The Sextortion Scam: How Criminals Use Fear and Shame to Empty Your Bank Account

You get an email late at night. The subject line is your full name. You open it, and your stomach drops. The sender claims they have compromising video of you—something from a porn site you supposedly visited, or worse, footage they say they captured through your webcam. They threaten to send that video to every contact in your email and social media unless you pay a ransom, usually in Bitcoin or gift cards. The message often includes one of your old passwords—a real one, taken from a data breach years ago—to prove they’re serious.

This is sextortion. It is one of the fastest-growing online extortion scams, and it specifically targets middle-aged Americans. Why? Because criminals know that people in their forties, fifties, and sixties tend to have stable jobs, retirement savings, and reputations they value. They also know you are more likely to panic than to think clearly when your family, boss, or church community is threatened with exposure.

Let’s be blunt: almost every sextortion email is a bluff. The scammers do not have a video of you. They do not have webcam footage. They bought your password from a hacker marketplace for pennies and automated the threat. But the scam works because it feels real. The fear of public humiliation is powerful, and scammers exploit that fear ruthlessly.

The typical script goes like this: the scammer claims they installed malware on your computer or hacked your webcam while you were visiting adult websites. They say they recorded you masturbating, and they have kept that video alongside a screen recording of your browsing history. They demand payment—usually between five hundred and five thousand dollars—and set a 24- or 48-hour deadline. The email even includes a countdown timer to make the threat feel urgent. If you do not pay, they promise to send the video to your email contacts, Facebook friends, and employer.

Here is what actually happened: the scammer never hacked your computer. They found your email and password in a public data dump from a site like LinkedIn, Yahoo, or a dating platform that was breached years ago. They mass-mail these threats, knowing that a tiny fraction of recipients will be caught off guard and pay. It is a numbers game, not a targeted attack on you.

But what if the scammer has a real password? That is the trick that makes even skeptical people pause. The scammer deliberately includes a password you actually used—one you may not have changed in a decade. That proves they have something on you, right? Wrong. It proves they bought a list of compromised credentials. That is all. They do not have access to your current accounts unless you are still using that same password. They do not have video. They do not have your webcam recordings. They have a stolen password and a script.

Scammers also adapt. Some now use deepfake technology to create a short, fake video of you—often a generic headshot from social media superimposed onto a nude body. Others threaten to “expose” a fake child pornography allegation unless you pay. This is even more insidious because the mere accusation can destroy a person’s life, even if false. The goal is the same: terrify you into handing over cash before you have time to think.

If you receive a sextortion email, do not pay. Do not reply. Do not click any links or open attachments. The moment you pay, the scammer marks you as an easy target and will demand more money. They may claim they need a “second payment” to delete the video, or that the first transfer failed. There is no end to it.

Instead, take these steps immediately. First, change every password you use, especially the one that appeared in the threat. Use a password manager to generate strong, unique passwords for each account. Enable two-factor authentication everywhere—your email, your bank, your social media. Second, run a full antivirus scan on your computer and phone. This is mostly for peace of mind, since the scam typically involves no malware on your device, but it is good practice. Third, report the email to the Federal Trade Commission at ReportFraud.ftc.gov and to the FBI’s Internet Crime Complaint Center (IC3). They track these scams and can sometimes shut down the Bitcoin wallets or accounts used to collect payments. Fourth, tell someone you trust. Sextortion thrives on secrecy. Talking to your spouse, a friend, or even a local police officer can break the spell of shame that the scammer is counting on.

Prevention is straightforward. Keep your software updated, especially your browser and operating system. Cover your webcam with a slide or a piece of tape when you are not using it. Be wary of clicking links in unsolicited emails. And never use the same password across multiple sites.

Remember: you are not dirty. You are not stupid. You are a target because you are a decent person with something to lose. Scammers know that. Now you know their playbook. Do not let them win.