If you are dealing with a hacker demanding money for account access, or someone threatening to post your private photos or messages, do not pay. The FBI says going along with blackmail rarely makes it stop, and the FTC tells victims to ignore the demands. Save the evidence, report the crime and recover the account through the platform’s own process.
Why Paying the Hacker Will Not Get Your Account Back
A payment only shows the attacker that you will pay. Official guidance is consistent:
- The FBI says cooperating rarely stops the harassment, and offenders sometimes share images even after being paid.
- An FBI alert on IC3 warns that complying with extortion does not mean your content will stay private.
- The FTC says don’t pay, and don’t give the person access to your devices or financial accounts.
The FBI says demands usually involve gift cards, payment apps, wire transfers or cryptocurrency. The FTC warns that crypto payments can be hard to get back.
What to Do First, Step by Step
If anyone is in immediate danger, call 911 first. Then work in this order.
- Stop contact. Don’t reply, argue or bargain. The FBI and the FTC both say to cut off communication.
- Do not pay or send anything. No money, gift card codes, photos, passwords or verification codes.
- Save the evidence. Screenshot the messages, the sender’s username and profile link, and every payment request, such as wallet addresses or gift card instructions. The FBI says this helps police find the offender.
- Secure your email and other accounts. The FTC recommends a strong new password, signing out of all devices, two-factor authentication and deleting forwarding rules you didn’t create.
- Report the account to the platform, then block it. Instagram and Facebook both say threats to share intimate content break their rules.
- Report the crime. File at ic3.gov, the FBI’s hub for cyber-enabled crime, or use tips.fbi.gov or 1-800-CALL-FBI. Report money sent at ReportFraud.ftc.gov, and tell local police.
The FTC also suggests warning friends to ignore money requests from your account. For a timed plan, see what to do in the first 60 minutes after a hack.
If They Threaten to Share Private Images
Threatening to post private images unless you pay is called sextortion, and it is a crime. The FBI tells young victims they are not the one in trouble, and Instagram says it isn’t your fault.
- Tell someone you trust. The FBI and Facebook both urge teens to talk to a trusted adult, such as a parent or school counselor.
- Images taken when you were under 18: use NCMEC’s Take It Down. It makes a digital fingerprint (a hash) on your device, so the image never leaves it, and participating platforms use the hash to remove copies. It is free and anonymous.
- Taken at 18 or older: use StopNCII.org, a free tool from the Revenge Porn Helpline that works the same way, with partner platforms only.
- Already posted: the FTC says platforms must remove a reported intimate image within 48 hours. If one doesn’t, report it at TakeItDown.ftc.gov.
On Snapchat, report the account under Nudity and Sexual Content and choose “They leaked / are threatening to leak my nudes.” If you are thinking about hurting yourself, please get support now.
Recovering the Account Through Official Channels
Each platform has its own free recovery flow.
- Instagram: go to instagram.com/hacked. If security@mail.instagram.com emails you about an email change, select secure my account in that message, or tap Forgot password? to request a login link. See how to recover a hacked Instagram account.
- Facebook: use facebook.com/hacked on a device you have logged in with before. Facebook emails your old address a link that reverses an email change. See recovering a hacked Facebook account.
- Snapchat: change your password, end unknown sessions in Session Management and confirm your email and phone number. Read our Snapchat hacked account recovery guide.
- WhatsApp: tap Log back in and enter the 6-digit code, which logs other devices out. If an unknown two-step PIN blocks you, WhatsApp says to wait 7 days.
Where to Report Each Threat
| Threat | Where to report | What that body can do |
|---|---|---|
| Account taken over | The platform’s recovery page | Only the platform can restore access |
| Demand for money | ic3.gov, tips.fbi.gov, local police | IC3 refers complaints to law enforcement; it does not investigate itself |
| Money already sent | ReportFraud.ftc.gov and your payment provider | The FTC shares reports with over 2,000 law enforcers but can’t resolve individual reports |
| Images of someone under 18 | NCMEC CyberTipline (report.cybertip.org), the FBI, Take It Down | NCMEC routes each tip to the right agency; Take It Down helps platforms remove copies |
| Images of an adult | Police, the FBI, the platform, StopNCII.org | Police can investigate; platforms must remove reported intimate images within 48 hours |
| Immediate danger | 911 | Emergency help now |
What Not to Do, Including Fake Recovery Hackers
Scammers target hacking victims. In October 2026 the FTC announced a lawsuit against a company it says falsely promised to stop sextortion threats while charging thousands of dollars.
- Don’t pay anyone who offers to break into your account or silence a blackmailer.
- Don’t pay for image removal or help with threats. The FBI says victims should never pay for that help, and flags upfront fees and advice to avoid police as warning signs.
- Don’t call “Meta support” numbers. Meta says it has no general public support line.
- Don’t share passwords or login codes. Snapchat says its staff will never ask.
- Don’t report the WhatsApp account you are recovering; WhatsApp may ban it.
See how to spot fake account recovery services for more red flags.
When to Get Professional Help
If the official flow fails, a structured case can help. AccRevert reviews the case, organizes your ownership evidence and prepares a documented recovery request submitted through the platform’s official channels. Only the platform decides the outcome, so no result is promised, and we never ask for your password or login codes.
We do not contact, negotiate with or pay the people holding your account. Threats and extortion should be reported to law enforcement, and image removal help from NCMEC and StopNCII is free. Our work covers getting your account back.
Pricing: a flat $299 case-preparation fee opens a case; a success fee of $599 for personal accounts, $999 for business accounts or $1,199 for Business Manager and ad accounts applies only if access is restored. Payment is by PayPal only. See our Hacked Account Recovery service.
Frequently Asked Questions
Will the hacker give my account back if I pay?
There is no reason to expect it. The FBI says cooperating with blackmailers rarely ends the harassment, and an FBI alert warns that complying with extortion does not keep your content private. Use the platform’s official recovery flow instead, and report the demand to IC3 and your local police.
Am I in trouble if I sent private photos to this person?
If you are a minor, the FBI’s answer is no: you are not the one breaking the law, even if you agreed to make the content or accepted something in return. For everyone, Instagram says it isn’t your fault. Report it, tell someone you trust, and use Take It Down or StopNCII to limit the spread.
Should I delete the threatening messages?
Not before you save them. Screenshot the conversation, the sender’s username and profile link, and any payment instructions. IC3 does not accept attachments with complaints, so keep the originals somewhere safe in case an investigating agency asks for them later. Then block the account.
What if I already sent money or gift cards?
Stop paying, since the FBI says cooperating rarely stops the blackmail. The FTC says to contact the gift card company using the number on the back of the card and keep the card and receipt, or contact the crypto exchange or wire service right away. Then report it at ReportFraud.ftc.gov and to IC3.
Final Checklist
- Stop replying and do not pay.
- Screenshot messages, usernames and payment requests.
- Secure your email with a new password and two-factor authentication.
- Start the platform’s official recovery flow.
- Report the account in the app, then block it.
- Report to IC3 or police, and to ReportFraud.ftc.gov if you paid.
- For images, use Take It Down or StopNCII and tell someone you trust.
Is a hacker still holding your account? Open your recovery case with AccRevert: a flat $299 case-preparation fee starts the work, and the success fee ($599 personal, $999 business, $1,199 Business Manager or ad account) applies only if access is restored.
Related Articles
Stop guessing and document the case properly.
Our team can review the account history, available ownership evidence and the recovery steps already attempted.
“Someone May Have Accessed Your Account” on Facebook: What to Do
Copyright Violation Scam on Instagram and Facebook: How to Spot It
