Introduction
Digital blackmail and sextortion in Turkey have become increasingly common as private communication, romantic relationships, business relations and social interactions move into digital environments. A person may be threatened through WhatsApp, Instagram, Telegram, e-mail, SMS, fake social media accounts or anonymous online profiles. The threat may involve publishing private photographs, intimate videos, screenshots of messages, identity information, personal data, workplace details, family information or confidential business records.
Sextortion is a specific and highly harmful form of digital blackmail. It usually occurs when a perpetrator threatens to publish or send intimate images, sexual content, private chats or video call recordings unless the victim pays money, sends more images, continues a relationship, withdraws a complaint or performs another act. In many cases, the victim is placed under severe psychological pressure and may feel isolated, ashamed or afraid to seek legal help.
Under Turkish law, there is no single offence named “sextortion.” Instead, the conduct may fall under several provisions of the Turkish Penal Code, especially Article 107 on blackmail, Article 106 on threats, Article 134 on violation of privacy, Article 136 on unlawful publication or acquisition of personal data, and Articles 243–244 on cybercrimes where accounts or devices are hacked. Article 107 is particularly important because blackmail is regulated as an offence against liberty and may be punishable by imprisonment from one to three years and a judicial fine up to five thousand days.
This article explains digital blackmail and sextortion in Turkey from a practical legal perspective. It covers criminal liability, victim rights, evidence preservation, urgent content removal, Law No. 5651 remedies, personal data issues, compensation claims and defence strategies.
1. What Is Digital Blackmail?
Digital blackmail is the use of online communication, private data, images, videos, hacked accounts or digital evidence to pressure a person into doing something, not doing something or providing a benefit. The benefit may be financial, sexual, emotional, professional or social.
Common examples include:
A perpetrator says, “Pay me or I will send your private photos to your family.”
A former partner threatens to publish intimate videos unless the victim continues the relationship.
A person threatens to send private messages to the victim’s workplace.
A hacker takes over a social media account and demands money to return access.
A fraudster records a video call and demands cryptocurrency.
A former employee threatens to leak company data unless payment is made.
A person threatens to publish identity information, address or phone number online.
The common element is coercion. The offender uses fear, shame, privacy, reputation or digital control to force the victim’s will. This makes digital blackmail more than a simple online argument. It is a criminally relevant attack on freedom of decision, privacy and personal dignity.
2. What Is Sextortion?
Sextortion is digital blackmail involving sexual or intimate material. The material may be real, edited, fabricated or threatened to be created. In practice, sextortion may occur in several ways.
First, the perpetrator may have obtained intimate images during a relationship. After separation, the images are used as pressure. Second, the perpetrator may secretly record a video call or private conversation. Third, the perpetrator may hack a cloud account, phone, e-mail account or social media account and obtain private images. Fourth, the perpetrator may use a fake profile to persuade the victim to send intimate content and then threaten publication. Fifth, the perpetrator may use artificial intelligence or image manipulation to create fake sexual images and threaten to distribute them.
Sextortion cases are legally serious because they often involve several offences at the same time: blackmail, threat, privacy violation, personal data crimes, cybercrime and sometimes sexual harassment. If the victim is a child, the case becomes even more serious and must be evaluated under child protection and sexual offence provisions.
3. Blackmail Under Turkish Penal Code Article 107
Article 107 of the Turkish Penal Code is the central provision in many digital blackmail and sextortion cases. The offence of blackmail generally concerns forcing a person to act, not act or provide an unlawful benefit by using pressure or threats. In the digital context, the threat is often connected to private images, confidential messages, personal data or reputational harm.
For example, if a person says, “Send me money or I will publish your private video,” this may fall under Article 107. If a former partner says, “Come back to me or I will send your photographs to your family,” the same provision may be relevant. If a person demands silence, withdrawal of a complaint or another personal benefit by threatening disclosure of private material, blackmail should be considered.
Blackmail differs from a simple threat because it generally includes a demand. The offender does not only frighten the victim; the offender uses fear to obtain a result. This result may be money, sexual content, continued contact, silence, resignation, withdrawal of legal action or another benefit.
4. Online Threats Under Turkish Penal Code Article 106
Digital blackmail often includes threats. Article 106 of the Turkish Penal Code punishes threats against a person’s life, physical integrity or sexual inviolability, and aggravated forms may apply in certain circumstances. Current legal summaries state that basic threats against life, body or sexual inviolability may be punishable by imprisonment from six months to two years; aggravated threat forms may carry heavier penalties.
