Cyber Extortion: How It Works and How to Protect Yourself

This is a case of cyber extortion, and recognising it is the first step towards protecting yourself.

Cyber extortion is a form of cybercrime in which perpetrators use threats involving digital systems, sensitive information or online activity to demand money or another benefit from a victim. According to the National Crime Records Bureau (NCRB) 2024 report, India registered over 1,01,928 cybercrime cases, targeting individuals, businesses and institutions through messaging services, email and social platforms, highlighting the growing importance of cybercrime prevention.

• Data-leak threats: An attacker threatens to publish confidential information.
• Ransomware: Malicious software disrupts access to systems, and attacker demands payment to restore access.
• Image-based extortion: Someone threatens to share intimate images or screenshots of private conversations unless the victim meets their demands.
• Account-related extortion: An attacker threatens to retain control of a compromised account and misuse its contents.
Also Read: What is Sextortion?

1. Pause before responding
Do not rush to comply with the attacker’s instructions, be it to pay, click links, install software etc. Do not assume payment will stop the threats. Avoid arguing with the sender or disclosing further information.
2. Preserve the evidence
Save screenshots of the sender’s messages, timestamps, payment instructions, transaction records. Do not delete material that may help an investigation.
3. Secure your accounts
Reset compromised passwords from a trusted device, enable multifactor authentication. Review account recovery details and active sessions.
4. Address potential technical compromise
If you suspect malware, ransomware or unauthorised access, seek a qualified cybersecurity professional’s help, or notify the IT team promptly.
5. Report and seek support
Contact the appropriate authorities in the below scenarios:
a. Money and banking information
Alert your bank or payment provider immediately via official reporting channels and call 1930 to register the complaint. Seek help from someone trustworthy if you feel overwhelmed.
b.Non-financial extortion threats
Use the portal’s appropriate cybercrime reporting route and contact local police.
c. Other cyber extortion threats
Individuals can report cybercrime in India through the Government’s National Cyber Crime Reporting Portal which accepts reports related to hacking, online offences and ransomware.

In conclusion, cyber extortion exploits uncertainty, fear and pressure to act quickly. They are designed to prevent the victim from seeking independent advice. Do not let their tactics dictate your actions.

Remember, you don’t have to handle a cyber extortion threat alone. Preserve evidence, secure your accounts and seek help through the appropriate channels. Take informed steps to protect yourself and regain control of the situation.