Medium riskEmail Scams

Sextortion Email Scam

This scam emails a threatening claim that the sender has recorded you through your webcam or has compromising material, and demands payment in cryptocurrency to stay silent, even though they almost always have nothing.

Quick verdict

Risk level
Medium risk
Scam type
Blackmail / extortion email
Main red flag
An email threatening to release a 'recording' unless you pay, often quoting an old password.
What to do first
Do not pay or reply. These threats are almost always empty. Change any password the email quotes.

What this scam usually looks like

This scam emails a threatening claim that the sender has recorded you through your webcam or has compromising material, and demands payment in cryptocurrency to stay silent, even though they almost always have nothing.

Example message pattern

Example pattern — not a real report
Example pattern: 'I placed malware on your device and recorded you. I also have your password: ******. Send $1,400 in Bitcoin within 48 hours or I send the video to your contacts.'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A threat to release a private 'recording' unless you pay
  • A demand for payment in cryptocurrency or gift cards
  • An old password shown to make the threat feel real
  • A short deadline meant to panic you
  • No actual proof, just claims and pressure

What to do

  • Do not pay; the sender almost certainly has no such material
  • Change any password the email quotes, and anywhere you reused it
  • Turn on two-factor authentication on important accounts
  • Report the email as phishing and delete it

If you already clicked or replied

  • If you paid, contact your bank or crypto platform, though crypto is hard to recover
  • Keep a copy of the email in case you report it to authorities
  • Run a security scan if you are worried about malware
  • Do not respond to any follow-up demands

What not to do

  • Do not pay the ransom
  • Do not reply or try to negotiate
  • Do not panic over an old password that came from a data breach

Similar scams

Frequently asked questions

They knew my password. Does that mean they hacked me?
Usually not. These passwords typically come from old data breaches and are added to make the threat feel credible. Change the password wherever you still use it.
Could they really have a webcam video of me?
In the vast majority of these emails, there is no recording at all. They are mass-sent templates designed to frighten people into paying.
Should I reply to say I'm not falling for it?
No. Any reply confirms your address is active and may bring more emails. It is safer to report and delete it.
What if I already paid?
Paying rarely stops the demands. Stop further payments, keep the evidence, and report it to your local authorities and to your bank or crypto platform.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.