# How to Report Blackmail or Sextortion on Facebook > Threatened on Facebook or Messenger over private images or messages? Do not pay, save proof, report, use StopNCII, contact police, and NSRC 997 if money moved. - URL: https://www.awarexone.com/research/how-to-report-blackmail-or-sextortion-on-facebook - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-11-09 - Topics: Facebook, Scams, Malaysia - Related service: Social media content removal: https://www.awarexone.com/social-media-recovery/social-media-content-removal ## Short answer Do not pay. Save screenshots of the Facebook profile or Messenger threats, report the chat and account through official menus, then block. Hash intimate images at StopNCII.org on your own device if applicable. Contact the police. If money already moved, call your bank and NSRC 997 at once. ## Summary - Do not pay or send more content; paying rarely ends demands and often escalates them. - Screenshot the profile, Messenger chat and payment demands before you report or block. - Report the conversation on Messenger and the profile or post on Facebook using threat, harassment or intimate image categories. - StopNCII.org hashes intimate images on your device to help block re-uploads on participating platforms. - Contact local police; platform reports do not replace law enforcement for active threats. - If money was sent, call your bank and the National Scam Response Centre on 997 immediately. A Messenger message threatens to share a private photo unless you pay by tonight. A Facebook profile you barely know demands money or it will post your chat history. The panic pushes people to pay quietly, which is what the attacker wants. The order below is what victim support organisations and Meta's own intimate-image guidance converge on. This guide is for blackmail and sextortion on Facebook and Messenger specifically: what to do in the first minutes, how to report, how StopNCII fits, and Malaysian steps when money has already moved. Last checked: 9 November 2026. ## Quick Answer Stop replying and do not pay. Screenshot the profile, every Messenger message and any payment details with dates visible. Report the Messenger conversation using [Messenger report steps](https://www.facebook.com/help/messenger-app/833709093422928) and report the profile or any public post through [Facebook reporting](https://www.facebook.com/help/181495968648557), choosing threats, harassment or intimate images as the category. Meta's page on [intimate images shared without consent](https://www.facebook.com/help/174220649595795) covers non-consensual sharing. If you hold the image on your device, open a case at [StopNCII.org](https://stopncii.org/faq/). Contact the police. If money moved, call your bank and NSRC 997. ## The First Ten Minutes 1. Stop responding. Further replies show someone is reading. 2. Do not pay and do not send more images, video or money. 3. Screenshot profile URL, username and full chat with timestamps. 4. Note bank accounts, e-wallets or links the attacker sent. 5. Do not delete the chat yet; you need it for reports and police. > Warning: **This is not your fault.** Threatening to share intimate images or private messages without consent breaches Meta's standards. The person demanding payment broke the rules, not you. ## How to Report on Messenger and Facebook Messenger threats usually need a chat-level report. Open the conversation, tap the name, and choose Report, following Meta's [Messenger reporting page](https://www.facebook.com/help/messenger-app/833709093422928). Also report the linked Facebook profile if one exists. For public posts threatening exposure, use Report on the post. Facebook's [bullying and harassment page](https://www.facebook.com/help/116326365118751) covers threatening behaviour toward an individual. 1. Capture evidence first. 2. Report the Messenger chat. 3. Report the Facebook profile or post separately if both exist. 4. Block after submitting. 5. Keep copies for police even if content disappears. ## Why You Should Not Pay Payment signals that demands work. Many cases escalate after the first transfer. Reporting, documenting and police involvement are the paths Meta and victim-support groups describe for stopping further contact. Support lines in Malaysia can help you plan next steps calmly without judging how the chat started or what was shared. ## Facebook Dating and Hidden Message Requests Threats sometimes start inside message requests or dating inboxes where victims feel isolated. Report from that inbox using the same Messenger-style flow, then block. If the attacker created a fake romantic profile, add impersonation reporting when they used another person's photos. Screenshot request-folder messages quickly because requests can be deleted by either side. ## Using StopNCII for Intimate Images When the threat involves an intimate photo or video you still have on your device, [StopNCII.org](https://stopncii.org/faq/) creates a hash locally so the image is not uploaded to StopNCII servers. Participating platforms can match that hash to block re-uploads. You must be 18 or older in the image. Under-18 cases use Take It