The conversation starts off too well. On the other side of the screen is someone strikingly friendly, who smiles a lot, compliments you within seconds and suggests moving to another app that's "more private." Twenty minutes later, you receive a screenshot of yourself, a list of your contacts and a deadline: forty-eight hours to pay. You haven't been hacked. You've been staged.
Sextortion — blackmail using intimate video — is now the most organized criminal risk on random video chat. This is neither a rumour nor an anxious parent's fantasy: in France, Cybermalveillance.gouv.fr ranks webcam blackmail among the most common requests for help it receives from individuals, and the Interior Ministry devotes dedicated guidance to it through its online complaint platform THESEE. In the United States, the FBI issued a national alert on "financial sextortion" as early as December 2022, targeting teenagers and young adult males in particular.
We've already covered moderation and reporting, what parents need to know and your rights under the GDPR. This article digs into an angle we've never isolated before: the scam's script itself, minute by minute, and what to do once the trap has sprung.
This isn't a meeting, it's a script
The first useful reflex is to change your frame of reference. The person facing you isn't necessarily improvising: more often, it's an operator running an industrial script, repeated dozens of times a day, sometimes from an organized call-centre-style operation. Investigations by several European police forces and by organizations such as the Internet Watch Foundation describe structured networks with a division of labour: one profile, one video recording, and a "closer" who handles the blackmail.
The practical consequence: what feels to you like rare chemistry is in fact a standardized sequence. And a standardized sequence can be recognized.
The script almost always has five stages:
- The bait — an extremely attractive person, often in a tight close-up, who shows up on chatroulette and never hits "next."
- The acceleration — rapid-fire compliments, verbal intimacy wildly out of proportion to the thirty seconds that have elapsed.
- The move — an immediate suggestion to migrate to a private messaging app ("moderation here is terrible," "we'll have more privacy").
- The escalation — encouragement to undress, often by setting the example with a pre-recorded video.
- The turn — screenshot, threat to send it to your family and colleagues, demand for payment in prepaid cards or cryptocurrency.
The tipping point isn't the undressing. It's stage 3, the move to private messaging: that's where you leave the moderated zone and enter territory the other person controls.
The signs that give away a pre-recorded video
Many scams don't use a real person live but a recording streamed as though it were a webcam feed. The technique is old, and it leaves visible traces for anyone who knows what to look for.
| Sign | What you see | Why it's suspicious |
|---|---|---|
| Quality that's too good | Sharp image, cinematic lighting, perfect framing | An improvised webcam rarely produces this |
| Looping | A gesture, blink or flick of the hair that repeats identically | File being played on repeat |
| No reaction | You ask for a specific gesture, it never comes | A video can't obey |
| Missing or "broken" audio | "My mic isn't working, just type to me" | Sound would instantly expose the trick |
| Misaligned gaze | The person never truly looks into the lens | They were looking at something else while filming |
The most effective test fits in a single sentence: ask for an unexpected, time-stamped gesture. "Can you hold up three fingers and say my name?" A recorded video will never do it. A real person will do it in two seconds, often laughing. This little test, borrowed from journalists' verification practices, costs ten seconds and eliminates the vast majority of fake profiles.
One caveat, though: the rise of real-time video generation tools makes this test less absolute than it was five years ago. Combine it with everything else: a genuine profile doesn't need to get you to switch apps after two minutes.
The four phrases that should put you on alert
Certain formulations recur with striking consistency in the testimonies gathered by victim support organizations. Hearing one proves nothing on its own; hearing them strung together is a strong signal.
- "Shall we move to WhatsApp / Telegram? This place is rubbish." — a move to an unmoderated channel, plus harvesting your phone number.
- "You're so different from everyone else." — generic flattery, administered within the first three minutes.
- "Show me you trust me." — consent turned into a test.
- "My mic isn't working." — neutralizing the channel that's hardest to fake.
Add one often-overlooked clue: the time of day. Many bait accounts are active during office hours in another time zone, with a response rhythm that's too regular — never tired, never distracted.
What the scammer can actually do — and what's bluff
Panic is what makes people pay. It rests on overestimating the other person's power. Let's set the record straight.
What's real:
- they may have recorded your image and voice during the exchange;
- they may have pulled up your public contacts if you gave a username you reuse elsewhere, a phone number or a social media account;
- they can create an account and send messages to those contacts.
