Sri Lanka's cybersecurity authorities have issued an urgent warning after uncovering a sophisticated and large-scale sextortion racket targeting social media users across the country. The Sri Lanka Computer Emergency Readiness Team (SLCERT) has revealed that an organised criminal gang, allegedly operating from India, is systematically exploiting victims through popular platforms including Facebook, Messenger, Instagram, and WhatsApp. The alarming discovery has raised serious concerns about online safety and digital literacy among Sri Lankan internet users.
How the Sextortion Scam Operates
According to SLCERT, the scam follows a carefully orchestrated pattern designed to manipulate and trap unsuspecting victims. The criminal network begins by infiltrating the social circles of their targets, strategically adding relatives, friends, and even siblings as contacts on social media platforms. This calculated move is intended to create a false sense of trust and legitimacy, making victims more likely to engage with the scammers.
Once a level of trust is established, the scammers initiate conversations that gradually become personal and intimate in nature. They then lure victims into sharing explicit photographs or videos, often through seemingly private or secure channels. In many cases, victims are manipulated through fake romantic interest or emotional connection before being coerced into compromising situations they did not anticipate.
After obtaining explicit material, the criminals swiftly shift tactics and begin threatening victims with the widespread distribution of the content to their family members, colleagues, and broader social networks unless a ransom is paid. The extortion demands are typically made through the same messaging platforms used to establish the initial contact, making it difficult for victims to escape the cycle of harassment.
The Psychological Impact on Victims
Sextortion is not merely a financial crime — it carries devastating psychological consequences for those who fall victim to it. Many victims experience intense feelings of shame, embarrassment, and fear, which often prevent them from reporting the crime to authorities. The deliberate targeting of victims' social networks amplifies the emotional distress, as the threat of exposure to loved ones becomes a powerful tool of control in the hands of the scammers.
Mental health professionals and cybersecurity experts have long warned that sextortion can lead to severe anxiety, depression, and in extreme cases, tragic outcomes including self-harm. The stigma associated with such incidents in conservative societies like Sri Lanka makes victims particularly vulnerable, and the criminals exploit this cultural dimension with precision and intent.
SLCERT's Warning and Recommendations
SLCERT has urged Sri Lankan social media users to exercise extreme caution when accepting friend or contact requests from unknown individuals, even when those requests appear to come through mutual connections. The agency emphasised that scammers are highly skilled at fabricating credible social media profiles that mimic real people, making it difficult to distinguish between genuine contacts and fraudulent ones.
The cybersecurity body has outlined several key precautions that users should immediately adopt to protect themselves. First and foremost, individuals are advised never to share intimate or explicit content with anyone online, regardless of the level of trust they believe has been established. Users should also regularly review and tighten their privacy settings on all social media platforms, limiting who can view their friend lists, personal information, and posts.
SLCERT further recommends that anyone who receives a suspicious contact request or finds themselves in a situation involving potential extortion should immediately cease all communication with the suspect, preserve evidence of the interaction, and report the matter to the relevant authorities without delay. Victims are reminded that they are not at fault and that law enforcement agencies are equipped to handle such cases with sensitivity and confidentiality.
Cross-Border Criminal Networks and Legal Challenges
The alleged involvement of operatives based in India highlights the increasingly transnational nature of cybercrime, which poses significant challenges for law enforcement agencies operating within national jurisdictions. Coordinated international cooperation between Sri Lankan and Indian authorities will be essential to effectively investigate and dismantle the criminal network responsible for these attacks.
Cybercrime units in both countries have previously collaborated on digital fraud cases, and experts believe that swift information sharing and joint investigations could lead to meaningful arrests. However, the scale and organisation of this particular racket suggest that it may involve multiple layers of criminal infrastructure that will require sustained and coordinated effort to disrupt.
Staying Safe in the Digital Age
This latest revelation serves as a stark reminder of the very real dangers that exist within the digital landscape. As social media usage continues to grow in Sri Lanka, so too does the exposure of ordinary citizens to sophisticated online threats. Awareness, education, and proactive digital hygiene remain the most powerful defences against cybercriminals who prey on trust and vulnerability.
Sri Lankan authorities continue to urge the public to stay informed, stay vigilant, and report any suspicious online activity to SLCERT or local law enforcement agencies immediately.