Down instead. StopNCII does not remove a file already on someone else's phone. ## Contact the Police Bring screenshots, profile identifiers and payment details. A threat with extortion demand can be a police matter even before any payment. Facebook enforcement and criminal law run in parallel. In Malaysia, retain copies of police report references alongside your Facebook Support Inbox status so banks and Cyber999 can tie platform and criminal files together if you escalate later. ## Malaysia: Money Already Sent - Call your bank fraud line immediately. - Call the National Scam Response Centre on [997](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline). - Notify [Cyber999](https://www.cybersecurity.my/portal-main/services/cyber999-overview) for incident support. - File a police report with your evidence folder. ## If the Threat Moves from Facebook to WhatsApp Blackmailers often push victims to WhatsApp or Telegram for payment details. Report on Facebook and Messenger first, then follow the official route on the other app without deleting evidence. Our [sextortion in Malaysia](https://www.awarexone.com/research/sextortion-social-media-malaysia) guide covers cross-platform patterns. Keep one chronological log across apps for the police. ## Supporting Someone Else Who Is Being Blackmailed If a friend shows you threats, help them screenshot and report from their own account. Do not negotiate with the attacker on their behalf, since that confirms someone is engaging. Escort them to make a police report when they are ready. You can sit with them while they use StopNCII on their own device, but you should not handle intimate images for them. ## What Not to Do - Do not negotiate in public comments. - Do not send intimate content to prove you will comply. - Do not pay recovery sellers who contact you after the first loss. - Do not delete evidence when ashamed; investigators need it. ## Logging Out Other Sessions After a Threat If the blackmailer had any hint of your Facebook password, change it and review Security and login settings for unfamiliar devices after you report. Turn on two-factor authentication if it is off. Log out sessions you do not recognise. This does not stop a threat on its own, but it closes a common path attackers reuse after first contact through a compromised session or reused password. ## When a Case Review Makes Sense Single-threat cases are often handled with police and platform reports alone. SocialSafe by AwareXone helps when blackmail spans Facebook, Instagram and Messenger, targets a business Page, or evidence needs organising under stress. Read [how we work](https://www.awarexone.com/trust). Deepfake threats use manipulated images rather than originals. StopNCII's FAQ notes that deepfakes portraying you may qualify for hashing when you meet their age and ownership rules. Report the Messenger or Facebook content as intimate imagery or harassment matching what was sent, and tell police the file may be synthetic. Do not forward the file to acquaintances; share hashes or police references instead. Keep a single timeline document with report dates, police report numbers and bank call references. That makes it easier to hand evidence to investigators without retelling the story from memory under stress. ## Frequently Asked Questions ### Should I block on Messenger before reporting? Screenshot first, report, then block so you keep message proof. ### Will the blackmailer know I reported them? Standard Facebook and Messenger reports are anonymous to the reported party. ### Does reporting remove an image already sent? Reporting can lead to removal on Meta platforms and matching technology per Meta's intimate-image help page, but it cannot delete a copy on the attacker's device. ### Is sextortion different from blackmail on Facebook? Sextortion is blackmail tied to sexual images or video. Report using intimate image or threat categories that match what is being threatened. ### Can AwareXone make Facebook delete the messages? Only Meta can act on its systems. SocialSafe by AwareXone helps you file accurate reports and never asks for passwords or intimate files. ## Official sources - [Facebook Help Center: Bullying and harassment (read 9 November 2026)](https://www.facebook.com/help/116326365118751) - [Facebook Help Center: Report content on Facebook (read 9 November 2026)](https://www.facebook.com/help/181495968648557) - [Facebook Help Center: Intimate images shared without consent (read 9 November 2026)](https://www.facebook.com/help/174220649595795) - [Facebook Help Center: Report a conversation on Messenger (read 9 November 2026)](https://www.facebook.com/help/messenger-app/833709093422928) - [StopNCII.org: Frequently asked questions (read 9 November 2026)](https://stopncii.org/faq/) - [MyGOV: NSRC 997 Hotline (read 9 November 2026)](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline) - [CyberSecurity Malaysia: Cyber999 overview (read 9 November 2026)](https://www.cybersecurity.my/portal-main/services/cyber999-overview) --- AwareXone is an independent provider serving clients worldwide, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.