-blast email.

You (or your teenager, or your parent) gets an email claiming something like: "I've been monitoring your online activity for several weeks. I have footage from your webcam of you visiting adult websites. Pay [X amount in bitcoin] to [wallet address] or I will send this recording to your contacts and post it publicly."

Sometimes the email includes a real password you recognize. That's alarming, but it came from an old data breach — not from any actual surveillance of your device. Stolen passwords circulate in breach databases for years and get paired with email addresses in exactly this kind of threat to make it seem credible.

The footage almost certainly doesn't exist. These emails go out to millions of addresses at a time. The scammer is betting that a small percentage of recipients will panic and pay. Most people who do pay receive a second demand.

What to do: don't respond, don't pay, and report the email to the FBI at IC3.gov{target="_blank"}. You can also run it through the Cautellus scanner to see whether it matches known sextortion templates in the threat database.

A Laptop Webcam Cover Slide costs a few dollars and removes the camera-access uncertainty entirely. Not because these emails are usually real — they usually aren't — but because camera-access malware does exist, and a physical shutter is the one defense that requires no software and fails in no failure mode.

What to Do Right Now {#what-to-do-right-now}

If sextortion is happening right now, follow these steps in order. The window matters.

1. Stop responding immediately. Every reply signals engagement and often escalates demands. Go silent. You are not going to negotiate your way out of this.

2. Do not pay. This is the FBI's explicit guidance. Payment confirms you'll pay under pressure, which triggers follow-up demands — often higher ones. The scammer does not intend to honor any agreement.

3. Screenshot everything before you block. Capture every message, the scammer's profile, their username, and any content they sent or showed you. Then block them on every platform. Screenshots are the evidence law enforcement needs.

4. Report to NCMEC if the victim is a minor. The NCMEC CyberTipline{target="_blank"} (1-800-843-5678) routes reports to law enforcement and connects families with direct support resources. This is the fastest channel for cases involving anyone under 18.

5. File a report at IC3.gov. The FBI's Internet Crime Complaint Center (IC3.gov{target="_blank"}) accepts reports with your screenshots attached. Include the platform used, the scammer's username, any account links you captured, and the content of the demands.

6. If the victim is a minor, contact your local FBI field office. The FBI actively investigates these networks and has made international arrests. They also explicitly state that minor victims will not face charges for the material they sent. The victim is not in legal trouble. The scammer is.

7. Tell someone you trust. A parent, a school counselor, a friend. Isolation is what the scammer is counting on — shame only works if you're carrying it alone. Breaking that silence is the single most protective thing you can do.

The family safe word guide has a practical framework for setting up crisis-communication agreements before something like this happens — including a specific structure for making it safe for kids to bring bad news home.

How to Talk to Your Child If You Think They've Been Targeted

Your teenager is not going to open with "I'm being sextorted, can you help." They're more likely to go quiet, seem anxious, avoid their phone one day and then obsessively check it the next.

Signs something may be wrong:

• Sudden withdrawal or social isolation
• Unusual anxiety around their phone or laptop
• Unexplained requests for money, or money missing from their accounts
• New accounts on platforms they don't normally use
• Refusing to go to school or avoiding specific social situations

How you start the conversation matters more than anything else. Lead with: "I read something about a scam targeting teenagers online. I just want you to know that if anything like this ever happened to you, you wouldn't be in trouble with me — we'd figure it out together." Then stop talking. Give them room.

The first thing out of your mouth determines whether they'll tell you the rest. If you react with anger, panic, or "how could you send that" — even if that's your immediate instinct — you've closed the door. Their safety requires that door to stay open.

Red Flags That Show Up Before the Trap Closes

Most of the warning signs are visible in Phase 1, before any damage is done. They're just easy to miss when a conversation feels normal.

The account is new or sparse. Scam profiles usually have low post counts, few real interactions, and a recent creation date. Platform settings often show when an account was made — it takes five seconds to check.

They suggest moving to a different platform immediately. "I don't really use Instagram, let's switch to Snapchat / WhatsApp / Telegram" is a standard setup — they want to move to platforms with disappearing messages before any explicit conversation starts. Our Snapchat scam guide covers how this exact pipeline works.

