// first 10 minutes

sextortion — quick-start

sextortion — first 10 minutes. do not pay. preserve the threat message. print this, check boxes, then run the primary tools.

checklist

do not pay — payment confirms a live target and triggers immediate re-contact with escalating demands.
screenshot the threat message with the platform's timestamp and the sender's account handle visible.
do not delete the message or the sender's account — evidence of identity and timeline is in the metadata.
do not respond to the sender — any response tells them the account is monitored.
export the conversation from the platform if possible (most apps have a 'save chat' or 'export' option).
note the platform, handle/username, and whether the content was received or only claimed to exist.
if the sender is known: note how they obtained the content (relationship, breach, phishing, AI-generated claim).
if actual content is threatened: do not share the images further to 'check' — NCMEC CyberTipline handles reports without requiring re-viewing.
report to the platform's trust & safety team — use the 'report' button and note the report ID.
begin the primary tool path below — sextortion timeline builder and sender identity analyzer.