The message says they have explicit images of you and lists your friends and family as recipients unless you pay. Increasingly, the images exist — because AI generated them from the ordinary photos on your public profiles. No hack occurred and no real image ever existed; the fake is the weapon.
This scam targets everyone but hits teenagers hardest, and law enforcement worldwide has tied teen sextortion to tragic outcomes. The single most important fact for any victim, of any age: paying does not end it — payment marks you as profitable, and demands continue or escalate.
How the scam works
1
Harvest
Ordinary photos from public Instagram, TikTok, or Facebook profiles — faces are all the tools need.
2
Fabricate
AI 'nudify' tools generate explicit images with the victim's face. Quality has crossed the threshold where friends and family can't tell fake from real at a glance.
3
Threaten
Contact arrives with samples and a follower/contact list as proof of reach. Deadlines are hours, not days — panic is the product. Payment is crypto or gift cards.
4
Repeat
Payment triggers new demands. Some crews also 'catfish' first — posing as a romantic interest to obtain real images — then blend real and fake material in the threats.
Red flags to watch for
!Images you know can't exist
That's not reassurance from them slipping up — it's the tell that the material is AI-generated, which also means it can be generated about literally anyone.
!Countdown deadlines
"You have 12 hours" exists to prevent the two things that kill the scam: thinking, and telling someone.
!Crypto or gift card demands
Untraceable rails, as always. No legitimate resolution of anything involves Bitcoin sent under threat.
!Proof-of-reach displays
Screenshots of your followers or family's profiles are meant to make the threat vivid. Scraping a public friend list takes seconds and proves nothing about intent or capability.
!Escalating demands after payment
If any payment has been made and demands continued, that's not bad luck — it's the business model, and it confirms paying more won't end it.
What to do
✓Do not pay, do not negotiate
Payment funds escalation. In the large majority of cases where victims stop responding, threats are recycled to the next target — mass-blasted campaigns move on.
✓Preserve, block, report
Screenshot the threats (including usernames and payment addresses), then block. Report to the platform, to reportfraud.ftc.gov, and — especially for minors — to the FBI at ic3.gov and NCMEC's CyberTipline.
✓Use takedown tools that actually work
For intimate-image abuse (real or AI), StopNCII.org (adults) and NCMEC's Take It Down (minors) hash images so participating platforms block them proactively.
✓If it's your kid: safety first, blame never
Teens comply with sextortion out of shame and fear of parents finding out. Lead with 'you're not in trouble, this happens to thousands of kids, we'll handle it together' — that sentence is genuinely protective.
Frequently asked questions
The images are fake. Can they still hurt me?
Fakes can embarrass, which is why the threat works — but their power collapses when you pre-empt it. Many victims defuse everything by telling close contacts 'someone is circulating AI fakes of me' before anything spreads. Truth moves faster when you send it first.
I already paid. What now?
Stop paying now — further demands are guaranteed regardless. Preserve evidence, report (payments give law enforcement transaction trails), and if you paid by card or bank, ask about reversal. One payment doesn't obligate a second.
Is making AI explicit images of someone illegal?
Increasingly yes. In the US, the federal TAKE IT DOWN Act and numerous state laws criminalize creating or distributing non-consensual intimate images including AI-generated ones, with platforms required to remove them on request. Report it — the law is on your side and getting stronger.
Fight AI with AI.
Scambook's AI checker analyzes suspicious messages, numbers, and links against a live scam database — including the machine-generated ones. Free, in seconds.