Intimacy escalates faster than any real relationship would. A stranger who feels intensely connected within 24 hours is running a script. Real attraction doesn't move at manufacturing-line speed.

They bring up photos before you do. Legitimate people in early online conversations don't usually open with an explicit photo request. When it comes from them first, that's the tell.

They want photos "without your face" so they can't be traced. This is explicit scammer protocol. A real person has no reason to say this.

Their photos look too professional or too perfect. Images stolen from models or influencer accounts often look suspiciously polished. A reverse image search on Google Images or TinEye can show whether those photos belong to someone else.

How to Lock Down the Platforms

You can't eliminate the risk, but you can significantly reduce the surface area.

Instagram: Switch to a private account. Set "Message requests" to allow only from people you follow. Instagram now automatically applies tighter DM settings to teen accounts (under 16 in the US), including blocking DMs from accounts that don't follow them — check that these haven't been overridden. The Instagram scam page lists the most common ways fake profiles operate there.

Snapchat: In Privacy Controls, set "Who can contact me" to "My Friends." Disable Quick Add — that feature is a common entry point for stranger contact with teens.

Discord: In User Settings → Privacy & Safety, disable direct messages from non-mutual server members. A significant portion of financial sextortion contact on Discord starts through server-to-DM pipelines.

The baseline rule for any platform: Anything you send can be screenshotted. It doesn't matter what the platform says about disappearing content. Operate on the assumption that anything you share with a stranger can be saved and shared.

One more thing worth flagging: scammers increasingly use AI tools to generate convincing profile photos and, in some cases, to create realistic fake images from minimal source material. A face photo from a public profile can sometimes be enough. That's part of why the AI scams hub and the deepfake voice and video guide are worth reading alongside this one — the technology being used against teens is evolving fast.

Frequently Asked Questions

What is sextortion? Sextortion is a form of online extortion where someone uses sexual material — either content the victim actually sent or content the scammer claims to have — as leverage to demand money or additional explicit content. Financial sextortion specifically aims at a cash payment, usually through gift cards, crypto, or payment apps.

My teenager received a sextortion demand. Should we call the police? Yes, but also go directly to the FBI. File a report at IC3.gov{target="_blank"} and call the NCMEC CyberTipline{target="_blank"} at 1-800-843-5678 for minor victims. Local police can take a report, but the FBI has active investigations into the specific criminal networks running these operations. The FBI explicitly states that minor victims will not be charged for the material they sent.

Should you ever pay a sextortionist? No. The FBI advises strongly against it. Paying doesn't end the threat — it confirms that this target will pay under pressure, which typically leads to escalating follow-up demands. Many victims who pay have the material shared anyway.

I got an email saying someone has webcam footage of me. Is it real? Almost certainly not. These emails are mass-blasted to millions of addresses using credentials from old data breaches. The included password is meant to make the threat seem credible, but it came from a breach database, not from any actual access to your device. Don't respond, don't pay.

How do I report sextortion involving a minor? Report to NCMEC at 1-800-843-5678 or the CyberTipline{target="_blank"}, and file with the FBI at IC3.gov{target="_blank"}. Screenshot and preserve all messages, the scammer's profile, and any evidence before blocking. The FBI has jurisdiction and makes international arrests in these cases.

Can images be removed once they've been shared? Sometimes, with help. StopNCII.org{target="_blank"}, run by the Internet Watch Foundation, lets victims (or parents of minor victims) create a hash of intimate images that partner platforms use to detect and remove copies — without distributing the images. NCMEC also provides image-removal resources specifically for minors.

---

The scam works because it exploits shame faster than any person can think clearly — and the only thing that actually breaks the trap is saying it out loud to someone who won't flinch.

Sources: FBI Financially Motivated Sextortion{target="_blank"} · FBI Nashville Field Office Sextortion Advisory{target="_blank"} · NCMEC CyberTipline{target="_blank"} · FBI IC3{target="_blank"}