But how will such a criminal make Coca cola trust that it's him and not his impostor asking for money? And how will he make Coca cola trust that he will actually stop doing it?
2) Do whatever you're planning to do.
3) Transmit another message to the company you're blackmailing in which you reveal the message that matches the original SHA1 hash.