Threatened With Viral Screenshots: How to Respond Legally

The message arrived at 11:47 PM. A screenshot of an old chat. Then another. Then a line of text: "If you don't transfer ten thousand rupees by tomorrow morning, this goes to your office WhatsApp group, your father, and your husband." Below it, a countdown emoji. The phone screen lit the room. The reader read it once, twice, then locked the screen and stared at the ceiling. Heart pounding. The chat was real. The screenshots were real. The threat was real. And the next twelve hours felt like a cliff.

This is one of the most common forms of online harm Indian lawyers see today. The blackmailer can be a former partner, a casual acquaintance, a stranger pretending to be a casual acquaintance, or a sextortion gang routed through a VPN. The mechanics are always the same: a screenshot, a deadline, and a demand. The good news — and we say this carefully — is that Indian law has strong, time-tested provisions for exactly this situation. The trick is to use them quickly and correctly.

What This Article Will Answer

If you are reading this article in the middle of the night while a threat sits unread on your phone, here are the questions running through your head — and which we will answer, in order:

1. Is it actually a crime if he has only threatened me, but not posted anything yet?
2. If money is being demanded, what changes in the law?
3. What if the screenshots are private intimate images?
4. How do I save the messages so they hold up in court?
5. Where exactly do I file — police station, cyber cell, online portal, or court?
6. Can the court stop him from posting before he actually does?
7. Should I pay him to make him go away?

The short answer to the last question, before we go further, is no. Paying a blackmailer almost always invites the next demand. We will explain why this is so well-documented in Indian case law that the Supreme Court has practically named the pattern.

Is the Threat Itself a Crime?

Yes. The threat itself, before any screenshot is leaked, is already a punishable offence under Indian law.

Section 503 of the Indian Penal Code — the section on criminal intimidation — defines the offence as threatening another person with injury to her person, reputation or property, with the intent to cause alarm or to compel her to do something she is not legally bound to do. The key word is intent to cause alarm. Whether you actually felt alarmed or simply went numb is, as the Orissa High Court held in Amulya Kumar Behera v Nabaghana Behera, 1995 Cr LJ 355 (Ori), of no consequence — the law looks at the intent of the offender, not the reaction of the victim.

Section 506 prescribes the punishment — up to two years for ordinary criminal intimidation, going up to seven years if the threat is of death, of grievous hurt, of fire-destruction of property, or of imputing unchastity to a woman. In the State of Uttar Pradesh, by notification dated 31 July 1989, even Section 506 itself has been made cognizable and non-bailable, meaning the police can register an FIR and arrest without prior magistrate permission.

Section 507 adds another two years where the threat is sent through an anonymous communication, or where the offender has taken precaution to conceal his name or address. The classical authority Doraiswamy Ayyar (1924) 48 Mad 774 held that the offence is complete the moment the anonymous communication is received. A fake-handle WhatsApp DM in 2026 is squarely covered.

If the threat is dressed up as plain abuse — filthy words designed to provoke a reaction without a specific demand — Section 504 IPC for intentional insult to provoke breach of public peace adds another two years. As the Allahabad High Court clarified in Jodh Singh v State of UP, 1991 Cr LJ 3226, the actual words used must be set out in the complaint for Section 504 to apply.

So even before the offender posts a single screenshot, you have at least three IPC sections to work with — 503, 506 and (where the sender is anonymous) 507. None of them requires the threat to have been carried out.

When the Threat Becomes Extortion

The picture changes the moment money, property, signed papers or a sexual favour is demanded as the price of silence.

Section 383 of the IPC defines extortion as intentionally putting any person in fear of injury and thereby dishonestly inducing him to deliver any property or valuable security. Illustration 1 to the section is, on the facts, almost identical to a modern screenshot blackmail: "A threatens to publish a defamatory libel concerning Z unless Z gives him money. He thus induces Z to give him money. A has committed extortion." Section 384 prescribes the punishment — up to three years, or fine, or both.

The Supreme Court in Romesh Chandra Arora, (1960) 1 SCR 924 dealt with a fact pattern that reads like a 2026 sextortion case despite being from sixty-six years ago. The accused had taken indecent photographs of a girl and threatened her father, in letters, with publication unless "hush money" was paid. The Court held the accused guilty of criminal intimidation. In Chander Kala v Ram Kishan, AIR 1985 SC 1268, the Supreme Court convicted a head master who had threatened a lady-teacher with spoiling her modesty unless she signed certain blank papers — for both criminal intimidation and extortion.

