The Sextortion Email Scam: Don’t Let Fear Cost You Thousands

You open your inbox and freeze. There’s an email from someone who claims to have hacked your computer. They say they recorded you visiting adult websites and captured footage of you through your webcam. Now they want $1,000 in Bitcoin, or they’ll send that video to everyone you know — your spouse, boss, neighbors, church group. The email includes one of your old passwords to make it look real. Your heart races. You feel sick. You think, “What if it’s true?”

It’s not true. That email is a lie from start to finish. It’s a classic sextortion scam, and it’s one of the most effective forms of digital extortion targeting middle-class Americans today. The scammers aren’t hackers. They didn’t film you. That old password they used came from a data breach years ago — your login credentials were dumped online, and they bought them for pennies. The entire script is designed to exploit shame and panic. Once you send the money, they’ll ask for more. They never stop.

You need to understand exactly how this scam works so you can spot it before your brain goes into fight-or-flight mode. The email will almost always start with a subject line designed to grab your attention, often something like “Someone has your password” or “I recorded you.” The body typically says they installed malware on your device and used your webcam to capture you in a compromising moment. They may even claim to have accessed your social media contacts. Then comes the demand: send a specific amount of Bitcoin to a wallet address within 24 to 48 hours, or the video goes public.

The scammers include your real password as proof. This is the trick that convinces even savvy people. But here’s the truth: your password was leaked in a breach at a company where you had an account — maybe LinkedIn, Adobe, MySpace, or any of the hundreds of sites that have been compromised over the years. The scammers buy massive lists of these credentials on the dark web for next to nothing. They have no access to your computer. They never watched you. They are sending the same email to millions of people, hoping a few will panic and pay.

Another variation of this scam involves threatening to send the video to your employer or to the police, claiming they have evidence of illegal activity. Some scammers pretend to be law enforcement officers, saying you have an outstanding warrant and need to pay a fine immediately. It’s all fiction. Real police don’t call or email demanding gift cards or cryptocurrency. The Department of Homeland Security does not send you a text message with a threat of arrest. These scammers rely on fear and confusion to override your natural skepticism.

What if you actually have used your webcam for anything private? You may feel a genuine spike of anxiety. Stop and think. The scammer didn’t mention anything specific. They didn’t name a date, a time, or a website. Their threat is generic. If they had real footage, they’d prove it by sending you a screenshot or a short clip. They never do. Because they have nothing.

Here’s what you should do if you receive one of these emails. First, do not reply. Do not click any links in the email. Do not open any attachments. Second, change that compromised password immediately — not just the one they showed you, but any other account where you used the same or a similar password. Use a password manager to generate strong, unique passwords for every site. Third, enable two-factor authentication on your email and financial accounts. This adds a second layer of protection even if your password is stolen. Fourth, forward the scam email to the FBI’s Internet Crime Complaint Center at ic3.gov. The FBI tracks these schemes and can sometimes disrupt the criminal networks behind them. You can also report it to the Federal Trade Commission at reportfraud.ftc.gov.

Never, under any circumstances, send money to a blackmailer. If you pay, they will mark you as a willing victim. They will come back with a higher demand. They may even sell your name to other scammers. Paying guarantees that the threats will continue, not end.

If the scammer has included your password and you’re still worried, you can check if your email address has been part of a known data breach by visiting haveibeenpwned.com. It’s a free, legitimate service run by a security expert. It will show you which breaches exposed your information. Knowing that your password came from a breach, not from a hacker inside your computer, can help you calm down and think clearly.

The criminals behind sextortion emails operate from overseas, often in countries with weak cybercrime laws. They send millions of emails per day. A tiny success rate still makes them money. They target you because they know you value your reputation and your family’s trust. That emotional leverage is the only weapon they have. Don’t give them the satisfaction.

Remember: no real hacker sends you a warning email and asks for Bitcoin. Real cybercriminals quietly steal your data, drain your bank account, or lock your files for ransom. This type of extortion is a bluff. Treat it like the junk mail it is — delete it, report it, and move on with your life. Your dignity is intact. Your computer is safe. And your wallet should stay closed.