The technology exists. What is missing is adequate response.
Across Australia's digital landscape, a predatory crime is quietly reshaping the online coming-of-age experience for young men and boys. In the six months ending December, more than 2,200 complaints reached the eSafety Commissioner's office — each one a story of manipulation, shame, and financial coercion carried out through the platforms that define modern social life. The regulator's warning is not merely about a spike in statistics, but about a society's failure to protect its most digitally exposed generation from those who have learned to weaponise intimacy itself.
- A 16-year-old named Sam connected with a stranger on Instagram, shared a private image within minutes, and was immediately threatened with exposure unless he paid $200 — a script being recycled across thousands of identical scams.
- Young men aged 18 to 24 filed 803 complaints in just six months, while children under 15 — boys and girls alike — account for hundreds more, revealing that no age of digital curiosity is beyond reach of these schemes.
- The eSafety Commissioner has handed platforms the evidence, the patterns, and the detection tools — yet Instagram, WhatsApp, and TikTok continue to respond inadequately, leaving victims to navigate panic and shame largely alone.
- Meta announced in March it would remove encryption from Instagram's private messaging, a concession that signals the pressure is landing — but critics say the pace of change remains dangerously slow against a fast-moving criminal industry.
- Victims carry more than financial loss: the psychological weight of exposure, the erosion of trust in online spaces, and for the youngest among them, a formative wound in how they understand safety in the digital world.
Australia's eSafety Commissioner has raised a formal alarm over a surging pattern of sexual extortion targeting young men and boys across Instagram, WhatsApp, and TikTok. In the six months ending December, her office received more than 2,200 complaints — a volume that signals not an isolated trend but a systematic criminal enterprise.
The victims are overwhelmingly young. Men aged 18 to 24 represent the largest group, with 803 complaints filed. But the reach extends to children under 15, with 186 complaints from boys and 58 from girls in that age range. The method is consistent and brutal: criminals pose as romantic contacts, coax victims into sharing intimate images, then immediately demand payment under threat of sending those images to the victim's entire contact list.
One case captures the pattern clearly. A 16-year-old named Sam connected with someone calling themselves Jessica on Instagram. The conversation shifted to WhatsApp, where Sam was asked for a nude photograph. Seconds after sending it, a demand arrived: $200, or the image would be shared with everyone he knew. The script even suggested he steal the money from his parents.
Commissioner Julie Inman Grant has been direct about where responsibility lies. The technology to detect these crimes — including language analysis tools that identify extortion patterns — already exists. Her office has provided platforms with evidence and guidance. What is absent, she argues, is genuine corporate will to act. Encryption on services like WhatsApp creates obstacles, but she has rejected it as an excuse. Meta's March announcement that it would remove encryption from Instagram's private messaging is a step forward, though the regulator considers the broader response still far too slow.
For victims, the consequences are not abstract — severe psychological distress, financial loss, and a lasting damage to their sense of safety online. The Commissioner's call is unambiguous: platforms must move faster, deploy the tools they have, and recognise this as a structural threat to their youngest users, not an edge case to be managed quietly.
Australia's online safety regulator has sounded an alarm about a growing crime targeting young men and boys: sexual extortion schemes that operate across Instagram, WhatsApp, and TikTok. In the six months ending in December, the eSafety Commissioner's office fielded more than 2,200 complaints about these scams, in which criminals manipulate victims into sharing intimate photos, then demand money under threat of exposing the images to their contacts.
The victims skew young. Men aged 18 to 24 filed 803 of those complaints—the single largest group. But the problem reaches much further down. Children under 15 have also been caught in these schemes: 186 complaints came from boys in that age range, and 58 from girls. The sheer volume suggests this is not a fringe problem but a systematic exploitation of a vulnerable population.
The mechanics are straightforward and brutal. A 16-year-old named Sam, scrolling Instagram, connected with someone using the name Jessica. The conversation moved to WhatsApp, where Sam was asked to send a nude photograph. Within seconds of complying, he received a message: pay $200 or the image goes to everyone in his contact list. The demand even included a suggestion that he steal the money from his parents. This is not a one-off case. The same scripts, the same images, the same pressure tactics are being recycled across multiple scams, according to the regulator.
Julie Inman Grant, the eSafety Commissioner, framed the problem not just as a technical failure but as a failure of corporate responsibility. Platforms have the tools to detect these crimes—language analysis software can identify the telltale patterns of sexual extortion—yet they are not deploying them consistently. Encryption on private messaging services like WhatsApp complicates detection, but that is not an excuse, Inman Grant argued. Meta, which owns both Instagram and WhatsApp, announced in March that it would remove encryption from Instagram's private messaging system, a step toward making detection possible.
What frustrates the regulator most is the gap between what she has shown the platforms and what they have actually done. Her office has provided evidence of how criminals are using these services, laid out the specific harms, and offered clear guidance on how to stop the abuse. The technology exists. The knowledge exists. What is missing, she said, is adequate response from the companies themselves.
The human cost is not abstract. Victims report severe stress, panic, and psychological distress. Some lose money. Others carry the shame and fear of exposure. For young people still forming their sense of safety online, these encounters can be formative in the worst way. The regulator's message is clear: platforms need to move faster in responding to reports, deploy available detection tools, and treat this not as an edge case but as a systematic threat to their youngest users.
Citações Notáveis
The goal is often quick financial gain, with perpetrators using high-pressure tactics to force victims into paying. This form of extortion can cause high levels of stress, panic, psychological distress and financial loss.— Julie Inman Grant, eSafety Commissioner
Platforms should be picking up the same kill chains, scripts and images being used across multiple sexual extortion scams, but they are not responding adequately despite available technology.— Julie Inman Grant, eSafety Commissioner
A Conversa do Hearth Outra perspectiva sobre a história
Why are young men the primary target here? Is there something about this age group that makes them more vulnerable?
They're at an age where they're exploring sexuality but often lack the experience to recognize manipulation. They're also less likely than older adults to have been through a scam before, so the social engineering works. And there's a shame factor—they may not report it immediately, which gives the criminals time.
The regulator mentions the same scripts and images being reused. That suggests an organized operation, not random criminals.
Exactly. This isn't isolated bad actors. It's a playbook that's working, being shared, refined. The fact that the same kill chains appear across multiple platforms suggests either organized crime groups or at minimum a well-distributed knowledge base of what works.
Meta said it would remove encryption from Instagram messaging. Does that actually solve the problem?
It's a necessary step, but not sufficient. Encryption removal allows detection tools to work, but only if Meta actually deploys them. The regulator's frustration is that the technology exists—they're not asking for the impossible. They're asking for what's already available to be used.
What happens to a victim after they pay? Do the criminals actually delete the images?
The source doesn't say, but the threat is the point. Whether or not deletion happens, the victim has already been harmed—financially and psychologically. The extortion works because the fear is real, even if the follow-through isn't guaranteed.
Why is this happening now? Has the problem grown, or is reporting just better?
Both, likely. The platforms have grown, the tools for manipulation have gotten more sophisticated, and the barriers to entry for criminals have lowered. But the regulator's office is also more visible and accessible than it used to be, so reporting may be catching up to the actual scale of the problem.