So if your blackmailer has demanded a transfer to a UPI ID, a Bitcoin wallet, signed papers or a sexual act, you have an additional cognizable offence — extortion under Section 384 — apart from criminal intimidation.

When IT Act Sections 66E and 67 Get Added

Where the threatened content is a private intimate image, two specific provisions of the Information Technology Act, 2000 get attracted on top of the IPC sections.

Section 66E of the IT Act — punishment for violation of privacy — prescribes imprisonment up to three years and a fine up to two lakh rupees for any person who intentionally captures, publishes or transmits the image of a private area of any other person without consent, under circumstances violating that person's privacy. The Explanation to the section defines "private area" narrowly — it covers naked or undergarment-clad genitals, pubic area, buttocks, or female breast. So Section 66E catches image-based harm that is sexually explicit. As the source commentary records, the entire focus of the section is on what the law calls "video voyeurism" — peeping toms, spy cameras, hidden web cameras and MMS culture.

Section 67 of the IT Act — punishment for publishing or transmitting obscene material in electronic form — has a wider sweep. It punishes the publication or transmission, in electronic form, of any material that is lascivious, appeals to the prurient interest, or tends to deprave and corrupt those likely to see it. First conviction is up to three years and a fine up to five lakh rupees; a second conviction goes up to five years and ten lakh. Section 67 is modelled on Section 292 of the IPC and applies whether or not the material falls within the narrow Section 66E definition of "private area".

An important caution. Section 66A of the IT Act, which used to broadly punish "grossly offensive or menacing" online messages, was struck down as unconstitutional by the Supreme Court in Shreya Singhal v Union of India, AIR 2015 SC 1523. Police cannot use Section 66A any more. If an officer suggests it, politely insist on Sections 503/506/507 of the IPC and Sections 66E/67 of the IT Act instead.

Preserving the Threat as Evidence

This is the part most victims get wrong, and it is also the part that wins or loses the case.

Take screenshots of everything — the threat, the previous conversation that built up to it, the sender's username, phone number, profile photo, mutual contacts where shown. Capture the system clock and the date in the same frame. Email the screenshots to yourself the same day, so a server-stamped copy exists outside your phone. Do not delete the chat from your device — investigators may need to inspect the original.

Indian law is strict about how electronic evidence is presented. Section 65B of the Indian Evidence Act, 1872 requires that any computer-generated electronic record produced in court must be accompanied by a certificate identifying the device, certifying that it was working properly, and certifying that the printout is a true copy. The Supreme Court in Anvar P V v P K Basheer, AIR 2015 SC 180 held that without such a certificate, secondary electronic evidence is inadmissible. The certificate is not about whether the message is true — it is about the working condition of the device that produced the printout. Your lawyer will draft the certificate for you to sign before trial.

Where the messages are on WhatsApp, do not delete the chat or change the phone. Where they are emails, do not delete the email and do not "mark as spam" — keep it in the inbox. Where they are on Instagram or X DMs, save the conversation and report the account, but do not block before screenshots are saved.

FIR, Zero-FIR or Cyber Complaint?

Three doors are open. Use as many as you can.

One. The online portal at cybercrime.gov.in. Open twenty-four hours, accepts file uploads, and routes the matter to the relevant cyber cell. The national cyber-crime helpline 1930 is for urgent financial-fraud matters but can also flag dangerous threats.

Two. The FIR at the police station. BNSS Section 173 — which has replaced CrPC Section 154 — governs the registration of a First Information Report for a cognizable offence. The BNSS_CrPC Correspondence Table records that BNSS Section 173 has expanded the scope by adding the words "irrespective of the area where the offence is committed", thus codifying the long-standing zero-FIR principle. So if the blackmailer is in another city, the police where you live cannot turn you away — they must register the FIR and forward it. If the threat involves an immediate fear of release, walking into the nearest police station is the fastest move; the portal can be filed afterwards.

Three. If the SHO refuses to register the FIR, BNSS Section 173(4) — which has replaced CrPC Section 154(3) — allows you to send the substance of your information to the Superintendent of Police by post or email. The SP, if satisfied that a cognizable offence is disclosed, must either investigate himself or direct an investigation. If the SP also fails, file a private complaint before the jurisdictional Magistrate under BNSS Section 223 (old CrPC Section 200) and request investigation under BNSS Section 175(3) (old CrPC Section 156(3)). This fall-back route to the magistrate is the sturdy ladder when police machinery falters; for victims who first need to deal with a non-cooperative police station, understanding your FIR rights is the necessary first step.

