Dealing with content for ransom
Content for ransom is when someone uses information—such as secrets, documents, communications, images, or videos—to force you to do something against your will. They may demand money, sexual favours, the continuation of a relationship, or simply seek control over you. They threaten to share the content if their demands are not met.
The perpetrator may be someone you know or a stranger who has gained access to your content.
If you believe you are in immediate danger or your physical safety is at risk, call 112 immediately.
If the perpetrator is someone you know and there is a history of domestic abuse, coercive control, or violence, it is recommended that you seek professional support and develop a safety plan before taking any of the steps below.
If an explicit video has been created of you via a webcam and you are being asked to pay money, refer to the Sextortion guide.
We want to better understand the impact of you experiencing this issue, can you share your experience by filling in this online form? This will help us better protect future victims.
Content for ransom - do this first!
Report it -If you are in South Africa, report the incident to the South African Police Service (SAPS).
If you are in immediate danger, call 112.
If it is not an emergency, report the incident at your nearest SAPS police station and request a case number.
If the threat, blackmail, or communication occurred online, also report it to the relevant:
Social media platform
Messaging app
Website
Telecommunications provider
Internet service provider
Bank or payment provider
Cryptocurrency exchange
Where possible, ask them to preserve any evidence they hold relating to the incident.
If you are under 18, or the content involves someone under 18, treat this as a child protection matter.
You can contact:
Childline South Africa for support.
The Film and Publication Board (FPB) Child Protection Hotline to report suspected child sexual abuse material.
Cut communications - Stop communicating with the perpetrator. This can be difficult if the individual is someone you know or see regularly. If domestic abuse or coercive control is involved, seek specialist support before taking action.
Do not give in to demands -Paying money or complying with demands does not guarantee the perpetrator will stop.
Many victims who pay are subjected to:
Additional demands for more money
Requests for further images or videos
Continued harassment
Distribution of the content despite payment
If you have already made a payment:
Check whether it has been collected.
If possible, note where it was collected.
If it has not yet been collected, cancel the payment immediately if you are able to do so.
Preserve evidence - Keep as much evidence as possible.
Take screenshots of:
Messages
Threats
Payment requests
Usernames
Profiles
URLs
Email addresses
Phone numbers
Cryptocurrency wallet addresses
Images or videos sent by the perpetrator
Preserve information from any platform used, including:
WhatsApp
Telegram
Instagram
Facebook
Messenger
Snapchat
Signal
X (formerly Twitter)
Skype
Discord
Dating applications
Any other messaging or social media platform
Avoid deleting messages until law enforcement advises otherwise.
If you have a copy of the content - If you have a copy of the intimate image or video, you may be able to reduce the likelihood of it being shared by using trusted image protection services before it is widely distributed.
StopNCII.org can help adults prevent participating platforms from sharing intimate images.
Take It Down can help remove or prevent the sharing of intimate images involving someone under 18.
These services work by creating a secure digital fingerprint of the image or video without requiring you to publicly upload the content.
Approaches to dealing with content for ransom
Every situation is different, particularly if you know the perpetrator personally.
Report and work with SAPS - Report the incident to SAPS and request a case number.
Clearly explain if the perpetrator is threatening to release:
Intimate images
Private information
Documents
Communications
Videos
unless you pay money or comply with other demands.
If the incident also involves:
Domestic abuse
Stalking
Sexual violence
Child exploitation
Threats of physical harm
Immediate safety concerns
make this clear when reporting, as it may affect the support and protection available.
Limit the perpetrator’s ability to contact you - Where appropriate:
Block the perpetrator after preserving evidence.
Restrict who can contact you on social media.
Review your privacy settings.
Consider temporarily deactivating (rather than deleting) social media accounts if advised to do so.
For Facebook, temporarily deactivating your account instead of deleting it preserves information that may assist investigators while allowing you to reactivate it later.
Also monitor any linked accounts in case the perpetrator attempts to contact you elsewhere.
Try to get the content removed - If the content has already been shared online:
Report it using the platform's reporting process.
Request that it be removed.
Ask whether the platform can prevent future uploads of the same content where available.
Consider warning trusted contacts -The perpetrator may threaten to send the content to your friends, family, employer, or colleagues. Follow SAPS advice first. Where appropriate, you may wish to warn trusted contacts not to open unexpected messages or files relating to you. Some victims choose to tell contacts they have been targeted by criminals and ask them not to engage with suspicious messages.
Support the victim - If the victim is your child, partner, family member, or friend:
Stay calm.
Avoid blaming them.
Reassure them that they are not alone.
Encourage them to report the incident.
Help preserve evidence.
Discourage them from repeatedly viewing the shared content or online comments.
If the incident involves domestic abuse, coercive control, sexual violence, or threats from a current or former partner, consider contacting the Gender-Based Violence Command Centre for specialist support.
If you are the victim, seek support from someone you trust or from an appropriate specialist support organisation.
How Do I Help Prevent This Happening Again?
Share sensitive information carefully - Only share sensitive information, images, or videos with people you trust and only where necessary.
Be cautious when sharing intimate content online - Be cautious about creating or sharing intimate images or videos using webcams, smartphones, or other digital devices.
Once digital content has been shared, you lose control over how it may be copied or distributed.
Be careful who you connect with - Do not accept friend requests or direct messages from strangers.
If using dating platforms:
Consider using a separate email address.
Avoid using an email address that contains your full name or other identifying information.
Protect your online privacy & security - Reduce the amount of personal information available online.
Review your social media privacy settings regularly.
Use:
Strong, unique passwords
Multi-factor authentication (MFA) where available
Up-to-date devices and applications
Review your online profiles and remove information that could be used to identify, locate, or manipulate you.
Donate
Your generosity makes our free support possible. Please consider giving today.
Without donations, we cannot keep our service free or provide help to the most vulnerable victims of cybercrime when they need it most. As a not-for-profit organisation, every donation goes directly towards keeping The Cyber Helpline up and running. Donate now and help us support victims of cybercrime.