The Email Says “I Hacked Your Webcam.” Here’s What You Do Next.

You’re reading along one evening and an email pops up. The subject line is your own email address. The message says you’ve been hacked. It claims the sender installed malware on your computer, turned on your webcam, and recorded you visiting adult websites. Then comes the threat: pay fourteen hundred dollars in Bitcoin within forty-eight hours or the video gets sent to everyone in your contact list. To prove they’re serious, they include an old password you used years ago. Your stomach drops.

Stop. Breathe. This is the classic digital extortion scam, and it works only because it scares people before they think. The most important thing to know is that the sender almost certainly has nothing. No video. No malware. No access to your accounts. That old password they showed you? It came from a data breach, not from hacking you personally. Tens of millions of passwords have leaked online from hacked websites. Scammers buy those lists, match them to email addresses, and fire off thousands of threatening emails. When you see your own password staring back at you, it feels like proof of a break-in. In reality, it is just proof that you reused that password somewhere years ago.

Do not pay. Paying does nothing. The scammer will not delete the video, because there is no video. What happens instead is that you become a known payer, and your email address gets passed around as an easy mark. The next threat will be bigger, and the one after that will be nastier. Once you pay, you are not buying your way out of trouble. You are buying a lifetime subscription to it.

What should you do? First, verify the threat. If the email claims your email was hacked, check your online accounts. Log in directly by typing the web address yourself, never by clicking a link in the email. Change the password on any account that uses that old leaked password. Make it a long passphrase, something like three random words with numbers and symbols. Do not reuse it anywhere else. Turn on two-factor authentication wherever it is available, especially on your email, bank, and social media accounts. That way even if someone has your password, they cannot get in without the code on your phone.

Next, run a security scan on your computer. You can use the built-in Microsoft Defender on Windows or the built-in protection on a Mac. That will catch most real malware. If the scanner finds nothing, trust it. The scam email itself is not evidence of an infection. Do not click any links or open any attachments in the threat email. That is how a fake threat becomes a real infection. Delete the email after you have changed your passwords.

It is also worth checking haveibeenpwned.com or a similar site to see which of your accounts have appeared in known data breaches. This is not a scam site; it is a widely used service that collects breach data. Enter your email address and it will show you where your information leaked. Then you can change those specific passwords.

Now, about the emotional side. This scam is designed to make you feel ashamed and isolated. The threat mentions adult websites or webcam use on purpose. It wants you to be too embarrassed to tell anyone. Do not fall for that. Almost every adult has browsed something online they would not brag about. The scammer does not know what you do online. They are playing the odds. If you ignore the email, nothing will happen. People report these emails every day, and the worldwide response is the same: no video, no contact with loved ones, nothing. The only people harmed are the ones who paid.

If the extortion attempt feels especially specific, or if you are being targeted repeatedly, you can report it to the FBI’s Internet Crime Complaint Center at ic3.gov. You can also report it to the Federal Trade Commission. Reporting helps law enforcement see patterns and shut down payment operations. Keep any evidence, but do not communicate with the scammer. Do not try to negotiate. Do not send a test payment. Block and ignore.

The bottom line: a threatening email with your old password is a bluff. Treat it like junk mail with a mean streak. Fix your passwords, turn on two-factor authentication, and move on with your life. The moment you recognize the scam for what it is, the ugly power it has over you disappears.