Thinking about suicide or in crisis? Call or text 988Child exploitation: 1-800-843-5678
Get Help Now
Get Help

Sextortion Email Scams

If you got an email claiming a hacker recorded you through your webcam and will send the video to everyone you know unless you pay in Bitcoin, it’s almost certainly a mass scam. Don’t pay, don’t reply, and change the password the email mentions.

By the CITA Editorial TeamUpdated October 2, 20267 min read

These emails are built to frighten you into paying before you stop to think. Here is how to recognize one, why it can mention your real password or even show your house, and the rare signs that a threat is real.

Fast Facts About Sextortion Email Scams

  • The FBI says these emails threaten to release explicit videos to your contacts unless you pay, often in Bitcoin, and may quote one of your passwords to seem believable.[1]
  • The FTC calls the hacking claims “all talk.” The password usually comes from an old data breach.[2]
  • Newer versions add your name, address and a photo of your house. Police say the scammer still doesn’t have access to your device.[3]
  • The FBI received more than 75,000 sextortion reports in 2025. People 60 and older reported the largest losses, nearly $15 million.[4]
  • Report these emails to the FBI at ic3.gov and to the FTC at ReportFraud.ftc.gov.[1][2]

What Is a Sextortion Email?

A sextortion email is a blackmail message sent to huge numbers of people at once. It claims the sender has sexual images or video of you, often recorded while you watched adult websites, and threatens to send it to your friends, family or coworkers unless you pay.[1][2]

It’s different from the sextortion that targets teens, where a real person builds a relationship, gets an image and then demands money or more images. That kind involves a real conversation and real images, and it calls for different steps. If that’s what is happening to your child, go to the sextortion guide now.

What These Emails Usually Say

The wording changes, but most versions include several of these:

  • A password of yours, real but usually old, in the subject line or the first sentence[1]
  • A claim that malware or remote access let them record you through your camera[1][2]
  • A claim that they watched you visit adult websites[2]
  • A demand for payment in Bitcoin, with a wallet address or QR code[1][3]
  • A deadline, often 24 to 48 hours[3]
  • Your name, home address, phone number or a photo of your house[3]
  • A sender address that looks like your own email account

How to Tell If a Sextortion Email Is Real

Almost all of these emails are bluffs. These signs point to a scam:

  • There’s no actual image. The email describes a video but never shows you a frame of it, because there isn’t one.[2]
  • The password is old. If you recognize a password you stopped using years ago, it most likely came from a data breach, not your computer.[2]
  • The details are generic. Nothing in it is specific to you beyond what’s in a breach or public records: no real contact names, no description of you.
  • The same text appears online. Search a sentence from the email in quotes. These messages are sent in bulk, so the same wording usually turns up in many other people’s reports.
  • It demands cryptocurrency on a tight deadline. Urgency is meant to stop you from checking.[1][3]

When a Threat Might Be Real

Take a threat seriously if you actually shared intimate images with someone, or if there are signs someone has broken into your accounts. In August 2026 the FBI warned that criminals are getting into people’s social media and cloud accounts to steal real explicit images and post them, sometimes with the victim’s name and other personal details.[5] Watch for:

  • Texts claiming your account will be locked unless you reply with a verification code[5]
  • Emails from look-alike “support” addresses about new logins[5]
  • Login alerts or password resets you didn’t request

If any of that applies, secure your accounts right away, report to the FBI at ic3.gov, and follow the steps in the section below on real images.[5]

Why the Email Has Your Password

When a website is breached, lists of email addresses and passwords end up for sale. Scammers buy those lists, then paste the password into a blackmail email to make the hacking claim seem believable. The FTC’s advice: the hacking story is “all talk,” but if the password is one you still use, change it on that account and anywhere else you reused it.[2]

To see which of your accounts have shown up in breaches, use the password checkup built into Google’s and Apple’s password managers, or a breach-search service such as Have I Been Pwned.

Why It Looks Like It Came From Your Own Address

The “from” line on an email is easy to fake. The FBI calls this spoofing: disguising an email address or sender name so a message seems to come from someone it doesn’t.[6] An email that appears to come from your own address doesn’t mean anyone is inside your account. Changing your password and turning on two-step verification is still a good idea.[8]

Why Some Emails Include a Photo of Your House

A newer version adds your name, your address and a picture of your home, which feels like proof that someone has been watching you. New York State Police warned about this version in 2024. They said scammers buy people’s personal information illegally online, and that despite the threats, “the scammer does not have access to the victim’s device or personal information.”[3] Street-level photos of most homes are publicly viewable on online map services, so a picture of your house is easy to find.