In sextortion files, threats may include statements such as:
“I will destroy your life.”
“I will send these images to everyone.”
“I know where you live.”
“I will come to your workplace.”
“I will harm your family.”
“I will publish your private photos if you do not pay.”
Where the threat is combined with a demand, Article 107 may also apply. A criminal complaint should therefore distinguish between the threatening words and the blackmail demand. Both may be relevant.
5. Violation of Privacy Under Turkish Penal Code Article 134
Article 134 of the Turkish Penal Code protects private life. It becomes particularly important where intimate images, private videos, private conversations, hidden recordings or personal moments are recorded, obtained, disclosed or published. Current legal summaries of Article 134 state that violation of privacy may be punishable by imprisonment from one to three years, and disclosure of images or sounds relating to private life may create separate criminal liability.
In sextortion cases, Article 134 may apply even before the content is published if private life has been unlawfully recorded or violated. If the material is actually published or sent to third parties, the legal seriousness increases.
A key principle is that consent is limited. A victim may have shared an intimate image with one person in a private relationship, but that does not mean consent to publication, distribution or use as pressure. A private image remains legally protected against unlawful disclosure. Similarly, private messages exchanged in confidence cannot be freely published merely because one party possesses them.
6. Personal Data Crimes and Doxxing
Digital blackmail may involve personal data. The perpetrator may threaten to publish the victim’s identity number, address, phone number, workplace, family details, bank information, health information or private messages. This conduct is often called doxxing.
Under Turkish law, personal data offences are regulated under Turkish Penal Code Articles 135–140. Article 136 is especially relevant where a person unlawfully obtains, delivers or publishes personal data. The Turkish Personal Data Protection Law also confirms that crimes concerning personal data are subject to Articles 135–140 of the Turkish Penal Code.
If a perpetrator says, “Pay me or I will publish your address and phone number,” this may involve both blackmail and personal data offences. If the perpetrator actually publishes the data online, urgent removal and criminal complaint steps should be considered immediately.
7. Sextortion Through Hacked Accounts
Some sextortion cases begin with account hacking. The perpetrator may access the victim’s Instagram, WhatsApp, iCloud, Google Drive, e-mail account, phone backup or social media inbox. Private images and messages may be copied, and the victim may then be threatened.
In such cases, Articles 243 and 244 of the Turkish Penal Code may apply. Article 243 concerns unauthorized access to an information system, while Article 244 concerns interference with system operation or data, such as deleting, changing, making inaccessible or transferring data. The Council of Europe identifies these provisions as part of Turkey’s cybercrime framework.
A complaint should clearly explain whether the perpetrator merely threatened the victim, or whether the perpetrator also hacked an account, changed passwords, downloaded files, transferred data or blocked access. This affects the legal classification and the evidence that must be collected.
8. Revenge Porn and Non-Consensual Image Sharing
Revenge porn is the non-consensual publication or threat of publication of intimate images, often after a relationship ends. Turkish law does not need a separate “revenge porn” title for the conduct to be punishable. Depending on the facts, the case may involve privacy violation, blackmail, threat, personal data offences and content removal remedies.
The most important issue is immediate evidence preservation and urgent legal action. Victims often want the content removed as quickly as possible, but they must also preserve proof before it disappears. Screenshots should show the URL, platform, username, date and content. Messages containing threats should be saved in their original form. If the content is public, a notarial determination or technical preservation may strengthen the file.
9. Law No. 5651 and Urgent Access Blocking
If private images, private videos, personal data or intimate content are published online, criminal prosecution alone may not be fast enough to stop the harm. Law No. 5651 provides internet content-related remedies. Article 9/A is especially important for violations of privacy of private life. It allows persons claiming that their privacy has been violated by internet content to apply directly to the Authority and request access blocking of the content.
This route may be critical in sextortion and revenge porn cases. If the content is online, the victim should identify the exact URL, image link, video link, profile link or page address. Blocking should generally target the specific content rather than an entire website, unless broader blocking is technically necessary.
However, access blocking does not replace a criminal complaint. It is a preventive or protective step. The person who recorded, published or threatened the victim should still be investigated under criminal law.