The Civil Injunction Route

The criminal track punishes; the civil track restrains. You can run both at the same time.

Move the civil court — district court of jurisdiction, or the High Court for urgent matters — for a temporary injunction restraining the blackmailer from publishing, sharing, transmitting or threatening to publish the screenshots. In urgent cases the court can issue an ex-parte ad-interim injunction the same day. The order is then served on the blackmailer and on the platform.

Section 79 of the IT Act gives intermediaries — WhatsApp, Instagram, X, Facebook — a safe harbour from liability, but only as long as they observe due diligence. The Supreme Court in Shreya Singhal v Union of India (2015) read down Section 79(3)(b) to mean that a platform must expeditiously remove unlawful content once it has actual knowledge from a court order or a notification from the appropriate government. This is the legal hook for a takedown. Send a written notice along with the court order to the platform's grievance officer; under the Intermediary Rules a response is required within strict timelines.

What Should I Actually Do Now?

If you are reading this with a threat sitting on your phone, here is the action sequence — in order, no skips:

1. Stop responding. Do not reply, do not negotiate, do not pay. Every reply is data the blackmailer uses.
2. Take screenshots of every message — the threat, the demand, the deadline, the sender's profile. Capture the date and time clearly.
3. Email the screenshots to yourself the same day, so a server-stamped copy exists outside your device.
4. Do not delete the chat, the call log, or the email. Do not change the phone or factory-reset.
5. File a complaint at cybercrime.gov.in — choose the "Women/Child Related Crime" or "Other Cyber Crime" track as relevant. Save the acknowledgment number.
6. Walk into the nearest police station and lodge an FIR under Sections 503/506/384 of the IPC, and Sections 66E/67 of the IT Act if intimate images are involved. Quote BNSS Section 173 — including the zero-FIR principle if you are away from the place of offence.
7. If police refuse, escalate to the Superintendent of Police under BNSS Section 173(4), and then to the Magistrate under BNSS Section 223 read with Section 175(3).
8. Talk to a lawyer the same day about a civil injunction. The court can stop publication before it happens.
9. Where the relationship was domestic, consider an application under the Protection of Women from Domestic Violence Act 2005 — separate, faster, civil track.
10. Tell one trusted person. Isolation is what the blackmailer is counting on. A sibling, a parent, a senior at work, a friend — one person who knows the situation reduces the blackmailer's leverage by half.

A Quiet Word on Getting Help

Cases of this kind move quickly when handled in the first forty-eight hours and slowly thereafter. The screenshots have to be preserved correctly. The FIR has to cite the right sections. The civil injunction has to be drafted with specifics — sender ID, threatened content, platforms — so that the order can actually be enforced. None of this is impossible to do alone, but it is harder under the kind of stress this situation creates.

If you would prefer to have someone walk you through it, the team at Pinaka Legal handles this category of matter regularly out of Delhi. The first conversation is confidential and free of cost, and most of it is about getting the next twenty-four hours right.

Frequently Asked Questions

Is it a crime if someone only threatens to leak my chats — they have not posted anything yet?

Yes. The threat itself is the offence. Section 503 of the IPC defines criminal intimidation as a threat of injury to a person, reputation or property, made with intent to cause alarm or to force the victim into doing something she is not legally bound to do. The Supreme Court in Romesh Chandra Arora (1960) held that threatening to publish indecent images unless hush money is paid is criminal intimidation. So you can register an FIR the day the threat is made — actual leak is not required.

What is the difference between threatened with viral screenshots how to respond legally and a regular FIR for abuse?

It depends on what is demanded along with the threat. If the threat is plain — fear and humiliation only — Sections 503 and 506 of the IPC apply. The moment money, property, signed papers or a sexual favour is demanded as the price of silence, Section 384 IPC for extortion is squarely attracted. Where the threatened content involves private intimate images, Section 66E of the IT Act and Section 67 may also apply. The cyber complaint at cybercrime.gov.in is the first online step; the FIR at the police station is the formal criminal step.

What if the threat says the screenshots are fake or morphed — does it still count?

Yes. The law does not ask whether the threatened image is real or morphed. Section 503 IPC requires only a threat to reputation made with intent to cause alarm. The intent of the offender, not the truth of the image, is what matters. Sections 469 and 471 of the IPC for forgery may also apply where a fake image has actually been created. If the morphed image is of a sexual nature, Section 67 of the IT Act and Section 354A of the IPC for sexual harassment can be added.

Should I pay the blackmailer to make him stop?