What's almost always bluff:
- "I've hacked your camera and your phone." In the overwhelming majority of cases, no: they simply filmed their own screen. Mass sextortion email campaigns, for that matter, rely on passwords from public data breaches, not on actual access to your machine — a point regularly made by Cybermalveillance.gouv.fr and the CNIL.
- "I know your whole family." They know what your profile displays publicly.
- "Pay up and it all goes away." No documented case supports this. Paying identifies you as a target who can pay, and restarts the demand.
The rule is three words long: never, ever pay. That's the consistent advice from police forces, the FBI and victim support organizations. The first payment buys you nothing; it buys the scammer time.
What to do if the blackmail has started
The first six hours matter. Here's the order that works.
1. Cut contact, but delete nothing. Stop replying. But don't delete the conversation: it's your evidence. Take screenshots of the profile, the messages, the usernames, the payment details requested, the URLs. Note the timestamps.
2. Lock down your social media. Set your accounts to private for a few weeks, hide your friend and follower lists. You're cutting off the main lever: the threat of targeted distribution.
3. Change what can be changed. Passwords on the affected accounts, two-factor authentication switched on. A password manager makes this step bearable, and for sensitive accounts, a physical FIDO2 security key closes the door on credential theft for good.
4. Report it. Three routes in France:
- Pharos (internet-signalement.gouv.fr) for any illegal content;
- THESEE, to file an online complaint for fraud and online blackmail;
- Cybermalveillance.gouv.fr, for an assessment and a referral to professionals.
For content involving a minor, or for any intimate image shared without consent, takedown mechanisms exist: Point de Contact in France, and the international service StopNCII.org, which creates a digital fingerprint of the image to block it from being re-uploaded on major partner platforms — without ever sending the image itself.
5. Tell someone. This is the step everyone skips, and it's the most effective. Blackmail depends entirely on silence. Telling someone close to you "here's what's happening to me" defuses 90% of the threat: if the people around you already know, distribution loses its power.
In France, the 3018 helpline (the national number for digital violence, free, by phone or via its app) supports minors and young adults, and has fast-track reporting channels with the platforms.
Shrinking your exposure before you even log on
Better to close the doors than to deal with a break-in. A few settings, once and for all.
What your webcam sees
A sliding webcam cover settles the anxiety of a permanently open lens, including between sessions. It won't protect you from being recorded during a call, but it removes a background worry — and the act of sliding the cover open becomes a ritual of consent: I decide when I'm visible.
What your background says about you
A framed diploma, mail on the desk, a recognizable view through the window: each of these is an anchor point for tracing your identity. A neutral wall, or an acoustic wall panel that doubles as a backdrop while improving your sound, removes that risk effortlessly. We covered this in detail in our article on what your background says about you.
What you leak without realizing it
- A username you reuse elsewhere: search for it yourself in a search engine and you'll see what the other person sees.
- Your voice in the background calling someone by their first name.
- A notification popping up during screen sharing.
A closed-back USB headset limits sound leakage from your environment, and notifications can be silenced with a single command on every system (Focus mode, Focus Assist, Do Not Disturb).
The human factor: why careful people still get caught
This needs saying plainly, because shame is the fuel of this scam: being a victim of sextortion has nothing to do with intelligence or gullibility. The script exploits universal mechanisms — reciprocity, urgency, flattery, isolation — documented for decades in the literature on social influence, notably by Robert Cialdini in Influence: The Psychology of Persuasion, a book that remains the best available vaccine against this kind of pressure.
Three moments of vulnerability come up again and again in testimonies:
- at night, after midnight, when fatigue lowers your guard;
- during breakups or periods of isolation, when the need for contact outweighs caution;
- in long sessions, where hitting "next" over and over eventually makes any attention feel flattering.
Knowing yourself is often enough. Setting a session length and enforcing it with a desk timer sitting next to your screen is mundane — and far more effective than a resolution.
A five-rule protocol
To close, the short version, the one worth keeping in mind:
- I never switch apps at the request of a stranger I met less than twenty minutes ago.
- I ask for a time-stamped gesture before believing there's someone live on the other end.
- I show nothing I wouldn't show a colleague.
- I never pay, whatever the threat.
- I speak up — to someone close, to a helpline, to the police — in whatever order suits me, but I speak up.
Random video chat isn't a lawless zone, and the vast majority of conversations there go perfectly well. But it is the hunting ground of a well-drilled criminal model that relies neither on technology nor on hacking: it relies on your silence and your panic. Take those two resources away, and it has nothing left.