10. What Should Victims Do Immediately?
Victims of digital blackmail and sextortion should act quickly but carefully. Emotional responses, immediate payment or deletion of evidence may make the situation worse.
The victim should:
Preserve all messages, screenshots and account details.
Save the perpetrator’s username, phone number, e-mail address, IBAN or wallet address.
Do not delete original WhatsApp, Telegram, Instagram or e-mail messages.
Do not send more images or continue private communication.
Do not pay without legal assessment.
Secure all accounts and change passwords from a safe device.
Enable two-factor authentication.
Check whether cloud accounts, e-mail accounts or social media accounts were accessed.
Warn trusted persons if the perpetrator threatens to contact them.
File a criminal complaint.
Request urgent content removal or access blocking if material is published.
If the victim is under immediate physical threat, law enforcement should be contacted urgently.
11. Should the Victim Pay the Blackmailer?
Paying the blackmailer is risky. Payment does not guarantee that the images, videos or messages will be deleted. In many cases, payment leads to further demands. The perpetrator may ask for more money, more images or continued control.
From a legal strategy perspective, payment may also complicate evidence and encourage the offender. The stronger approach is usually evidence preservation, account security, criminal complaint, urgent content removal and legal support.
If money has already been paid, the victim should preserve bank receipts, cryptocurrency transaction hashes, IBAN information, wallet addresses and all messages. These records may help identify the perpetrator or prove the blackmail demand.
12. Digital Evidence in Sextortion Cases
Digital evidence is the foundation of a successful complaint. The evidence should show both the threat and the demand.
Important evidence includes:
WhatsApp, Telegram, Instagram, Facebook, X or SMS messages.
E-mails with full headers.
Screenshots showing the username, platform, date and time.
Voice messages.
Video call records, if lawfully available.
IBAN numbers and bank account names.
Cryptocurrency wallet addresses and transaction hashes.
Fake profile URLs.
Threats to send content to family, workplace or friends.
Proof that the content was published or shared.
Login alerts showing account hacking.
Password change notifications.
Witness statements from persons who received the content.
The victim should avoid cropping screenshots too much. A screenshot that shows the account name, date, time, message and platform is stronger than an isolated image of text.
13. Criminal Complaint Strategy
A criminal complaint for digital blackmail or sextortion should be detailed, chronological and evidence-based. It should not merely state that “I am being blackmailed.” It should explain exactly what happened.
A strong complaint should include:
The victim’s identity information.
The suspect’s identity, if known.
How the suspect contacted the victim.
The relationship between the parties, if any.
The exact threat made.
The demand made by the suspect.
Whether private images or videos exist.
Whether the content was obtained lawfully or unlawfully.
Whether an account was hacked.
Whether the content was published.
Whether money was demanded or paid.
All phone numbers, usernames, e-mails, IBANs or wallet addresses.
Screenshots and original digital records.
Requests for platform records, IP logs, bank records and device examination.
Legal qualification under Articles 107, 106, 134, 136, 243 and 244 where applicable.
A good complaint also requests urgent preservation of digital evidence. Social media logs, IP records and platform data may not remain available indefinitely.
14. Sextortion Against Minors
If the victim is a minor, the case is extremely serious. Sextortion involving children may trigger child sexual abuse, sexual exploitation, obscenity, privacy, personal data and cybercrime provisions depending on the facts. Evidence should be preserved, but victims and families should avoid circulating or forwarding intimate child-related material unnecessarily because this may create additional legal and ethical risks.
Parents or guardians should act immediately, preserve messages, avoid direct confrontation with the perpetrator, file a criminal complaint and request urgent protective steps. Schools may also need to be informed if the perpetrator is from the same school or online community.
15. Corporate Sextortion and Business Blackmail
Digital blackmail is not limited to private individuals. Companies may also be targeted. A former employee may threaten to leak customer data. A hacker may threaten to publish confidential files. A person may threaten to damage the company’s reputation unless money is paid. A ransomware group may demand cryptocurrency.
If personal data is involved, the company may have obligations under the Turkish Personal Data Protection Law. The Personal Data Protection Board’s Decision No. 2019/10 interprets the breach notification period as no later than 72 hours after the data controller becomes aware of the breach, and controllers must document breach facts, effects and measures taken.
For companies, digital blackmail response should involve legal, IT, management and data protection teams. Evidence must be preserved, systems must be secured, breach notification duties must be assessed and a criminal complaint should be considered.