No. Paying the blackmailer almost always makes the situation worse. The classical authority Romesh Chandra Arora (1960) records exactly this pattern — the offender returned for more hush money. Once you pay, you have admitted that the threat works, and you have shown that the content has economic value to you. The right move is to stop responding, preserve the threat as evidence, and approach the cyber cell or police. Indian courts treat blackmail as a continuing offence, so each new demand is a fresh count.

How do I save the threatening messages so they hold up in court?

Take screenshots of the entire chat — not snippets — with the sender's username, phone number, date and time visible. Email the screenshots to yourself the same day, so a server-stamped copy exists. Section 65B of the Evidence Act, as confirmed by the Supreme Court in Anvar P V v P K Basheer (2015), requires a certificate alongside the electronic record for it to be admissible. Do not delete the chat from your phone — investigators may need to inspect the original device. The cyber cell will accept softcopies on a USB or by email.

Cyber complaint or FIR — which one should I file first?

Both, ideally. The online complaint at cybercrime.gov.in is open all day, accepts file uploads, and routes the matter to the cyber cell. The FIR under BNSS Section 173 (which replaced CrPC Section 154) is the formal step that starts a criminal investigation. If the threat is of immediate exposure or harm, walk into the nearest police station first and lodge the FIR — speed matters more than the portal. The helpline 1930 is for urgent financial-fraud matters and can also flag dangerous threats.

What if the police refuse to register the FIR for an online threat?

You have a clear next step. BNSS Section 173(4) — the new procedural provision that replaced CrPC Section 154(3) — allows you to send the substance of your information to the Superintendent of Police by post or email. The SP, if satisfied that a cognizable offence is disclosed, must either investigate himself or direct an investigation. If the SP also fails, file a private complaint before the jurisdictional Magistrate under BNSS Section 223 (old CrPC Section 200) and request investigation under BNSS Section 175(3) (old CrPC Section 156(3)).

What is a zero-FIR and when do I need it?

Zero-FIR is the principle that a police station must register the FIR even if the offence happened outside its territorial jurisdiction. The BNSS_CrPC Correspondence Table records that BNSS Section 173 has expanded the scope by adding the words "irrespective of the area where the offence is committed" — squarely codifying zero-FIR. So if the blackmailer is in another city, the police where you live cannot turn you away; they must register the FIR and forward it to the police station of jurisdiction.

Can I get a court order stopping the threat from being carried out?

Yes. Apart from criminal action, you can move the civil court for a temporary injunction restraining the blackmailer from publishing, sharing or transmitting the screenshots. The court can issue an ex-parte ad-interim injunction the same day in urgent cases. You can simultaneously serve a takedown notice on the platform — WhatsApp, Instagram, X — under Section 79 of the IT Act read with the Intermediary Rules; once the platform has actual knowledge of unlawful content, it must disable access expeditiously, as held in Shreya Singhal v Union of India (2015).

My ex is threatening to send my photos to my parents and office. Is that criminal intimidation?

Yes. Section 503 of the IPC explicitly covers a threat to reputation. The Supreme Court in Chander Kala v Ram Kishan (1985) held that a threat to spoil a woman's modesty in order to compel an act amounts to both criminal intimidation and extortion. Where the relationship was domestic, the Protection of Women from Domestic Violence Act 2005 also gives a right to apply for a protection order. Section 354D for stalking — both physical and digital — gets attracted on repetition. None of these requires the threat to have been carried out.

What punishment does the law prescribe for this kind of blackmail?

Section 506 of the IPC prescribes up to two years for ordinary criminal intimidation, and up to seven years where the threat is of death, grievous hurt, fire-destruction of property, or imputing unchastity to a woman. Section 507 adds another two years on top, where the threat is anonymous. Section 384 for extortion carries up to three years. Section 66E of the IT Act prescribes up to three years and a fine up to two lakh rupees for capturing or transmitting images of a private area. Section 67 prescribes up to three years on first conviction and up to five years on a second.

How long does a criminal case for online blackmail usually take?

It varies. Where the sender's number or account is identifiable, the cyber cell typically completes investigation in sixty to ninety days and files the chargesheet under BNSS Section 193 (old CrPC Section 173). Where the account is anonymous and routed through a VPN, identification can take six months or longer. Trial in summary cases is between three and twelve months. The faster the complainant produces clean Section 65B-compliant screenshots and avoids deleting evidence, the faster the case moves.

Written by the Pinaka Legal Editorial Team. For queries, call +91 8595704798 or email info@pinakalegal.com. For more articles on Indian law, visit the Pinaka Legal Blog.