Friend been hobbying and very careful but may have screwed up. An online domme says she can contact wife and tell all the things done, send pictures, and tell her all. Wants a 'buy out' of several hundred.
This is a anonymous (hobby) twitter account with fake information in the "name". the phone number and email addresses are google voice and gmail that have fake info (hobby accounts). You do have to enter a real phone number to verify the google voice so used a physical phone a little traceable to him but immediately deleted it from the account in case password was cracked. (I'm sure FBI could extract that from google archives and do hours detective work from there if they wanted to, but I thought safe for the minor stuff like only mongering. He's not a drug kingpin). Posted lots of pic but have turned off GPS access for camera on phone.
So, start with a findom and hit it off. Even gave her password to the twitter account. But when wanted to end it, she said he won't stop and she can easily contact wife. When told that blackmail is illegal, she stated she's done nothing wrong, has demanded nothing directly, and simply informing a wife that husband is cheating is legal. Backed off that line of thinking in immediate term but later asked if he wants to "buy out" of the situation. Stupidly offered a small amount but she replied it wasn't as big as expected.
Normally who cares about a fake account but you can see the IP address logged in from since she has the password. I've read that you need a court warrant to get att, time warner, etc to release the names of accounts associated with dynamic DHCP addresses from ISPs. But i've also read some stating you can still get the information? Also, what if one time forgot to turn off camera GPS tracker?
so far Ive heard of no proof of knowing identity from this person.
so, what vulnerabilities actually exist. Is the probability near zero that she actually knows the real identity and just ignore and get the hell off twitter? Or is this actually real and something to actually take to police. (He has a screen shot of all the DM's and a screen shot of the IP addresses the findomme used to log in, so there is enough hard evidence to start a cyber-extortion/blackmail inquiry I believe. The IP addresses are from Verizon Mobile and Time warner ISP's in New York area so I bet this is a personal account. If investigation started at the least they will be able to track those down)
Bare in mind that once take to police, the secret is effectively out. Much prefer to just never hear from her again and just forget it happened. The worst end is she it's bluffing, gets pissed, contacts family who gets hurt and this person faces possibility of real consequences.
Please any advice!