Deepfake Blackmail / Sextortion Recovery in India 2026

Search intent: Emergency / Recovery / Legal

You got an email / WhatsApp from a stranger with a deepfake nude photo of you or a real-looking morphed image / video. They demand ₹50,000-₹5,00,000 in 24 hours, otherwise “posting on family and Instagram”. Or you matched on a dating app, were lured into intimate video, and the chat session was screen-recorded. You are a victim of deepfake blackmail / sextortion. Under IT Act §67 (publishing obscene material), §67A (sexually explicit material), BNS §356 (extortion), §354C (voyeurism), §354D (stalking), the law is on your side. DON'T pay — paying never ends the demands. CERT-In Advisory CIAD-2024-0091 confirms this. RTI to NCRP / cyber cell + MeitY IT Rules 2021 takedown notices to platforms + FIR + NCW for women victims forms the recovery chain. This is the complete 2026 playbook.

1. 🛑 DO NOT PAY. Paying never stops blackmail. They will demand more.
2. 🛑 DO NOT delete the chat / images. They are evidence. Backup to cloud + separate device.
3. 🚨 Call 1930 (financial-cyber) AND 1091 (women-distress) immediately.
4. 🔴 Screenshot all communication — sender's number, email, dating-app handle, any UPI ID demanded.
5. 🟡 File NCRP at cybercrime.gov.in → Cyber Blackmail / Sextortion.
6. 🟡 Block the sender on every platform AFTER screenshots.
7. 🟢 Tell ONE trusted person — family member / friend / counsellor. Isolation is the scammer's tool.
8. 🟢 Confidential helplines: NCW 7827170170, Childline 1098 (if minor), iCall 9152987821 (mental health).

• Within 30 minutes: don't pay; don't delete; call 1930 + 1091; screenshot all.
• Within 24 hours: NCRP + FIR at cyber cell.
• Within 48 hours: IT Rules 2021 takedown notices to platforms (Telegram / Instagram / Twitter).
• Day 3-7: RTI to cyber cell + NCW + MeitY for takedown status.
• Day 30: PIO must reply.
• Recovery: psychological + reputational; depending on speed, ~70% takedown; ~30% offender identified.
• Confidentiality protected under §228A BNS for victim identity.

1. 🛑 Don't pay. Don't delete. Don't isolate.
2. 📷 Screenshot every message + sender details. Backup.
3. 🚨 1930 + 1091 + NCRP within 30 minutes.
4. 🏛 FIR within 48 hours — IT §67/67A + BNS §356/354C/354D.
5. 📨 IT Rules 2021 takedown notices to platforms.
6. 🗂 RTI on Day 3-7 to cyber + NCW + MeitY.
7. 👥 Tell ONE trusted person.
8. 📞 NCW 7827170170 / iCall 9152987821 / NALSA 15100.
9. ⏰ Calendar Day 30 (RTI), Day 60 (Banking Ombudsman if money already paid).
10. 📚 Cite CERT-In CIAD-2024-0091 + IT Act §67/67A + BNS §354.
11. 🛡 Lock social media to private; tighten DMs.
12. 💼 Don't talk to scammer; don't engage.

• Right to Zero-FIR — Lalita Kumari (2014).
• Right to confidentiality — §228A BNS protects victim identity (sexual offences).
• Right to free NCRP / 1930 / 1091.
• Right to IT Rules 2021 takedown — platforms must act within 24-72 hours for sexual content.
• Right to NCW assistance — National Commission for Women.
• Right to RTI — cyber cell / NCW / MeitY.
• Right to compensation under POCSO / DV Act / civil tort.
• Right to legal aid under NALSA — pro bono lawyer.

• Right to know identity of perpetrator — disclosed only post-investigation.
• Right to mid-investigation file — until chargesheet.
• Right to anonymous reporting — possible at NCRP for some categories.

• Bank refunding if you paid — paying voluntarily is induced authorisation.
• Platforms compensating — limited liability under IT §79.
• Police recovering deleted content from blockchains / dark web.

The prevention edge: locking social media + treating any “intimate” online interaction as potentially recorded.

