Online extortion in Saudi Arabia: what to do the moment you are threatened, official reporting channels, how to preserve evidence, and the penalty under the Anti-Cybercrime Law.
Short answer: Do not pay, negotiate or delete anything. Preserve chats, account details and links, then report through an official channel such as the Kollona Amn app or the nearest security authority. Online extortion is punishable under the Anti-Cybercrime Law by imprisonment, a fine, or both; the competent court determines the penalty.
Extortion often begins with an unexpected message involving private images, chats or data obtained through hacking or deception, followed by a threat to publish unless the victim pays or complies. Under pressure, people sometimes pay or delete everything—two responses that can worsen their position.
This guide explains immediate steps, reporting and the lawyer's role. If this is happening to you now, see our online extortion and cybercrime lawyer service; your information is treated confidentially.
Threats to publish private images or videos.
Threats to publish chats or personal or professional information.
Hacking an account and demanding money to return it.
Impersonating a person or authority to pressure the victim.
Do not pay or comply with demands
Payment usually does not end extortion and may encourage further demands. Compliance can give the extortionist additional leverage.
Do not delete chats or the account
Deletion destroys evidence the competent authorities may need. Keep everything as it is.
Preserve evidence systematically
Screenshots showing the account name or number, date and time.
The profile link or username, not only the display name.
Any transfer receipts if you have already paid.
Copies of threatened files in your possession, without forwarding them to anyone.
Change passwords, enable two-factor authentication and review connected devices. Do not tell the extortionist that you have reported them.
How do you report online extortion?
Official reporting channels include:
The Kollona Amn app, which allows an electronic report with supporting evidence.
Police stations, where you can attend and present the evidence.
The competent authorities investigate and trace the extortionist. The case is then referred to the Public Prosecution, which conducts the prosecution before the Criminal Court.
What is the penalty?
Online extortion may be accompanied by other offences, such as unlawful access or defamation. For broader context, read our guide to the Anti-Cybercrime Law: offences and penalties. The court determines the penalty in each case from its facts and evidence.
What if the private material belongs to the victim?
Fear about this issue can stop victims from reporting. In principle, the law treats the reporter as the victim and the investigation focuses on the extortion.
What does a lawyer do in these cases?
Assesses the position and organises evidence before reporting.
Accompanies you through reporting and investigation.
Follows the case before the Public Prosecution and Criminal Court.
Protects confidentiality as far as the procedures allow.
How can you reduce future risk?
Prevention does not remove the extortionist's responsibility, but practical steps can reduce exposure:
Do not send private images or documents through apps, even to people you trust.
Enable two-factor authentication on email and social accounts.
Do not open unknown links or share verification codes.
Review privacy settings and limit public personal information.
Be cautious of new accounts that rush a relationship or ask to move apps.
Teach children to report threats immediately without fear of blame.
Checklist after an extortion threat
I did not pay or comply.
I did not delete chats or the account.
I saved screenshots showing identifiers and dates.
I copied the profile link or username.
I changed passwords and enabled two-factor authentication.
I reported through an official channel and kept the reference.
I contacted a licensed lawyer for an assessment.
Frequently asked questions
What if the extortionist is outside Saudi Arabia?
You can still report. The competent authorities decide what steps are available within their capabilities and international cooperation frameworks. Preserving evidence remains important.
Is blocking the extortionist enough?
Blocking may stop contact temporarily, but it does not prevent the threat being carried out or others being targeted. Reporting enables investigation and accountability.
What evidence should I keep?
Keep chats, screenshots, account links, usernames, dates and any payment receipts. Do not delete the account or related files.
What should I do with my accounts after a threat?
Change passwords, enable two-factor authentication and review connected devices. Stop contact without deleting evidence.
Need help with an extortion case?
Do not face extortion alone or make decisions under pressure. Our licensed lawyers help organise evidence, report and follow cases confidentially across Saudi Arabia, in person or remotely. See our cybercrime and online fraud service or request a confidential case assessment.
This article is general information, not legal advice for a specific case. The competent court decides criminal matters.
