Home // COURSES // FRAUD AND DIGITAL CRIME

Sextortion and revenge porn: what to do in the first hours

The client arrives embarrassed, phone in hand: a stranger has set a deadline to pay by tonight, or the ex has already spread the photos in the family group chat. What is done in the next few hours decides whether there will be evidence, removal and someone held responsible.

The course

Why this course

From the romance scam to the ex who exposes intimate images: evidence, removal, protective orders and accountability, without negotiating with the criminal.

Sextortion almost never starts with a threat. It starts with an online relationship that feels real. The scammer opens up first, with an intimacy that is not his own, and draws out the victim's. It reaches everyone from 13-year-olds to women of 78.

In revenge porn (non-consensual intimate images), the person exposing is the ex, out of revenge, humiliation or control. In both cases, evidence is lost in the panic. The victim deletes the conversation, blocks the profile, pays or confronts the offender. The takedown notice goes out without the exact address of the content.

With the right technique, the lawyer leaves the first meeting with the conversation preserved, the profile identified, the payment documented, the notice ready and the evidence for the protective order. The course teaches that sequence. It does not teach how to negotiate with the criminal.

Length2 hours
TrackFraud and digital crime
FormatIn person or live online, open class or in-house. Taught in Portuguese, under Brazilian law
Who it is forCriminal, family and digital law lawyers, and anyone at the firm who receives victims and their families.
InstructorAdriano Vallim, Forensic Expert and Digital Crime Specialist
CertificateCertificate of attendance stating the course hours, for every participant

I want this course

Pick as many courses as you like: they are kept and arrive ticked on the registration form.

By the end, you will be able to

What changes in your next case

  • Recognise the shift from romance scam to sextortion, and the signs the family sees.
  • Tell sextortion apart from revenge porn, and prepare the evidence for the protective order.
  • Lead the first conversation with the victim without blame and without losing evidence.
  • Preserve the conversation, profile, phone numbers, Pix (Brazil's instant payment system) key and crypto wallet before blocking.
  • List the data that the takedown notice and the request for records must contain.
  • Guide the family when the victim is a child, without the material ever being shared.
Programme

2 hours, block by block

0:00
Opening: the fake father of the "minor" 10 min
  • The public case, and why victims take time to ask for help
0:10
From romance scam to sextortion 20 min
  • The relationship built from the public profile
  • Intimacy drawn out, and the hot-and-cold cycle
  • The turn to threats, and the signs the family sees
0:30
Revenge porn: when the person exposing is the ex 15 min
  • What changes compared with sextortion: revenge, humiliation, control
  • The ex who posts, the fake account, the hidden recording, the AI-generated "nude"
  • The threat to share, and the protective order
0:45
The first hours: preserve before blocking 25 min
  • What to preserve, and in what order
  • From screenshot to forensic extraction
  • Why paying rarely ends the extortion
  • Exercise: the first-hours guide
1:10
Removal, records and accountability 20 min
  • The takedown notice and what it must identify
  • Retention periods and court requests for records
  • Criminal offences, including AI-generated fakes
1:30
When the victim is a child or teenager 15 min
  • Removal under the ECA Digital (Brazil's Digital Child and Adolescent Statute) and the rule with no exceptions: the material is never shared
1:45
Questions and cases from the audience 15 min
  • Situations brought by participants, without identification
Cases in class

The cases used in class

PUBLIC CASE

The fake father who said the young woman was a minor

A man exchanged photos with a supposed young woman on a social network. The next day, a "father" said she was a minor and began demanding money, until he staged her death with a fake certificate and video. It was a friend who raised the alarm. The forensic expert explains how manipulating the victim's ego hides the fraud.

Watch the report →

PUBLIC CASE

The family that saw it first

A retired woman believed she was dating a famous billionaire and was going into debt over his requests. She withdrew from those around her and said her family was envious. With her permission, the forensic expert analysed the messages and showed the signs of fraud, such as a phone number with another country's code.

Watch the report →

PUBLIC CASE

Fake profiles using a journalist's image

Fake profiles used a journalist's photos to extort women in several countries. Flaws in the masking tool made it possible to identify the real connection address and locate the person responsible abroad. The material went to the authorities.

Watch the report →

ILLUSTRATIVE EXAMPLE

The teenager and the deadline of tonight

A teenage daughter sent an intimate photo to an online gaming "friend", who now demands more photos and money. Her mother wants to forward everything to the lawyer. The guidance is different: nobody forwards the image; the profile, numbers and threats are preserved; a police report is filed and the platform is notified.

Practice and materials

Ready to use the next day

Hands-on exercise

In groups of three, with the illustrative example of the teenager printed as fictitious messages, with no image, participants fill in the First-hours guide and the Data sheet in 10 minutes. The instructor shows where the evidence would have been lost.

Materials provided
  • First-hours guide: checklist for the first meeting with the victim.
  • Warning signs for the family: what to look out for and how to raise it.
  • Data sheet for removal and records: what the notice and the request to the provider must list.
  • Preservation map: what each step proves and does not prove.
  • Platform notice guide: what a notice under the Marco Civil, art. 21 (Brazil's Internet Civil Rights Framework), identifies.
Questions on the topic
Should the client pay so the content is not released?
The forensic expert does not advise negotiating with criminals. What the cases show is that payment usually brings a new demand. The decision belongs to the client and the lawyer, and the evidence is preserved in any scenario.
Will the platform remove content without a court order?
For nudity shared without consent, the provider is secondarily liable if, once notified by the person depicted, it fails to remove the content diligently (Marco Civil da Internet, art. 21). The notice must identify the material specifically: that is why the exact address is the first piece of data to preserve.

Laws and rulings discussed

CP, arts. 154-A, 158, 216-B and 218-C (Brazilian Penal Code)  ·  CP, art. 147-B, sole paragraph  ·  Marco Civil da Internet, arts. 13, 15, 21 and 22 (Brazil's Internet Civil Rights Framework)  ·  CP, arts. 147-A, 218-C, § 1º, and 225  ·  Law 13,718/2018  ·  Law 13,772/2018  ·  Law 11,340/2006, arts. 5º, III, 7º, II, 18, 19, § 5º, 22, III, and 24-A (Maria da Penha Act)  ·  CPP, art. 350-A (Brazilian Code of Criminal Procedure)  ·  ECA, arts. 240 to 241-E (Brazil's Child and Adolescent Statute)  ·  Law 15,211/2025, arts. 27 and 29 (ECA Digital)  ·  Decree 12,880/2026, art. 36

See also

Representative Cases →   Digital Authorship and Subscriber Data Disclosure →   WhatsApp and Chat Examination →   For Individuals →   See all courses →

Bring this course to your firm

Open class or in-house for your team, in person or online. Tell us the group size and preferred date: you will hear back within 24 business hours.

I want this course

The technical evidence your case requires. The authority courts respect.

Initial feasibility consultation at no cost. Reply within 24h on business days.
Request an Examination