Photos stolen for fake IG â now being blackmailed, they know my real name and address
Escalation from photo theft to targeted blackmail with personal details
Someone stole your photos and created a fake Instagram account. That was bad enough. But now they're contacting you directly â and they have your real name, your address, maybe your workplace. They're threatening to do something with those photos unless you pay up or comply with their demands.
This is a layered attack: identity theft, impersonation, and blackmail rolled into one. It feels terrifying because they've made it personal. But the fact that they know your name and address doesn't mean you're in the kind of danger your brain is telling you right now. Let's break down what's actually happening and what you can do about it.
Paying a blackmailer does not make them go away. It tells them you are a paying target and almost always leads to more demands. The FBI, NCMEC, and every major cybercrime agency says the same thing: do not pay.1
First: Assess the Real Threat Level
When someone tells you they know where you live, your adrenaline spikes. That's the point â they want you panicking, not thinking. But in the vast majority of these cases, the person messaging you is overseas and has zero intention of showing up at your door.
If they quoted your address, Google your name right now. Chances are your full name, address, phone number, and relatives are all available on people search sites like Spokeo, WhitePages, and FastPeopleSearch. This is public data â having it doesn't mean they're surveilling you.
Check the timestamps of their messages, the language patterns, and whether the account was recently created. The overwhelming majority of these operations run out of West Africa, Southeast Asia, or Eastern Europe.
If someone explicitly threatens to harm you physically and provides details that suggest they are local, that is a different situation. Call your local police non-emergency line immediately. If you feel you are in immediate danger, call 911.
Financial demands point to a standard extortion scam. Other demands (sexual content, ongoing contact) may indicate a stalker or more targeted harassment â both warrant immediate law enforcement contact.
People search sites aggregate public records, voter registration data, property records, and social media into searchable profiles. Anyone with your first name, last name, and approximate location can find your address in about 30 seconds. This is not sophisticated hacking â it's a Google search.
Immediate Action Plan
Capture every message, the fake account profile, their follower/following lists, and any payment demands. Include timestamps. Do not delete any conversations â this is evidence.
Every reply gives them more information and keeps you on their active target list. Silence is your strongest weapon. Block them only after you have all your screenshots.
Set all social media profiles to private. Remove your bio details (workplace, school, location). Hide your follower and following lists. Revoke access to any third-party apps connected to your accounts.
Open the fake profile â tap the three dots â Report â It's pretending to be someone else â Me. Instagram's impersonation policy is clear: fake accounts using your identity are typically removed within 24-72 hours.
If you took the photos yourself (selfies, personal photos), you own the copyright. File a DMCA report through Instagram's IP reporting form at help.instagram.com. This is a separate and often faster removal path than the impersonation report.
Remove Your Address from People Search Sites
This is the step most people skip, and it's arguably the most important one for your long-term safety. If this person found your address on a data broker, so can the next one. You need to remove yourself from people search sites to cut off this vector entirely.
Search your full name on Google followed by your city or state. Check Spokeo, WhitePages, BeenVerified, FastPeopleSearch, TruePeopleSearch, Radaris, and PeopleFinder. You will likely find 10-20+ listings.
Each site has an opt-out process â some require email verification, some require identity verification, and some make you jump through hoops. Expect it to take 2-4 weeks per site for removal.
Data brokers continuously re-aggregate data. Your profile can reappear within months. Ongoing monitoring is necessary to keep your information suppressed.
Manually opting out of every people search site is a multi-day project â and they re-list you regularly. Professional data removal services handle the initial purge and ongoing monitoring so your information stays down.
Report to Law Enforcement
Blackmail is a crime â in every state, and federally when it crosses state or international lines (which online blackmail almost always does). Filing reports creates an official paper trail and can help with platform escalation.
Go to ic3.gov and submit a complaint. Include all screenshots, the fake account URL, payment demands, and any payment transaction details if you already sent money. IC3 reports feed into federal investigations targeting major extortion networks.2
Visit your local police department or file online. Bring your evidence folder. Even if local police can't pursue an overseas scammer, the report number is useful for platform escalation and any future legal action.
Many state AGs have cybercrime units and can escalate platform removal requests through official channels that move faster than individual reports.
Should You Get a Restraining Order?
If the person blackmailing you is someone you know in real life â an ex, a former friend, a coworker â a restraining order may be appropriate and enforceable. Courts in most states now recognize online harassment and cyberstalking as grounds for protective orders.
If the blackmailer is anonymous and likely overseas, a restraining order is not practical since there's no identified individual to serve. Your time is better spent on platform reporting, DMCA takedowns, and data broker removal.
Lock Down Your Digital Presence
Beyond the immediate crisis, you need to reduce the surface area available to anyone who might target you in the future.
Instagram, email, banking â all of it. Use an authenticator app (not SMS) where possible. If they somehow gained access to one of your accounts, 2FA prevents further compromise.
Turn off activity status. Disable sharing to other platforms. Restrict who can tag you. Review and remove tagged photos that reveal personal details.
Old posts geotagged at your home, photos of your car with the plate visible, check-ins at your workplace â all of this is OSINT gold. Archive or delete anything that reveals your physical location.
Google Alerts for your name, reverse image search your photos periodically, and consider a professional monitoring service that catches new fake accounts and leaked content quickly.
Frequently Asked Questions
Sources & Citations
- 1FBI Internet Crime Complaint Center: The FBI advises victims of extortion to not pay ransom demands, as payment typically leads to continued and escalating demands. FBI IC3 â
- 2FBI Internet Crime Report 2023: Extortion complaints accounted for over $1.3 billion in reported losses, with sextortion among the fastest-growing categories. FBI IC3 â
- 3Federal Trade Commission: Data brokers collect and sell personal information including addresses, phone numbers, and family relationships from public records and commercial sources. FTC â
- 4Instagram Help Center: Impersonation violates Instagram's Community Guidelines. Users can report accounts pretending to be them for expedited review and removal. Instagram â
- 5U.S. Copyright Office: Photographs are copyrightable works. The person who takes a photograph owns the copyright, enabling DMCA takedown requests for unauthorized use. U.S. Copyright Office â
We Can Handle This For You
Prevent This From Happening Again
Ongoing monitoring and protection
People Also Asked
Still need help?
Talk to Our Team â