Threatened on Facebook or Messenger over private images or messages? Do not pay, save proof, report, use StopNCII, contact police, and NSRC 997 if money moved.
Do not pay. Save screenshots of the Facebook profile or Messenger threats, report the chat and account through official menus, then block. Hash intimate images at StopNCII.org on your own device if applicable. Contact the police. If money already moved, call your bank and NSRC 997 at once.
SummaryA Messenger message threatens to share a private photo unless you pay by tonight. A Facebook profile you barely know demands money or it will post your chat history. The panic pushes people to pay quietly, which is what the attacker wants. The order below is what victim support organisations and Meta's own intimate-image guidance converge on.
This guide is for blackmail and sextortion on Facebook and Messenger specifically: what to do in the first minutes, how to report, how StopNCII fits, and Malaysian steps when money has already moved.
Last checked: 9 November 2026.
Stop replying and do not pay. Screenshot the profile, every Messenger message and any payment details with dates visible. Report the Messenger conversation using Messenger report steps and report the profile or any public post through Facebook reporting, choosing threats, harassment or intimate images as the category. Meta's page on intimate images shared without consent covers non-consensual sharing. If you hold the image on your device, open a case at StopNCII.org. Contact the police. If money moved, call your bank and NSRC 997.
Messenger threats usually need a chat-level report. Open the conversation, tap the name, and choose Report, following Meta's Messenger reporting page. Also report the linked Facebook profile if one exists. For public posts threatening exposure, use Report on the post. Facebook's bullying and harassment page covers threatening behaviour toward an individual.
Payment signals that demands work. Many cases escalate after the first transfer. Reporting, documenting and police involvement are the paths Meta and victim-support groups describe for stopping further contact. Support lines in Malaysia can help you plan next steps calmly without judging how the chat started or what was shared.
Threats sometimes start inside message requests or dating inboxes where victims feel isolated. Report from that inbox using the same Messenger-style flow, then block. If the attacker created a fake romantic profile, add impersonation reporting when they used another person's photos. Screenshot request-folder messages quickly because requests can be deleted by either side.
When the threat involves an intimate photo or video you still have on your device, StopNCII.org creates a hash locally so the image is not uploaded to StopNCII servers. Participating platforms can match that hash to block re-uploads. You must be 18 or older in the image. Under-18 cases use Take It Down instead. StopNCII does not remove a file already on someone else's phone.
Bring screenshots, profile identifiers and payment details. A threat with extortion demand can be a police matter even before any payment. Facebook enforcement and criminal law run in parallel. In Malaysia, retain copies of police report references alongside your Facebook Support Inbox status so banks and Cyber999 can tie platform and criminal files together if you escalate later.
Blackmailers often push victims to WhatsApp or Telegram for payment details. Report on Facebook and Messenger first, then follow the official route on the other app without deleting evidence. Our sextortion in Malaysia guide covers cross-platform patterns. Keep one chronological log across apps for the police.
If a friend shows you threats, help them screenshot and report from their own account. Do not negotiate with the attacker on their behalf, since that confirms someone is engaging. Escort them to make a police report when they are ready. You can sit with them while they use StopNCII on their own device, but you should not handle intimate images for them.
If the blackmailer had any hint of your Facebook password, change it and review Security and login settings for unfamiliar devices after you report. Turn on two-factor authentication if it is off. Log out sessions you do not recognise. This does not stop a threat on its own, but it closes a common path attackers reuse after first contact through a compromised session or reused password.
Single-threat cases are often handled with police and platform reports alone. SocialSafe by AwareXone helps when blackmail spans Facebook, Instagram and Messenger, targets a business Page, or evidence needs organising under stress. Read how we work.
Deepfake threats use manipulated images rather than originals. StopNCII's FAQ notes that deepfakes portraying you may qualify for hashing when you meet their age and ownership rules. Report the Messenger or Facebook content as intimate imagery or harassment matching what was sent, and tell police the file may be synthetic. Do not forward the file to acquaintances; share hashes or police references instead.
Keep a single timeline document with report dates, police report numbers and bank call references. That makes it easier to hand evidence to investigators without retelling the story from memory under stress.
More free guides on the same kind of problem.