16. Content Removal and Evidence Preservation Must Be Balanced
Victims naturally want harmful content removed immediately. However, if content is removed before evidence is preserved, the criminal file may become weaker. The correct approach is to first preserve the content in a reliable way and then seek removal or blocking.
This does not mean delaying urgent protection. In privacy cases, speed is critical. But the victim should at least capture the URL, screenshots, username, platform, date and content before removal. If possible, legal counsel can help obtain stronger evidence quickly.
17. Civil Compensation Claims
Digital blackmail and sextortion may cause serious material and moral damage. Victims may claim compensation depending on the facts.
Material damages may include:
Money paid to the blackmailer.
Costs of content removal.
Legal expenses.
Cybersecurity or account recovery costs.
Therapy or medical expenses.
Loss of employment or business opportunities.
Moral damages may arise from humiliation, fear, anxiety, reputational harm, violation of privacy, family pressure, psychological trauma and loss of personal security.
A criminal conviction may support a civil compensation claim, but the victim should still document harm carefully. Medical reports, psychological support records, witness statements, workplace consequences and evidence of online publication may be important.
18. Defence Strategies in Digital Blackmail Allegations
A person accused of digital blackmail or sextortion may face serious consequences. Defence strategy depends on the exact facts.
Possible defence arguments include:
The accused did not send the messages.
The account was fake or hacked.
The screenshots are incomplete or manipulated.
No demand was made.
No unlawful benefit was requested.
The communication was mutual and taken out of context.
The accused did not possess or publish private content.
The alleged content was not related to private life.
The evidence was obtained unlawfully.
There is no proof of intent to coerce.
The matter is a civil dispute rather than criminal blackmail.
However, in sextortion cases, courts will carefully examine whether the accused used private material or fear of disclosure to pressure the victim. The existence of a demand, threat and coercive context is usually central.
19. Practical Checklist for Lawyers
A lawyer handling a sextortion case should ask:
What exactly was threatened?
What was demanded?
Was the content real, edited, fabricated or threatened to be created?
Was the victim asked for money, more images, silence or continued contact?
Was the content published?
Was an account hacked?
Are there IBANs, wallet addresses or phone numbers?
Are there fake accounts or anonymous profiles?
Are platform records needed?
Is urgent Article 9/A access blocking necessary?
Is there a risk of physical harm?
Is the victim a minor?
Are personal data offences present?
Should a civil compensation claim be prepared?
This structured approach prevents the file from being treated as a simple online argument and helps present the full criminal picture.
20. Preventive Digital Safety Measures
Individuals can reduce risk by following practical safety measures:
Use strong, unique passwords.
Enable two-factor authentication.
Avoid sharing intimate content where possible.
Regularly review cloud backups.
Do not click suspicious links.
Do not share verification codes.
Secure e-mail accounts because they control password resets.
Review social media privacy settings.
Remove unknown devices from accounts.
Do not store sensitive images in unsecured cloud folders.
Be cautious with fake profiles and video calls.
After a relationship ends, change shared passwords and review linked devices.
Prevention does not remove the perpetrator’s responsibility. Victims should never be blamed for being targeted. However, digital safety can reduce exposure and improve control over private data.
Conclusion
Digital blackmail and sextortion in Turkey are serious criminal matters. They may involve blackmail under Turkish Penal Code Article 107, threats under Article 106, violation of privacy under Article 134, personal data offences under Article 136 and cybercrimes under Articles 243 and 244 where accounts or devices are hacked. If intimate images, private videos or personal data are published online, urgent access blocking under Law No. 5651 Article 9/A may also be necessary.
For victims, the most important steps are evidence preservation, account security, refusal to provide further material, criminal complaint and urgent content removal where necessary. Victims should not assume that paying the perpetrator will solve the problem. In many cases, payment leads to more demands.
For companies, digital blackmail may also create data breach obligations, especially where customer or employee data is threatened or exposed. For suspects, defence focuses on identity, intent, authenticity of evidence, whether a demand was made and whether the legal elements of blackmail are proven.
Sextortion is designed to isolate and frighten victims. Turkish law provides criminal, civil and digital remedies, but success depends on fast action, strong evidence and correct legal classification. A well-prepared legal strategy can protect privacy, stop further harm and hold perpetrators accountable.
Yanıt yok