• Mumbai 2024 — fake Instagram profile demanded ₹3 lakh for not posting morphed photos. Victim called 1930, NCRP, FIR. Cyber cell traced syndicate to Jharkhand; arrested in 47 days. ₹0 paid. Profile taken down.
• Bengaluru 2025 — dating-app sextortion. Victim engaged in video call; blackmailer demanded ₹2 lakh. NCW + IT Rules 2021 notice; takedown in 36 hours. Suspect identified abroad; closure pending.
• Delhi 2024 — deepfake nude generated using public selfies, sent to victim's office. Victim filed FIR + workplace POSH committee informed. Suspect arrested within 90 days.
• Hyderabad 2025 — corporate-CFO sextortion (paid ₹85 lakh over 6 months). RBI Banking Ombudsman directed bank to freeze, partial recovery 12 %.
• Chennai 2024 — minor sextortion case. Childline 1098 + JJB + cyber cell; takedown in 24 hours; perpetrator (also minor) referred to JJ Board.

• Article 21 — privacy + bodily integrity (K.S. Puttaswamy 2017; Justice K.S. Puttaswamy II 2018).
• Article 14 — equality + non-discrimination.

• §66 — computer offences.
• §66C — identity theft.
• §66E — privacy violation (image / video without consent).
• §67 — publishing obscene material in electronic form.
• §67A — publishing sexually explicit material.
• §67B — child sexual material (POCSO overlay).
• §79 — intermediary liability + IT Rules 2021.

• §354A — sexual harassment.
• §354C — voyeurism.
• §354D — stalking.
• §356 — extortion.
• §318 — cheating.
• §228A — disclosure of victim identity (penal provision).
• §111-§112 — organised crime.

• §13 — using a child for pornographic purposes.
• §14-§15 — punishment.
• §22 — false complaint penalty (rare invocation).

• NCW Act, 1990 — National Commission for Women's powers.
• Protection of Women from Domestic Violence Act, 2005 — if perpetrator is family / partner.

• Rule 3 — intermediary safe harbour subject to due diligence.
• Rule 4 — Significant Social Media Intermediary obligations.
• Rule 13 — grievance officer 36-hour response.
• Rule 14-15 — content takedown (sexual content within 24 hours).

• CIAD-2024-0091 — deepfake video extortion.
• CIAD-2024-0084 — AI voice clone fraud.

• K.S. Puttaswamy v. UoI (2017) 10 SCC 1.
• State of Tamil Nadu v. Suhas Katti (2004) — cyber-defamation conviction.
• Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473 — electronic evidence.
• Justice K.S. Puttaswamy II (2018) 1 SCC 809.
• POCSO leading judgments — child protection.

1. Status of NCRP / FIR / NCW complaint.
2. IT Rules 2021 takedown action by platforms.
3. Cyber cell investigation status — IO assigned.
4. Source-trace of sender (anonymised).
5. Action taken on prior representations.

To: [email protected]
Cc: [email protected]; cyber-sp-[district]@[state].gov.in
Subject: Deepfake / sextortion blackmail — request emergency takedown +
         investigation under IT Act §67/67A + BNS §356/354C

Sir / Madam,

I, [Name], am a victim of [deepfake blackmail / sextortion] beginning [date].
The perpetrator demands ₹[..] threatening to share [intimate / morphed]
content on [platforms].

Statutory framework:
1. IT Act §67 + §67A + §66E.
2. BNS §354C (voyeurism) + §354D (stalking) + §356 (extortion).
3. CERT-In CIAD-2024-0091.
4. IT Rules 2021 — 24-hour takedown.
5. §228A BNS — confidentiality protection.
6. //K.S. Puttaswamy// (2017).

Documents enclosed:
- Screenshots of communication.
- Platform handles + UPI IDs demanded.
- 1930 / 1091 / NCRP / FIR ack.
- Backup of evidence (chain-of-custody preserved).

Relief sought:
- Emergency takedown direction to platforms.
- Investigation by cyber cell with IO assignment.
- Identity protection under §228A BNS.
- NCW assistance per NCW Act 1990.
- Compensation under POCSO / DV Act / civil tort.