What to Do If You Get a Sextortion Email

  1. Don’t pay. There’s no video for them to delete, and people who pay scammers end up on lists that other scammers buy.[2][7]
  2. Don’t reply or click anything. Don’t open attachments or links, and don’t share personal or financial details.[1][3]
  3. Change the password it shows, and any other account where you used it.[2]
  4. Turn on two-step verification for your email, social media and cloud accounts.[5][8]
  5. Report it to the FBI at ic3.gov and to the FTC at ReportFraud.ftc.gov.[1][2]
  6. Block the sender and delete the email once you’ve reported it.[3]

If You Already Paid

Report it to the FBI at ic3.gov with the date, the amount and the wallet address you paid. Then be ready for a second scam. The FTC warns that people who have lost money are often targeted by “recovery” schemes promising to get the money back for an upfront fee. Anyone who asks you to pay to recover money you lost is running a scam.[7]

If Someone Really Has Your Images

If the threat involves real images, because you shared them with someone or an account was broken into, the same rules apply: don’t pay, stop responding, and save the messages. Then:

  • Report to the FBI at ic3.gov.[5]
  • Use StopNCII.org to help block intimate images of adults from being posted on participating platforms.[10]
  • If an image is posted, ask the platform to remove it. Under the Take It Down Act, covered platforms must take it down within 48 hours of a valid request.[10]
  • If the images show someone under 18, follow the sextortion guide and report to the NCMEC CyberTipline.[9]

If you feel overwhelmed or unsafe, call or text 988, any time.[11]

Help an Older Parent Spot These Emails

Older adults lose the most to sextortion. In 2025, people 60 and older reported nearly $15 million in sextortion losses to the FBI, more than any other age group.[4] Shame keeps many people from asking anyone before they pay. A short conversation ahead of time helps:

  • Show them what one of these emails looks like, so the first one they see isn’t a shock.
  • Tell them the rule plainly: anyone demanding Bitcoin to keep a video secret is a scammer, and the video doesn’t exist.
  • Make it easy to ask. “Forward me anything that scares you, no questions asked” removes the embarrassment.
  • Help them set up two-step verification and change any reused passwords.

Frequently Asked Questions

Should I be worried about a sextortion email?

Almost never. Mass sextortion emails are bluffs sent to huge lists of addresses, and the hacking and webcam claims are false. The one real risk is a password from an old breach, so change it.[2][3]

Should I ignore a sextortion email?

Don’t reply or pay, but don’t just ignore it either. Change the password it mentions, report it to ic3.gov and ReportFraud.ftc.gov, then block the sender and delete it.[1][2][3]

Can a hacker really record me through my webcam?

Not in these scams. The FTC calls those claims “all talk.”[2] Unique passwords and two-step verification protect you against real account break-ins, which are a separate threat.[5]

Why do I keep getting sextortion emails?

Your email address is probably on lists sold after data breaches, and scammers send the same message to everyone on those lists again and again.[2][3] Marking them as spam helps your email provider filter future ones.

What if I already paid?

Report it to the FBI at ic3.gov with the date, amount and wallet address. Don’t pay anyone who offers to recover the money for a fee. The FTC says that’s a common follow-up scam.[7]

Where do I report a sextortion email?

Report to the FBI’s Internet Crime Complaint Center at ic3.gov and to the FTC at ReportFraud.ftc.gov.[1][2]

Sources

  1. Federal Bureau of Investigation, Internet Crime Complaint Center. (2020, April 20). Online Extortion Scams Increasing During the COVID-19 Crisis.
  2. Federal Trade Commission, Consumer Advice. (2020, April). Scam emails demand Bitcoin, threaten blackmail.
  3. New York State Police. (2024, September 19). New York State Police warns of nationwide automated sextortion scams.
  4. Federal Bureau of Investigation, Internet Crime Complaint Center. (2026). 2025 IC3 Annual Report.
  5. Federal Bureau of Investigation, Internet Crime Complaint Center. (2026, August 10). