The FBI has issued a public service announcement warning that cybercriminals are deliberately targeting people’s social media and other online accounts to steal sexually explicit images or videos. Once stolen, the content is used in several ways: to blackmail victims directly, to sell on criminal marketplaces alongside personal information like names, email addresses, phone numbers, and dates of birth, or to hand off to other criminals who then pressure victims into providing more explicit content — a cycle the FBI describes as “re-victimization.” The attackers gain access through social engineering: fake text messages claiming your account will be disabled unless you enter a verification code, or phishing emails with a link to reset your password. The bureau has also issued a joint advisory with the NCAA specifically about student-athletes being targeted through their athletic department accounts and social profiles.
The FBI’s guidance is clear on several points. Legitimate platforms will never send an unexpected text asking for a verification code or a PIN reset code — any such message is a red flag to stop and disregard. Strong, unique passwords (not based on personal information like birthdays or names) and multi-factor authentication are the primary defenses. The bureau also recommends against storing explicit photos or videos on social media accounts or any internet-accessible service. If you receive a threat involving stolen content, do not pay — contact local law enforcement or report to the FBI’s Internet Crime Complaint Center (IC3.gov). Paying does not stop the harassment and confirms to criminals that you are a reachable target.