Digital Forensics Corp: FTC Says Sextortion Victims Paid $60M

Someone threatens to send your nude photos to your spouse, your boss and your church group unless you pay. You search for help, and the first result promises experts who will track the criminal down. Minutes later a sales agent tells you that blocking the blackmailer is "the last thing you want to do."

According to a Federal Trade Commission complaint made public on October 12, that call was the start of a second extortion. The FTC says Digital Forensics Corporation (DFC) took at least $60 million from sextortion victims between February 2023 and July 2026 for investigations it largely did not perform.

Key Takeaways

• The FTC filed its complaint against Digital Forensics Corporation, Dmitry Belkin and 11 affiliated companies under seal on October 6, 2026, in the U.S. District Court for the Northern District of Ohio, case 1:26-cv-02615.
• The complaint alleges DFC charged $1,499 to $20,000 for "Phase 1" services, then fabricated chat transcripts and reused saved coordinates for Nigeria or the Philippines instead of tracing sextortionists.
• The FTC says the scheme took in at least $60 million from February 2023 to July 2026, and a federal court granted its request to temporarily halt the business.
• The charges cover the FTC Act, the Telemarketing Sales Rule, the Gramm-Leach-Bliley Act and the 2024 Reviews and Testimonials Rule, including paying Uber drivers to post fake Google reviews.
• NCMEC's Take It Down and StopNCII.org remove intimate images for free, and the FBI has warned since April 2023 against paying for profit sextortion "assistance" firms.

What Is the FTC Alleging Against Digital Forensics Corp?

The FTC alleges that DFC sold sextortion victims investigations it did not carry out, then hid the failure with fabricated reports and fake reviews. The agency's October 12 press release says a federal court "has granted the Federal Trade Commission's request to temporarily halt" the company and its CEO.

The defendants are Belkin and 12 companies, many listing their address as 4400 Renaissance Parkway in Warrensville Heights, Ohio. Several use near identical names, including Cyber Blackmail 911. The FTC's motion for a temporary restraining order adds that the newest complaints are "piling up against 'Blackmail Helpline,'" a shift the agency says is likely meant to evade DFC's negative online reputation.

"Digital Forensics preys on consumers already in crisis," said Christopher Mufarrige, director of the FTC's Bureau of Consumer Protection. DFC did not respond to The Record's request for comment. These are allegations; the court will decide the case.

What Did DFC Promise, and What Did It Actually Do?

DFC promised to unmask the criminal and alert police; the complaint says it mostly clicked block. Phase 1 came in five tiers, $1,499, $2,999, $4,999, $7,200 and $20,000, and the FTC says the default recommendation was $4,999 "regardless of the victim's circumstances." Here is the gap the complaint describes:

• Promise: take over communications. Staff logged into victims' accounts and "simply block the sextortionist's communications," then told victims not to log back in.
• Promise: an investigative report. A former sales manager recalled employees messaging each other, one posing as the sextortionist, then screenshotting the fake chat for the "Phase 1 Report."
• Promise: a "tracking campaign" to locate the criminal. Former employees estimate half the "Tracking Link Results" were faked. They say DFC saved latitude and longitude coordinates for places like Nigeria and the Philippines and pasted them into reports.
• Promise: report to law enforcement. After payment, DFC allegedly said police contact required Phase 2. A former analyst, Mark Tolok, says emails to police agencies frequently bounced and nobody followed up.
• Promise: Phase 2 is rarely needed. Every customer was pushed toward it anyway, usually for another $2,000 to $5,000 or more, and a former employee estimates more than 50% bought it. Tolok called it a "scam."

Contracts promised partial refunds only within three days of signing. The complaint says customers were told not to contact DFC for 72 hours while it "investigated," then refused refunds for missing that window.

How Did Victims Find DFC?

Mostly through paid search and video ads seen in a panic. The complaint names Google, YouTube and X, and websites including BlackmailHelpline.com, DigitalForensics.com, CyberBlackmail911.com and SecurityBreach911.com. Corporate records show three of the companies spent over $17.5 million on advertising in 2024 and 2025.

After a victim filled in the "REPORT SEXTORTION" form, a sales agent typically called back within 10 to 20 minutes, working from a script the FTC says Belkin wrote himself. The script told agents to probe for "pain points" such as a shaky marriage, a custody fight or military service. A checklist required agents to confirm they had used keywords including "pedophile" and "ruin your life" on every call.

