Deepfake Sextortion via Social Media Hijack — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Apr 30, 2026

Severity: CRITICAL | View Full Scam Details

🛡️ Want to check if you've received this scam?

Deepfake Sextortion via Social Media Hijack in India 2026: A Growing Cybercrime Threat

The rise of deepfake sextortion scams in India is placing millions of social media users, especially women, at risk of severe emotional trauma and financial loss through fraudulent demands over UPI and cryptocurrency.

What Is the Deepfake Sextortion via Social Media Hijack?

Deepfake sextortion via social media hijack is a dangerous new form of cybercrime that uses synthetic media technology to create realistic fake videos or images of individuals, usually in compromising or pornographic scenarios, to blackmail them. In India, this scam primarily targets women active on platforms like Instagram, Facebook, and WhatsApp, but men are increasingly vulnerable too.

Scammers start by collecting publicly available photos—often selfies or profile pictures—scraped from social media accounts. Using AI-powered tools, they generate manipulated videos or images that look authentic enough to deceive victims into believing they are real. The perpetrators then contact victims pretending to be friends, acquaintances, or sometimes government officials, leveraging the trust to lure them into conversation.

This scam is alarmingly widespread in India, fueled by the large user base of social media and the ease of transferring money instantly via UPI apps. The Indian cybercrime ecosystem, including agencies like the Indian Computer Emergency Response Team (CERT-In) and the Inter-Ministerial Cyber Crime Coordination Centre (I4C), have recently flagged deepfake sextortion as a critical threat, urging users to stay alert.

How This Scam Works — Step by Step

Data Collection: Scammers scrape photos and personal details from the victim’s public social media profiles—Instagram, Facebook, or WhatsApp display pictures.
Creating the Deepfake: Using AI-based tools, they generate fake pornographic videos or images with remarkable realism, superimposing the victim’s face onto compromising content.
Initial Contact: The scammer reaches out on WhatsApp or Instagram, pretending to be a mutual friend, an acquaintance, or sometimes someone posing as an official (like a government agent or bank representative).
Building Trust: The scammer engages the victim in casual conversation to gain their confidence, sometimes referencing familiar details from the victim’s social media to appear legitimate.
The Threat: Suddenly, they “accidentally” send or show a portion of the deepfake content and threaten to circulate it widely on social media or to the victim’s contacts unless a ransom is paid.
Demand for Payment: The amount demanded is usually INR 30,000-1,00,000, requested through UPI apps like Google Pay, PhonePe, or via cryptocurrency transfers, making recovery difficult.
Pressure to Pay Quickly: Scammers use intimidation, emotional blackmail, and threat of reputational damage to make victims pay immediately, often before verifying the content’s authenticity.
Continuation or Escalation: If victims pay, scammers might demand more money or intimidate them further to extract additional sums.

Real Warning Signs to Watch For

Unsolicited messages from unknown or newly created social media accounts claiming to know you.
Profiles with few friends/followers but oddly detailed personal information.
Requests for urgent payments via UPI or cryptocurrency with threats of sharing “explicit videos.”
Poor grammar mixed with casual references to your social life or location.
Scammer sending partial images or videos to trap you emotionally or shame you.
Pressure to pay immediately without giving you time to verify.
Claiming official status (e.g., “Cyber Crime Officer”) but refusing to share verifiable contact info.

What Happens to Victims

Victims of deepfake sextortion often face both financial and emotional devastation. Beyond losing money via UPI transactions—which are almost instantly irreversible—many experience severe stress, anxiety, and social stigma. Some fall prey to other linked crimes like SIM swap fraud, which can give scammers control over victims’ phone numbers and Aadhaar-linked services. This opens doors to further identity theft and access to bank accounts.

The stigma attached to alleged explicit content circulation ruins reputations and relationships, pushing some victims into social isolation. In India’s conservative society, such threats intensify fear, keeping many from speaking up.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) advises users to exercise caution before authorizing any UPI payments, especially when demanded under threats or pressure. RBI’s official helpline for banking fraud is accessible for immediate assistance.

CERT-In, India’s national cybersecurity agency, has issued alerts highlighting the rise of deepfake-related cybercrimes and sextortion fraud. The agency urges social media users to report suspicious accounts and messages promptly and recommends not sharing personal photos widely online. The Inter-Ministerial Cyber Crime Coordination Centre (I4C) actively monitors such scams and encourages victims to call the 1930 cybercrime helpline for guidance.

How to Protect Yourself

Limit Public Exposure: Remove or restrict access to your personal photos and information on public or friend-only social media profiles.
Verify Contacts: Don’t trust unsolicited messages, even if the sender claims to be a friend or official. Confirm identities through separate channels.
Never Pay Under Threat: Do not transfer money via UPI or cryptocurrency under pressure. Consult trusted friends or authorities first.
Use Strong Privacy Settings: Enable two-factor authentication (2FA) on WhatsApp, Instagram, and other platforms.
Report Suspicious Accounts: Use platform tools to block and report fake profiles immediately.
Educate Your Circle: Inform friends and family about this scam to prevent wider victimization.
Keep Contact Info Updated: Maintain updated phone and email contacts with banks and Aadhaar to quickly detect fraud like SIM swaps.

What to Do If You've Been Targeted

Do Not Pay: Avoid sending any money or sharing further personal data.
Document Evidence: Save all messages, videos, and account details related to the scam.
Report to Cybercrime Authorities: File a complaint at cybercrime.gov.in and call the 1930 cybercrime helpline for help.
Contact Your Bank and UPI Provider: Immediately notify your bank and UPI app support to block or freeze your accounts if payments have been made.
Inform Your Mobile Operator: Report suspected SIM swap or theft immediately.
Seek Emotional Support: Reach out to friends, family, or professional counselors to handle emotional stress.
Report Fake Profiles on Social Media: Block and report accounts impersonating you or spreading false content.

Frequently Asked Questions

Q: Can I recover money sent through UPI in a sextortion scam?
A: UPI transactions are generally instant and irreversible. If you’ve been scammed, report to your bank immediately. While RBI can guide, full recovery is rare, so prevention is key.

Q: How do I know a video or image is a deepfake?
A: Deepfake content often appears unnaturally smooth or inconsistent in facial expressions. If someone threatens to share such content, stay calm and verify with trusted help before reacting.

Q: What if the scammer threatens to involve law enforcement?
A: Government officials never demand money electronically or threaten in personal chats. Always verify verbally with local police or cybercrime authorities before complying.

Stay alert and safeguard your online presence. If you receive suspicious messages or threats, don’t panic—instead, verify the claim immediately at BharatSecure.app, India’s trusted digital fraud awareness platform. Your safety and peace of mind matter most.