# Two Years for 120 Victims: The Com's Sextortion Pipeline Has a Body Count Nobody's Counting


Somewhere in the middle of a two-year prison sentence is a math problem worth sitting with: 120 victims, 24 months, roughly one ruined adolescence for every week served. That's the arithmetic of the latest conviction tied to The Com, the sprawling English-speaking cybercrime collective that has spent the better part of a decade terrorizing children online.


The sentencing — handed down this week to a member whose name will join a lengthening list of convicted Com affiliates — was for blackmail and sextortion offenses. The victims were children and teenagers, spread across multiple countries. The playbook was the same one The Com has been running for years: manipulate a minor into sharing an explicit image, then flip the power dynamic and threaten exposure until the money flows or the victim breaks.


Some victims break in ways that don't show up in sentencing documents.


## What The Com Actually Is


Outsiders often misread The Com as a single organization. It isn't. It's better understood as a culture — a loose, shifting network of young men, many of them teenagers themselves, who congregate on Discord servers, Telegram channels, and private forums to trade tools, techniques, and status. There's no CEO, no org chart, no fixed membership. What holds it together is a shared language, shared status games, and shared contempt for anyone they can victimize.


That looseness is both the network's strength and, increasingly, its vulnerability. Because The Com is social first and criminal second, its members brag, recruit, and run their mouths in ways that generate evidence. Law enforcement has gotten better at exploiting that. Scattered Spider — arguably The Com's most technically sophisticated offshoot — saw a wave of arrests last year precisely because its members left identifiable trails across Discord and hacker forums while conducting $100 million in casino heists.


Sextortion sits at the lower-prestige end of The Com's activity spectrum. It requires minimal technical skill: create a fake persona, build trust with a target, solicit an image, then pivot to extortion. The victims are disproportionately teenage boys targeted by fake female profiles. The financial demands are often small — $50, $200 — which makes the crime feel trivial from the outside while being catastrophic for a 14-year-old terrified his parents and school will see what he shared.


## The Numbers Nobody Reports


The FBI's Internet Crime Complaint Center logged over 26,000 sextortion complaints in 2023, a figure that criminologists universally agree is a dramatic undercount. Most victims — especially minors — never report. The shame calculation for an adolescent who shared an intimate image is overwhelming, and perpetrators exploit that shame deliberately, coaching victims not to tell anyone, threatening escalated exposure if they involve parents or police.


What makes The Com's involvement in this particularly grim is the industrialization of the process. These aren't lone predators. They share scripts, share fake personas, share lists of potential targets scraped from social media. Some operate across dozens of simultaneous victims at once. The 120 victims attributed to this single defendant represent confirmed, documented cases — the actual number of people he contacted, manipulated, or attempted to extort is almost certainly higher.


Two years. For 120 victims.


That sentencing math is going to matter as more of these cases work their way through courts in the UK, the US, Canada, and Australia — all jurisdictions where The Com operates and where law enforcement cooperation has been quietly strengthening.


## Where the Real Danger Lives Now


The sextortion problem has evolved in ways the original FBI warnings didn't anticipate. Early campaigns were largely financially motivated — pay up or we post. The more recent wave has added a second track: some perpetrators have less interest in money and more interest in the psychological destruction itself. Researchers who monitor these communities have documented cases where Com-adjacent actors collect and trade "wins" — documented evidence of causing a victim psychological crisis — as status tokens within the group.


That shift from financial to reputational motivation within the criminal community makes the threat harder to interdict. Payment processors and financial monitoring can disrupt money flows. There's no equivalent choke point for sadism.


Separately, AI-generated imagery has begun complicating sextortion prosecution in multiple jurisdictions. Defendants now regularly claim that explicit images were generated rather than obtained from real victims, muddying evidentiary chains. It's a defense that hasn't yet achieved widespread traction in courts, but it's going to.


## For Parents and Schools Right Now


The safeguarding gap that The Com exploits isn't primarily technical. It's the silence that surrounds these incidents when they happen. The single most effective intervention documented in research on sextortion recovery is rapid parental response — not punishment, not shame, but immediate de-escalation and reporting. Kids who know they can tell a parent without catastrophic consequences are significantly less likely to stay trapped in an extortion cycle.


Schools have been slow to build that messaging into existing digital literacy programs. The conversation most adolescents receive covers basics — don't share passwords, don't click unknown links — without addressing the specific social engineering patterns that sextortion relies on. Platform-side, Instagram and Snapchat have introduced some nudges for minors in DM flows, but the platforms where this most often initiates (Discord, Telegram, gaming platforms with chat) have been slower to act.


---


## HackWire Analysis


This conviction is worth more attention than it's getting, and not because two years is an adequate sentence for what was done to 120 people. It isn't. It's worth attention because of what it reveals about the current state of The Com's legal exposure.


The pattern across recent prosecutions — Scattered Spider members, ALPHV affiliates with Com ties, now sextortion operators — suggests that law enforcement in anglophone countries has moved from reactive response to deliberate targeting of the network's social infrastructure. Prosecutors are connecting arrests across jurisdictions, identifying shared communication channels, and using early arrestees to map the broader network. That's a different posture than five years ago, when these cases were largely handled as isolated incidents by local cybercrime units with limited interagency coordination.


What other coverage is missing: the victim population in these cases skews heavily toward adolescent boys, a demographic that receives dramatically less safeguarding attention than girls in online safety discourse. The assumption that boys are less vulnerable to image-based abuse is empirically wrong and actively harmful — it keeps victims silent and keeps programs under-resourced.


The two-year sentence will read as lenient to anyone who has worked with sextortion survivors. But the more meaningful number is how many parallel prosecutions are in the pipeline. The Com is learning that the social openness that built its culture is now the audit trail dismantling it, one conviction at a time.


— HackWire Editorial


---


## Related Coverage


  • Read more in our [Ransomware](https://www.hackwire.news/category/ransomware) coverage
  • Cross-reference with [Breaches](https://www.hackwire.news/category/breaches) and [Vulnerabilities](https://www.hackwire.news/category/vulnerabilities)
  • Stay current via the [HackWire homepage](https://www.hackwire.news/)