Sri Lankan authorities have identified a large-scale organised extortion scheme operating across multiple social media platforms, with scammers reportedly based in India using fake profiles to manipulate victims into sharing intimate content before demanding payment.

The Sri Lanka Computer Emergency Readiness Team (SLCERT) has issued a public alert regarding an extensive coordinated extortion operation targeting Sri Lankans through social media and messaging applications including Instagram, Facebook, WhatsApp, and Messenger. According to SLCERT's findings, the scam network is reportedly being operated from India.

The scheme typically begins when victims receive a message saying "Hi" from an unfamiliar Instagram account displaying a photograph of an attractive young woman. Prior to this initial contact, scammers reportedly add the target's relatives, siblings, and friends to their own social media accounts to create the false impression of being a mutual acquaintance. Once a victim responds to the initial greeting, scammers engage in extended conversations designed to build trust and rapport over several days.

During these interactions, scammers send provocative images and attempt to persuade victims into sharing intimate photographs or participating in video calls where they record compromising footage. SLCERT indicates that once scammers obtain such material, they use it as leverage to extort money from their victims, threatening to distribute the content to the victim's family members and social contacts unless payment is made.

In response to this threat, SLCERT has advised the public to exercise caution when receiving messages, friend requests, or calls from unknown social media accounts and phone numbers. The agency's warning underscores the importance of verifying the authenticity of online contacts before engaging in personal conversations or sharing sensitive information.