New Sextortion Tactic Targeting Teenage Girls – Using AI-Generated Fake Nudes

For the past few years, the majority of sextortion cases have involved teenage boys, with scammers tricking or coercing them into sending explicit images, before then blackmailing the victim for money (usually as a crypto payment) or more content.

But recently, cybercriminals have shifted tactics in a deeply concerning way…

What’s Changed?
In the latest wave of sextortion scams, offenders – otherwise known as “cappers” – are now using AI-powered tools to manipulate innocent images. These criminals scour public Instagram profiles and other social media platforms, often targeting photos of teens in swimwear.

Using artificial intelligence, they then generate fake nude images that appear disturbingly real.

Once these AI-generated images are created, they’re sent directly to the teen, along with a threat:

send real explicit photos or pay money – or the fake images will be shared with friends, family, or posted online.

This tactic represents a chilling evolution in sextortion. It’s not just about protecting teens from sharing explicit photos – they can now be targeted without having shared anything inappropriate at all.

social media privacy settings matter more than ever
social media privacy matters

Why This Matters
Social media privacy & what is shared on social media matters more than ever now. Social media accounts, particularly for teens, should always be set to private. This won’t eliminate risk, but it significantly reduces exposure.

Image control is a myth – even innocent photos can be manipulated with current AI tools. A photo in swimwear at the beach can be twisted into something sinister with little effort these days.

Awareness is the best defence – teens, parents, and teachers all need to understand how these scams work to prevent them and respond effectively if targeted.

 

What Parents and Educators Can Do
Talk to teens early and often about online safety, image sharing, privacy settings for social media accounts, and the risks of AI-generated content.

Encourage critical thinking about the type of content they post and who they interact with online.

As a golden rule – encourage your children to not connect with someone they don’t actually know in real life.

 

Report and support

If someone is targeted, don’t blame the victim. Report it to authorities (in Australia, that’s eSafety) and support the young person through it.

 

The Bottom Line
This new form of sextortion is a stark reminder of how fast technology – and its misuse – can evolve. What was once a crime focused mostly on boys is now affecting girls, too, in increasingly sophisticated ways.

Please share this article with your family and friends, so that everyone can be informed, and we all can educate and protect our children from this evolving AI image based threat.

Have any comments, opinions or feedback? Feel free to comment or get in touch direct.

Related Reading

Subscribe

Related articles

AI Just Discovered 21 Zero-Days in FFmpeg. That Changes Everything.

An autonomous AI agent found 21 zero-day vulnerabilities in FFmpeg while Chrome patched a record 429 bugs. Here is what that means for every team shipping software today.

Shadow AI Is quietly making every data breach more expensive

Unmonitored AI tools are adding hundreds of thousands of dollars to breach costs. Here is what is actually happening and why your governance gap is the problem.

Software Flaws Are Now the #1 Breach Cause, and AI Is Making It Worse

The 2026 Verizon report puts software flaws ahead of stolen credentials as the top breach cause, with AI accelerating every stage of the attack chain.

Anthropic, OpenAI and the race to weaponise AI against insecurity

Anthropic’s Glasswing expansion and OpenAI’s internal drama show AI is being sold as defence, but the threat landscape is moving faster than the governance.

ChatGPhish: How ChatGPT Turned Into a Phishing Machine

ChatGPhish shows how attackers can turn AI-generated web summaries into a phishing surface. Here’s why your team needs to treat AI links like untrusted content.