
How to know you’re being extorted
Extortion isn’t just something that happens in crime movies. It’s happening right now across Australia and online, through email, on social media, and even by phone. Many people don’t even realise they’re being extorted until it’s too late. So, how can you tell if it’s happening to you?
This guide breaks it all down in a way that’s simple, practical, and based on real threats Australians are facing in 2025.
What Is Extortion?
Extortion is when someone tries to threaten, manipulate, or pressure you into giving them money, services, or personal information and often using fear, online blackmail, or intimidation.
It doesn’t always look like a movie-style ransom note. It can be:
- An email saying someone has your private photos.
- A message claiming your data has been hacked.
- A scammer threatens to send fake information to your friends or employer unless you pay.
In legal terms, under Australian law, extortion includes any threat made to gain benefit or cause loss, and it is a criminal offence in every state and territory.
Common Types of Extortion Scams in Australia
Extortion has evolved with technology. Here are the most common forms Australians are seeing in 2024–2025:
1. Sextortion
This is a type of blackmail where scammers claim they have sexual images or videos of you and demand money or cryptocurrency to stop them from sharing it.
Sometimes:
- The photos are fake.
- The scammers don’t even have access to your device.
- They send the same message to thousands of people, hoping someone will fall for it.
Fact: According to the eSafety Commissioner, sextortion cases in Australia tripled between 2022 and 2024, with teenagers and men under 30 being the most targeted.
2. Ransomware Attacks
This type of cyber extortion involves cybercriminals locking or stealing your digital files and then demanding a ransom to release them. These attacks target both individuals and businesses.
In Australia, ransomware has become one of the top threats to small businesses. The ACSC (Australian Cyber Security Centre) reported a 20% increase in ransomware incidents in 2024, many involving extortion-style threats to leak data publicly.
3. Impersonation and Reputation Threats
Scammers threaten to ruin your reputation by claiming they will:
- Expose “secrets” (real or made-up)
- Tell your employer you did something wrong
- Post fake reviews or damaging photos online
They may even impersonate law enforcement, immigration officers, or the ATO.
4. Business Email Compromise (BEC)
This scam targets businesses, where scammers gain access to a company email account and demand payment by pretending to be a senior executive.
In 2024, Australian businesses lost over $80 million to BEC scams, many of which involved extortion after a fake invoice wasn’t paid.
5. “Hitman” Scams
These are rare but terrifying. You receive an email from someone claiming to be a hitman or criminal threatening to hurt you unless you send money.
They often use dramatic language like:
“I’ve been hired to kill you. Pay $3,000 and I’ll spare your life.”
Most of these are completely fake scare tactics aimed at triggering panic.
How to Know You’re Being Extorted
Sometimes it’s obvious. Other times, the scam is subtle and sneaky. Here’s how you can tell:
You’re being threatened
Any message or call where someone threatens to:
- Expose private info
- Harm your reputation
- Cause physical harm
- Leaked documents or media
- Damage your business or credit
… in exchange for something? That’s extortion.
They demand money or favours
Scammers often ask for:
- Cryptocurrency (Bitcoin, Ethereum)
- Gift cards (Apple, Google Play)
- Bank transfers
- “Help” with moving money or making introductions
Legitimate authorities or companies will never ask you for payment in these ways.
There’s a strong sense of fear or urgency
They want you to act fast, before you can think clearly or talk to someone. If the message says “you have 24 hours” or “don’t tell anyone,” it’s almost always a scam.
It feels personal
They might include:
- Your email address
- A password you once used (from a data breach)
- A photo from your social media
That doesn’t mean they have access to your accounts, and it just means they’re using publicly available data to scare you.
What To Do If You’re Being Extorted
First and foremost: Don’t panic. You have options.
1. Do NOT pay
Paying extortionists rarely ends the problem in fact, it often makes things worse. Once they know you’re willing to pay, they may come back for more.
2. Cut off all communication
Block their number, email address, or profile. Don’t respond, even to threaten back or call them out. They want a reaction. Don’t give it.
3. Save all evidence
Take screenshots, save emails, and record messages. This will help when reporting the incident. If you’re dealing with online sextortion, don’t delete any of the conversations.
4. Report it immediately
Depending on the type of extortion, report it to:
- CypherGuard – for scam analysis and cyber investigation
- eSafety Commissioner (esafety.gov.au) – for online abuse, sextortion, or image-based abuse
- Scamwatch (ACCC) – for scam threats and fake services
- Police – if you’re being physically threatened or stalked
You can also contact:
- ACSC (cyber.gov.au) – for ransomware and cyber extortion cases
5. Tell someone you trust
Don’t deal with it alone. Speak to a friend, family member, colleague, or therapist. Extortion relies on isolation and shame, and breaking that silence is your power.
How to Prevent Extortion Scams
Being targeted isn’t your fault, but there are smart steps you can take to protect yourself moving forward:
Strengthen your digital security:
- Use strong, unique passwords
- Turn on two-factor authentication (2FA)
- Keep your software and antivirus updated
- Don’t reuse old passwords from other sites
Limit what you share online:
- Avoid oversharing on social media
- Set your profiles to private
- Don’t share sensitive photos, videos, or financial details, even with people you trust (they can get hacked)
Be wary of unusual messages:
- Don’t click on links from unknown senders
- Don’t open suspicious attachments
- Double-check email addresses and contact numbers
Common Questions
Is it really extortion if no money changes hands?
Yes. If someone threatens you to gain an advantage, even if they don’t succeed, it’s still extortion under Australian law.
What if the threat involves real personal information?
Scammers often use data from breaches, like old passwords or hacked social accounts. That doesn’t mean they have full access to you, it’s often bluffing. But still, take action immediately and change your passwords.
Can I go to jail for responding or paying?
No, you are the victim, not the criminal. But if you’re unsure about what was shared or if something illegal occurred, seek legal advice or contact CypherGuard for confidential support.
You’re Not Alone
Extortion is scary, but it’s also survivable. Scammers rely on your silence and fear, but when you know what to look for and how to act, you take back the power.
If you or someone you know is experiencing any kind of digital threat, CypherGuard is here to help. Our cyber intelligence team will assess the risk, investigate the source, and support you in locking down your digital life. No shame, no blame, just help when you need it most.
Need help or advice right now?
📩 Contact CypherGuard for confidential support.
🛡️ Stay informed. Stay protected.