By our arithmetic, $60 million over the 42 months from February 2023 to July 2026 is about $1.4 million a month. The FBI warned about exactly this business model in April 2023, two months into that window, without naming any company. USA Today published an investigation of DFC in March 2025. The money kept coming in for 16 months after that.

Which Laws Does the FTC Say DFC Broke?

Four, across six counts: Section 5 of the FTC Act, the Telemarketing Sales Rule, Section 521 of the Gramm-Leach-Bliley Act and the Consumer Reviews and Testimonials Rule. For compliance teams, the review counts are the ones to study.

• Fake reviews, Uber edition. Employees mailed packets headed "Digital Forensics Corporation" to random U.S. cities, then paid a local Uber driver to pose with them outside an empty office building and post a five star Google review with the photo, which Belkin believed would beat Google's filters.
• Overseas review writers. Staff in India allegedly wrote the ResellerRatings.com reviews behind the "5 out of 5 stars based on 3542 user reviews" badge on DFC's site.
• A fake BBB. Unhappy customers were sent a link to a copy of the Better Business Bureau site run by DFC, so complaints never reached the real BBB, which could not verify at least 234 five star reviews about the company.
• Refunds for silence. Partial refunds required a release with a nondisparagement clause and a $500 per day liquidated damages provision. The BBB warned Belkin in June 2024 that this could violate the Consumer Review Fairness Act, though that law is not one of the counts.

Most coverage stops at the $60 million, but whether victims see any of it back depends on legal plumbing. In AMG Capital Management v. FTC (2021), the Supreme Court held that Section 13(b) does not let the FTC win restitution. The rule counts run through Section 19 instead, which lets a court order "the refund of money or return of property." The reviews rule took effect October 21, 2024, and here it sits beside telemarketing and banking privacy claims.

Why Email Users Should Care

Because the "help" started with your password. The complaint says Phase 1 meant DFC staff would "log in to the victim's social media, email, and other accounts" to take over the conversation. Former employees add that staff had to "delete the entire chat log" from victims' accounts, erasing the record victims would need to check DFC's work.

Your inbox is the reset key for most of your other accounts. No legitimate support service needs it to help with sextortion; Take It Down and StopNCII.org never even ask for the image itself. If you gave a recovery company your login, change that password and turn on two factor authentication now.

Keep one distinction clear. The complaint describes victims facing blackmailers who threatened to publish real images. The mass emails that claim your devices were hacked and cite a real data breach as proof are a different scam with no images behind them; we covered the latest wave, built on ShinyHunters breach dumps, in July. The complaint does not tie DFC to those emails.

What Should a Sextortion Victim Do Instead?

Do not pay, block the sextortionist and report it, which is how the FTC's filing summarizes FBI and NCMEC guidance. It also quotes the FBI: "Victims of sextortion should never have to pay fees to receive assistance or to have their non-consensual images removed from online or in-app postings."

1. Do not pay the blackmailer, and do not pay anyone who offers to "fight back" for a fee.
2. Block and stop responding. DFC's script said ignoring them "is not an option." The FBI has said the opposite for years.
3. Report it to the FBI at ic3.gov or 1-800-CALL-FBI. If the victim is a minor, also report to NCMEC's CyberTipline or 1-800-THE-LOST.
4. Hash the images. Under 18 when the image was taken: use Take It Down. 18 or older: use StopNCII.org. Both create a digital fingerprint on your device and share only that hash with participating platforms.
5. Use the 48 hour rule. Under the TAKE IT DOWN Act, covered platforms must remove nonconsensual intimate images within 48 hours of a valid request, and the FTC warned 12 major platforms in May that it is enforcing it.

Red flags of a fake sextortion help firm

The FBI's 2023 warning lists the signs. Walk away if a company:

• asks for fees before any work is done, or requires a signed contract;
• discourages you from contacting police, or says police will not help;
• uses high pressure or scare tactics, such as warnings about losing your job or your children;
• claims ties to government or law enforcement;
• sells cease and desist letters to overseas scammers, which the FBI says "are not legally enforceable."

What Happens Next?

The court will decide whether the halt becomes a preliminary injunction. In its motion for an ex parte TRO, the FTC asked for an asset freeze, a temporary receiver and immediate access to the business premises. We could not locate the signed order, so which measures were granted is unconfirmed.

The motion alleges Belkin paid more than $38 million toward his personal credit cards and bought a boat and a jet ski, and that the company seemingly gave a law enforcement agency a falsified sales script. If you paid DFC, Blackmail Helpline or any of the names above, file a report at ReportFraud.ftc.gov and keep your contract and receipts.