The FBI has issued a public service announcement warning that cybercriminals are targeting adults’ and children’s online accounts, stealing sexually explicit images or videos to blackmail victims or sell on criminal marketplaces. This malicious activity is known as sextortion, where attackers threaten to leak private content unless the victim pays them or provides more intimate images.
The hackers use various tactics to gain access to their targets’ accounts, including phishing emails and unsolicited text messages claiming an account will be disabled unless a verification code is provided. Once they have valid credentials, they can post or sell the stolen content on criminal marketplaces, often accompanied by personal information about the victim that was obtained from their online profiles.
The FBI warns that victims of sextortion may face further harassment, stalking, or other targeted attacks after the initial breach. Student-athletes are particularly vulnerable to these schemes, with the NCAA and FBI warning coaches and athletic department leadership to raise awareness within their schools and communities. The agencies advise against storing explicit photos or videos on social media accounts or Internet-accessible sites, instead recommending that users employ complex passwords and enable multi-factor authentication whenever possible.
The FBI has identified several indicators associated with these schemes, including unsolicited text messages claiming an account will be disabled absent a verification code and unsolicited emails referencing a new login with an embedded link to reset a password. Legitimate platforms or services will not request verification codes or temporary passwords from users, so it’s essential to be cautious when responding to such messages.
Sextortionists face severe penalties if caught and sentenced, including decades-long prison sentences. In May, a Canadian man was sentenced to 33 years in prison for targeting over 145 children across the United States in an eight-year-long sextortion scheme. To prevent falling victim to these attacks, it’s crucial to be aware of the tactics used by hackers and take steps to protect your online accounts.
If you receive an unsolicited message asking for a verification code or password reset link, do not respond. Instead, contact the platform or service directly to verify the request. Additionally, use complex passwords that don’t include easily accessible information such as names or dates of birth, and enable multi-factor authentication whenever possible. By being vigilant and taking proactive measures to secure your online accounts, you can significantly reduce the risk of falling victim to these malicious schemes.
Source: Bleeping Computer — 2026-08-12