ScanTheSender
Last updated: July 2026
Almost every sextortion email is a scam and an empty threat. If a message claims a hacker recorded you through your webcam or has compromising footage and demands payment in Bitcoin, the sender almost certainly has nothing. These emails are sent in bulk, and any real password or address in them was usually pulled from an old data breach — not from hacking you. Do not pay, and do not reply.
In a hurry? You can scan the email with ScanTheSender for an instant read before you go any further.
What this scam looks like
A sextortion email tries to frighten you into paying fast. The sender claims they’ve hidden malware on your device, watched you through your camera, and will send an embarrassing video to your contacts unless you pay — usually in Bitcoin, usually within 24 to 48 hours.
To seem credible, they add a “proof” detail: an old password of yours, your phone number, or even a photo of your street pulled from an online map. It feels personal, but these details almost always come from data breaches and publicly available information, not from a genuine hack.
An illustrative example of the wording (this is a made-up sample, not a real message):
“I placed malware on your device and recorded you. I also have your contact list. Your password is [an old password]. Pay $1,400 in Bitcoin within 48 hours or I send the video to everyone you know.”
Security researchers and consumer-protection groups are clear that, in the vast majority of these cases, no such video exists.
How to tell if a sextortion email is a scam
- It demands cryptocurrency. Genuine organisations don’t collect money this way. Bitcoin is chosen because it’s hard to trace.
- It uses a countdown. “Pay within 24 hours” is pressure designed to stop you thinking.
- The “proof” is an old password or a generic detail. If the password is one you changed years ago, it came from a leak.
- It never actually shows the supposed footage (empty-threat versions), or the whole message is sent as an image or PDF attachment to slip past spam filters.
- The sender address is spoofed — sometimes it’s even faked to look like your own email address.
What to do right now
- Don’t pay. Paying marks you as a target and usually leads to more demands.
- Don’t reply and don’t open attachments. Replying confirms your address is active.
- Change any password shown in the email if you still use it anywhere, and turn on two-factor authentication (2FA) on your important accounts.
- Report it. In the US, report to the FBI’s Internet Crime Complaint Center at ic3.gov. In the UK, report to Action Fraud at actionfraud.police.uk or 0300 123 2040, and forward the email to report@phishing.gov.uk.
- Then delete it.
If the message involves a real relationship, real images, or a young person being targeted, this is a more serious situation and not an empty threat. Save the evidence, don’t pay, and get help: in the US you can use the NCMEC “Take It Down” tool and contact the FBI; if anyone involved is in distress, support is available (US: call or text 988; UK: Samaritans on 116 123). You are the victim of a crime, and reporting it is the right step.
FAQ
Is the sextortion email real or a scam? Almost always a scam. In the vast majority of cases the sender has no footage of you and is emailing thousands of people the same message, hoping a few pay. The scary details usually come from a data breach, not a hack.
They knew my password — does that mean I’m hacked? Usually not. Old passwords leak in data breaches and get reused in these emails. Change that password anywhere you still use it, and turn on two-factor authentication to be safe.
Should I reply to tell them to stop? No. Any reply confirms your email is active and read, which tends to invite more scam messages. Don’t engage — report it and delete it.
I already paid. What now? Don’t pay any more. Contact your bank or card provider, report it to the FBI IC3 (US) or Action Fraud (UK), and change your passwords. Paying again rarely makes it stop.
Check before you panic
Got an email like this and not sure? Check it free with ScanTheSender before you do anything else — paste the message in for an instant verdict.
Related reading: learn to spot fake job offer email scams and WhatsApp scam emails — two more scams that target people directly.