Sextortion in India: What to Do, and How to Make Yourself a Hard Target

Sextortion is one of the fastest-growing scams in India, and it doesn't care about your age, income, or how careful you think you normally are. It works because it's built entirely around one emotion: shame. Take the shame out of the picture and it stops working — that's the whole point of this guide.

If this is happening to you right now, skip ahead to the steps below. If you're reading this to protect yourself before it happens, keep reading top to bottom.

How the scam usually runs

Almost every case in India follows one of a few well-worn scripts.

The recorded video-call scam. A fake profile — often presented as an attractive woman — messages you on Instagram, WhatsApp, or a dating app, builds quick rapport, and pushes to move to a video call fast. Once on the call, they undress or suggest you do, and the call is being screen-recorded on their end the entire time (sometimes by a second person, sometimes by software). Within minutes of the call ending, you get a message: pay up, or the recording goes to your family, friends, and colleagues, stitched together from your own contact list or social media.

The fake-profile setup. Instead of a live call, some operations use pre-recorded video or images and build a slower relationship over days before ever going live — the goal is the same, just with more patience. These accounts are often part of larger, organised operations running dozens of profiles at once.

The follow-up 'police officer' call. This is the twist that catches even people who handled the first scam correctly. Days or weeks after the original blackmail, a second call comes in — sometimes from someone claiming to be a cyber-crime police officer, sometimes a 'lawyer', offering to 'get your case closed' or 'stop the video from being investigated' for a fee. This is a second scam layered on the first, aimed at people who already paid once and are desperate for it to be over. No genuine police officer resolves a criminal complaint over a phone call for money.

The details vary, but the mechanics are always the same: isolate you, create urgency, and use embarrassment to stop you from telling anyone or reporting it.

The one rule that matters most: do not pay

If you remember nothing else from this article, remember this: paying does not make it stop. It proves the threat works, confirms you're reachable and afraid, and — in case after case reported to Indian cybercrime cells — leads to bigger demands, not fewer. Some victims are told the video is 'deleted' after payment; it usually isn't, because there's no incentive for the scammer to actually delete anything once they've been paid once. Treat any request for money, however small, as confirmation you're dealing with a scam, and stop the moment it appears.

Exactly what to do, step by step

1. Stop all contact. Don't reply, don't explain yourself, don't try to negotiate a lower amount. Every response is treated as engagement and invites another push.

2. Screenshot everything before you block. The profile, the username/handle, the chat history, any images or videos sent to or by you, UPI IDs or bank details if money was demanded, and phone numbers used. This is your evidence. Save it somewhere private, not shared with anyone beyond what's needed to report it.

3. Report at cybercrime.gov.in. This is India's National Cyber Crime Reporting Portal, run by the Ministry of Home Affairs. You can report under 'Women/Child Related Crime' (which includes an anonymous reporting option for sensitive cases) or 'Other Cybercrimes'. You'll verify your mobile number with an OTP, describe what happened with dates and platform details, and upload your screenshots. It's free, and you'll get an acknowledgment number to track your complaint under 'Check Status'.

4. Call 1930. This is India's 24x7 cybercrime helpline, run by the Indian Cyber Crime Coordination Centre (I4C). It's built primarily for financial fraud — if you've already sent money, calling immediately gives the best chance of the transaction being flagged or frozen before it moves further through the banking system. Even if no money changed hands, 1930 can guide you through next steps and connect you to your state cyber cell.

5. Report the profile on the platform. Instagram, Facebook, and WhatsApp all have direct reporting flows for extortion, threats, and non-consensual intimate content — use them alongside, not instead of, the official complaint. Platforms can suspend the account and preserve data for investigators faster than a general complaint alone.

6. Tell one person you trust. A friend, sibling, or parent — anyone who can support you and keep you from panicking into a payment at 2 a.m. Isolation is the scammer's main tool; breaking it is often what stops the panic spiral that leads people to pay.

What the law actually says

You don't need to become a legal expert to report this, but it helps to know the ground you're standing on.

• IT Act Section 66E punishes capturing, publishing, or transmitting images of a person's private area without consent — up to three years in prison and a fine of up to ₹2 lakh.
• IT Act Section 67A covers publishing or transmitting sexually explicit material electronically — up to five years on a first conviction, up to seven years for a repeat offence.
• IT Act Section 66D covers cheating by impersonation using a computer resource — the fake profile itself is a separate offence, punishable with up to three years and a fine up to ₹1 lakh.
• BNS Section 308 (extortion) and BNS Section 351 (criminal intimidation) cover the threat and demand for money itself, with prison terms that scale up depending on the nature of the threat.

These are cognizable offences — police can register an FIR and investigate without needing a magistrate's prior approval. Combined, they give investigators several angles to pursue the same person or network.

You are not at fault

Nothing about being recorded on a call, trusting a profile that turned out to be fake, or sending a photo to someone you believed was genuine makes you responsible for someone else's crime. Cybercrime cells across India handle sextortion complaints routinely — you will not be judged, lectured, or treated as a suspect. The scammer's entire business model depends on your silence; reporting it is what breaks that model, for you and for whoever they target next.

Prevention: make yourself a hard target

You can't eliminate risk completely, but you can make yourself a much harder, much less profitable target.

Lock down your privacy settings. On Instagram and Facebook, set your account to private, review who can message you (restrict it to followers or 'people you follow'), and turn off the ability for strangers to see your friends/follower list. On WhatsApp, set your profile photo, last seen, and status to 'My Contacts' only, and be deliberate about which numbers you add.

Never turn your camera on for someone you haven't verified. If a new match or contact pushes hard for video quickly, that pressure is itself a red flag. A short, casual video call is fine for confirming someone is real (see our online dating safety guide) — undressing or performing anything intimate on a call with someone unverified is where the actual risk lives, regardless of how the conversation got there.

Use a separate email and number for dating apps. A secondary email and, where possible, a separate number (many apps support masked or virtual numbers) limits how much a scammer can find out about your real identity, workplace, or family if a profile turns out to be fake.

Use strong, unique passwords with 2FA everywhere. This doesn't stop sextortion directly, but it stops the adjacent risk: reused passwords are how a lot of personal photos, DMs, and cloud backups get accessed in the first place, giving scammers material to work with beyond anything you sent them directly. A password manager makes unique passwords and two-factor authentication practical instead of a chore.

Reverse-image-check new profiles. Screenshot a suspicious profile photo and run it through Google Lens or a similar reverse-image search. Stolen photos used in fake profiles very often surface elsewhere — stock photo sites, someone else's real social media, or other dating profiles under a different name.

Know what a VPN does and doesn't do here. A VPN encrypts your internet traffic and hides your IP address, which is genuinely useful on public Wi-Fi (cafés, airports, co-working spaces) and reduces how much advertisers and networks can track you. What it doesn't do is protect you once you're already in a conversation with someone — it can't stop a video call from being recorded on the other end, and it can't unsend a photo. Don't let a VPN create false confidence about the parts of this that are actually behavioural. ExpressVPN is a reasonable choice if you want one for the public Wi-Fi and tracking side of things — just go in knowing what it does and doesn't cover.

The bottom line

If it's already happening: don't pay, don't engage, screenshot everything, report at cybercrime.gov.in and 1930, report the profile, and tell someone you trust. If it hasn't happened yet: lock down your privacy settings, never go further than a short verification video call with someone unverified, keep dating-app contact details separate from your main email and number, and use unique passwords with 2FA so one leak doesn't cascade into others. None of this requires you to stop dating, chatting, or using social media — it just means doing it with the same basic caution you'd use with your bank account.