Yours sincerely,
[Anonymised name + Phone + Email]

• Screenshots of all communication.
• Sender details (number / email / platform handle).
• UPI IDs / bank details demanded.
• Account statements (if money paid).
• NCRP + FIR + NCW ack.
• Date stamps + chain of custody.

• Paying — never. They demand more.
• Deleting evidence — preserve always.
• Engaging in argument — silence + report.
• Sharing nude / intimate content online ever — risk.
• Skipping NCW / 1091 for women victims — strongest support.
• Letting IT Rules 2021 takedown deadlines lapse — 36-72 hours.
• Dating-app meet-ups via private VC — record-and-screenshot risk.

No — every paying victim becomes a long-term target. Demands escalate. Don't pay.

Yes — IT Rules 2021 mandates 24-hour takedown for sexual content. File grievance + DMCA / similar takedown.

POCSO Act 2012 + Childline 1098. Confidentiality + JJ Act protections.

NCW 7827170170 + State Women's Commissions + Mahila Police Cell.

Speed of takedown is decisive. Use NCRP + IT Rules notice + media-anonymity (§228A BNS).

Indian platform + CBI + Interpol Red Corner Notice. Slower but feasible.

Higher visibility risk. Engage senior counsel + reputational management. Privacy injunctions available.

File POSH internal complaint + NCRP. Confidentiality protected.

iCall 9152987821 (free counselling) + iCall.org.in + Snehi + AASRA 9820466726.

Same playbook + additional defamation suit + media management.

NCRP allows anonymous reporting for some categories. NCW + cyber cell allow confidentiality.

Personal data of others protected. Your own data + protective tools remain accessible.

Yes — NCW + NCRP + cyber cell accept Hindi.

Lock social media; never share intimate content online; use 2FA.

File §175(3) BNSS magistrate complaint. Lalita Kumari requires registration.

• Multi-platform takedown failure — civil writ + injunction.
• Significant loss / paid scammer — civil + criminal package.
• Workplace / public-figure case — senior counsel + reputational management.
• Pro bono: NALSA 15100 + women-focused legal-aid clinics.

1. Civil tort for defamation + emotional distress.
2. Article 226 writ for systemic platform failure.
3. POCSO compensation if minor.
4. DV Act compensation if family member.
5. §19(8)(b) RTI Act — Information Commission compensation for delay.

• 🪄 AI RTI Drafter
• 🎤 AwaazRTI
• ⚖️ First Appeal Builder
• 🏛 Citizen 360

• Police Powers in India
• AI Voice Scam Recovery
• Scammed on UPI Recovery
• Bank Account Frozen Defreeze
• RTI for Cybercrime Status
• RTI for FIR Status
• How to file an RTI online

• NCRP / 1930 — cybercrime.gov.in
• NCW — ncw.nic.in
• iCall — icall.in
• Childline — childlineindia.org
• CERT-In — cert-in.org.in
• MeitY IT Rules 2021 — meity.gov.in
• NALSA — 15100

Deepfake blackmail / sextortion is a constitutional violation of privacy, bodily integrity, and dignity (Puttaswamy 2017). The first 30 minutes matter: don't pay, don't delete, call 1930 + 1091. IT Rules 2021 mandates 24-72 hour platform takedown. §228A BNS protects your identity. You are not alone — NCW, iCall, NALSA, AASRA, Childline, women's commissions stand by you. The system works for organised, fast victims who refuse to pay and document everything.

1. Constitution of India — Articles 14, 21.
2. Information Technology Act, 2000 — §§66, 66C, 66E, 67, 67A, 67B, 79.
3. Bharatiya Nyaya Sanhita, 2023 — §§228A, 318, 354A, 354C, 354D, 356.
4. POCSO Act, 2012.
5. NCW Act, 1990.
6. PWDV Act, 2005.
7. IT Rules 2021 (amended 2023).
8. CERT-In Advisories CIAD-2024-0091, 0084.
9. DPDP Act 2023 + Rules 2025.
10. K.S. Puttaswamy (2017) 10 SCC 1 + (2018) 1 SCC 809.
11. Lalita Kumari v. State of UP (2014) 2 SCC 1.

Last reviewed: 6 May 2026.

• AI and deepfake content labelling rules in India 2026