Sextortion Email Scam? Do THIS Immediately to Protect Yourself

You open your inbox and see a nightmare: someone claims they’ve hacked your webcam, recorded you, and are about to leak private footage to your family unless you pay them in Bitcoin.

Stop. Take a breath.

This is a classic sextortion scam, and the panic you’re feeling right now is exactly what they’re counting on. The most important thing you can do is absolutely nothing. Don’t pay, don’t reply, and don’t panic.

It’s all a bluff

These scammers send these threats to millions of people at once. They aren’t watching you through your camera, and they don’t have any secret footage. They’re just fishing for a quick payout from someone who gets scared enough to hit “send” on a crypto transfer.

But how do they make it sound so real? They use a few common tricks:

• They use your old passwords. If they mention a password you recognize, it didn’t come from your computer. They just scraped it from a massive, publicly available list of past data breaches.
• They spoof your email. Sometimes it looks like the email came from your own account. It’s a simple trick that just fakes the “sender” field to make you think they’ve breached your inbox.
• They grab your home photo. They might pull a picture of your house off Google Street View. It’s creepy, but it’s public info, not a sign that you’re being watched.

Why you shouldn’t pay

Never send them a dime. If you pay, you’re just marking yourself as a target. You’re telling them their scam works, which means they’ll either demand more money or sell your info to other scammers. These attacks are automated; once you ignore them, they move on to the next person.

Your immediate to-do list

1. Don’t engage. Do not reply, and definitely don’t click any links. Replying just confirms your email is active and that you’re listening.

2. Check your credentials. If they mentioned a password, go to Have I Been Pwned to see which company got breached.

3. Lock down your accounts. If you’re still using that password anywhere, change it immediately. Turn on two-factor authentication (2FA) for every account you have.

4. Report it. File a report with your local cybercrime authority—like the FBI’s IC3 in the U.S. It helps law enforcement track these groups.

How to stay safe going forward

If the email is generic and demands Bitcoin, it’s 100% a bluff. Delete it and move on.

But if you’re ever in a situation where someone actually has private photos of you, don’t delete the evidence. Block the person, save the communication, and go straight to the police.

For everyday peace of mind? For everyday peace of mind, you can put a piece of tape over your webcam, or read our guide on signs your webcam is being watched right now to understand the real risks. It’s cheap, it’s effective, and it’s the best way to ensure no one is “watching.” Finally, stop reusing passwords. Stop saving passwords in your browser and instead get a password manager to generate unique, strong credentials for every site you use. It’s the single best way to keep these scammers out of your life for good.