Threat Intel
Digital Forensics Corp. Fraud: $60M in Sextortion Scam
Digital Forensics Corporation (DFC) scammed victims of sextortion by charging up to $20,000 for nonexistent services, amassing at least $60 million between 2023 and 2026. The FTC has issued a temporary injunction and warns defenders to verify third‑party claims and report fraud.
What happened
Digital Forensics Corporation (DFC), owned by Dmitry Belkin, ran a sham sextortion‑help service from February 2023 to July 2026. The company lured victims into paying between $1,499 and $20,000 for services that never materialized, amassing at least $60 million in fraud.
Impact
- Victims paid up to $20,000 for unperformed services.
- Services promised included stopping the attack, locating the perpetrator, investigative reports, law‑enforcement notification, and cease‑and‑desist letters.
- In reality, DFC fabricated chat transcripts, reused generic location data, and simply blocked communications without coordination with law enforcement.
What defenders should do
- Verify the legitimacy of any third‑party sextortion‑assistance provider before engaging.
- Encourage victims to block the attacker’s account, change passwords, and use two‑factor authentication.
- Report suspected fraud to the FTC and local law‑enforcement agencies.
- Educate staff and users about the FTC warning and the tactics used by DFC.
Current status
Federal courts have issued a temporary injunction preventing DFC from conducting business until a final decision is reached.
Related articles
FTC sues Digital Forensics Corp for $60M sextortion scam
FTC has filed a complaint against Digital Forensics Corp and affiliates for scamming sextortion victims, claiming $60M in fraudulent payments. The company advertised services that never delivered and fabricated evidence. A federal court has temporarily halted their operations.
Read briefing
Group‑IB Launches Unified Fraud Protection Platform for Digital Identity Security
Group‑IB has introduced a comprehensive Fraud Protection platform that consolidates threat intelligence, XDR, and email protection into a single solution. The platform targets organizations seeking to safeguard digital identities against fraud, phishing, and brand abuse. Defenders should evaluate integration options and enable real‑time monitoring to strengthen their security posture.
Read briefing
Group-IB Expands Cybercrime Intelligence Operations in Latin America
Group‑IB has launched a focused intelligence program to counter rising cybercrime in Latin America, highlighting local threat actors and tactics. The initiative offers a Unified Risk Platform and threat‑intelligence services to help SecOps teams detect, prevent, and respond to fraud, ransomware, and brand abuse. Defenders should integrate Group‑IB solutions, monitor regional threat feeds, and adopt the platform’s attack‑surface and digital‑risk protection modules.
Read briefing
Disruption of Chinese Phishing Kit Ecosystem: Storm-2990 & YAM Store
Microsoft’s Digital Crimes Unit exposed a Chinese‑language phishing kit ecosystem, including the Storm‑2990 developers and the YAM Store marketplace (Storm‑3119). The network distributed over 1 billion phishing emails and SMS to more than 75 000 organizations in healthcare, finance, wholesale, and IT sectors across Japan, the U.S., Australia, and India. Defenders should block known phishing kit domains, monitor for compromised cloud credentials, and apply Microsoft Defender detections.
Read briefing