Online Blackmail and Sextortion in Pakistan: Immediate Steps and Legal Remedy

Sextortion follows a script. Contact is made, often through a fake profile of an attractive stranger; a conversation moves to video; images or recordings are captured; and a demand for money follows with a threat to send everything to your contact list. The script is designed to make you feel isolated and ashamed so that you pay quickly and quietly. Understanding that it is a script, run at scale against thousands of people, is the first step to handling it correctly.

The first hour

1. Stop responding. Every reply confirms the account is live and valuable. Silence is not agreement; it removes their leverage over the conversation.
2. Do not pay. Payment marks you as someone who pays. In the overwhelming majority of cases the demand is repeated, and often increased, after the first payment.
3. Screenshot everything now. The profile with its URL or handle visible, the threats, the demand, the payment details, and the timestamps.
4. Do not delete the conversation. Whatever your instinct, the original thread on your device is the evidence.
5. Lock down your accounts. Set profiles to private, tighten who can see your friend or follower list, and change passwords with two-factor authentication enabled.
6. Warn one trusted person. A blackmailer's power rests on your isolation. Telling one family member or friend removes most of it in advance.
7. Call 1991 and report to the platform.

If the victim is a minor, treat it as an emergency and say so explicitly when reporting. Offences involving children are handled with the highest priority by both the FIA and the platforms.

Why paying does not work

Victims pay because it feels like the fastest way to make the problem disappear. In practice:

• The demand repeats. The material is not destroyed, and a paying victim is a proven source of income.
• You are added to a list. Details of victims who pay are traded between groups.
• You lose the leverage of the report. Investigators can trace payment channels; a payment made is also a lead, but paying repeatedly to keep the matter private delays reporting until the trail is cold.
• The threat is often hollow. Mass distribution takes effort and exposes the offender. Many threats are never carried out, particularly once the victim stops engaging.

If you have already paid, that does not end your options. Report it with the transaction details; the payment trail is itself evidence and can help identify the account holder.

The legal position under PECA

Conduct of this kind engages several offences under the Prevention of Electronic Crimes Act 2016, typically involving offences against the modesty and dignity of a natural person, cyberstalking, unauthorised use of identity information, and where a minor is involved, considerably more serious provisions. Extortionate demands may also engage the ordinary criminal law alongside PECA.

PECA has been amended since 2016, and section numbering and penalties have moved. Do not rely on a specific section or sentence length quoted in an older article; take advice on the current provisions before pleading them.

What matters practically is that this is criminal conduct, that a specialist enforcement route exists for it, and that the victim of the blackmail is not the wrongdoer - a point worth stating plainly, because shame is precisely what the offender is exploiting.

Getting the content removed

Run this in parallel with the FIA complaint, because it is usually much faster.

• Report from the content itself on Meta, Instagram, TikTok, X, YouTube or Snapchat, using the non-consensual intimate imagery category where offered. That category is normally prioritised.
• Use proactive hash-matching tools where available. Services exist that let a person submit a hash of an intimate image so participating platforms can block it being uploaded, without the image itself leaving your device.
• Report to PTA, which maintains a complaint channel for unlawful online content.
• Screenshot before every report, since a takedown removes your evidence.

If content has already been sent to contacts, a short factual message to those contacts saying you are the victim of an extortion attempt and have reported it to the FIA takes the weapon away entirely.

Reporting without your identity spreading

The most common reason victims do not report is fear that the report itself will expose them. In practice:

• Complaints are handled by a specialist wing that deals with this category routinely.
• You may attend with a lawyer, and a lawyer can act as the point of contact for follow-up.
• You are not required to display the material publicly; evidence is produced to the investigator.
• Female complainants may ask for the matter to be dealt with by female staff where available.

Where the concern is family reaction rather than the process itself, instructing a lawyer to file and manage the complaint is usually the answer - it keeps the handling professional and the circle small. Our guide on filing an FIA cybercrime complaint sets out the process in full.

Reducing the risk afterwards

• Set social profiles to private and restrict who can see followers and friends, since the contact list is the leverage.
• Enable two-factor authentication everywhere.
• Treat unsolicited video calls from unknown accounts as hostile.
• Be sceptical of new accounts with few posts, stock-looking photographs and rapid escalation to private contact.
• Assume anything on camera can be recorded.

If your account was compromised rather than impersonated, see recovering a hacked WhatsApp or Facebook account.

Frequently asked questions