The Company Promising to Make Your Sextortion Go Away Is Also Robbing You

here is the grim comedy of the internet in 2026: someone threatens to leak your intimate photos unless you pay, you panic and search “how to stop sextortion,” and the top results are companies that will also take thousands of dollars and do nothing. the FTC just sued one of them. you got scammed, then you searched for help, and the help was the second scammer in line. two predators, one victim, one search box.

the two-layer scam, mapped

sextortion itself is the first layer: a stranger (often via a hacked or fake social account) claims to have intimate images or convinces a victim to send them, then threatens to share them with friends and family unless paid. that is awful and common. but the FTC’s alert is about the second layer, the one most “cyber” coverage ignores: the recovery scam that feeds on the panic the first scam created.

according to the FTC’s complaint, Digital Forensics ran a fleet of reassuring-sounding domains (BlackmailHelpline, CyberBlackmail911, SecurityBreach911) and promised to:

• stop the sextortion threats
• prevent the explicit material from spreading online
• report the perpetrators to criminal authorities

and then, per the FTC, charged customers thousands of dollars and failed to deliver on any of it. the victim pays twice and is arguably worse off, because they believed the problem was handled.

why the recovery scam works so well

it is social engineering aimed at a person in a genuine crisis. the mark is scared, ashamed, and in a hurry. that is the ideal emotional state to sell a “we handle this professionally, it is confidential, pay now and stop worrying” pitch. the domains are built to rank and to soothe: words like “helpline,” “911,” and “forensics” borrow the vocabulary of actual emergency services. and because victims are embarrassed, they rarely compare notes or leave reviews, so the usual “search the company plus scam” defense is weaker than normal.

this is the same playbook the FTC keeps hammering in other categories. on October 22 a federal court permanently shut down a debt relief operation that impersonated banks and government agencies, with a $106.8 million judgment. different vertical, identical move: find people in financial or emotional distress, cosplay as the authority that can save them, collect fees, deliver nothing.

what to actually do if you are being sextorted

the FTC’s guidance is free and boring, which is how you know it is real:

1. Stop paying and stop talking. do not pay the blackmailer and do not give them access to your devices or accounts. ignore the messages and cut off communication. paying funds the next demand; it does not end the current one.
2. Tell someone you trust. a friend, family member, or counselor. the shame is the leverage. removing the secrecy removes most of the weapon.
3. Report it to law enforcement. sextortion is a serious crime. report to local police and to the FBI at fbi.gov or 1-800-225-5324. if a minor is involved, report through the National Center for Missing and Exploited Children’s CyberTipline.

if an image already got shared

• Report it to the platform directly. under the Take It Down Act, online platforms must remove nonconsensual intimate images within 48 hours of your request, for free. if the platform does not comply within 48 hours, report it to the FTC at TakeItDown.ftc.gov.
• Vet any paid “removal” service before you pay a cent. search the company name with “scam,” “review,” and “complaint,” and scroll past the paid ad results (which is often where the predators buy their way to the top).
• Use free support. minors: National Center for Missing and Exploited Children, 1-800-843-5678. adults: National Domestic Violence Hotline, 1-800-799-7233.

the defender’s angle, because this hits your users too

if you run security awareness for an organization, sextortion and its recovery scams belong in the training, not just phishing simulations. a few practical notes:

1. tell people in advance that “pay a service to make it disappear” is itself a known scam pattern. the time to hear that is before the crisis, not during the search.
2. give them the free, official channels (FBI/IC3, NCMEC CyberTipline, TakeItDown.ftc.gov) in your internal docs so panicked employees have a bookmark instead of a search engine.
3. remember the extortion often starts from a compromised or spoofed account. MFA, account recovery hygiene, and “do not accept random video chats from new contacts” are the upstream controls.
4. normalize reporting without shame. an employee who feels safe saying “I am being extorted” gets real help; one who does not goes looking for a BlackmailHelpline.

how to spot the recovery scam in the wild

• urgency plus confidentiality: “pay now, keep it quiet, we handle everything.” real help does not require secrecy.
• guarantees to “prevent images from spreading” or “remove it everywhere.” nobody can guarantee that. the FTC’s whole case is that this promise was false.
• upfront fees in the thousands for an outcome they cannot control.
• a cluster of emergency-flavored domains (helpline, 911, breach, forensics) that all route to the same operation.

sloth take

the internet found a way to scam you for being scammed. the fix is unglamorous and free: do not pay either predator, tell a human, report to the FBI and NCMEC, and use TakeItDown.ftc.gov for removals. the people charging thousands to “forensically” make your problem vanish are selling panic relief, not results. and before you ever hand a crisis to a search engine, remember who buys the top ad slot.

Want sextortion and recovery-scam modules added to your security awareness program, with the free official reporting channels baked in so panicked employees do not go buy “help”? Book a slot with Dark Edge Consulting.

sources

• FTC Consumer Alert, “How to avoid deceptive sextortion assistance services and find real help,” October 13, 2026 (BCP Staff)
• FTC lawsuit against Digital Forensics (BlackmailHelpline.com, DigitalForensics.com, CyberBlackmail911.com, SecurityBreach911.com)
• Take It Down Act 48-hour removal requirement; TakeItDown.ftc.gov
• FBI (fbi.gov, 1-800-225-5324) and NCMEC CyberTipline reporting channels
• FTC press release, October 22, 2026: court shuts down debt relief operation that impersonated government and business entities ($106.8M judgment)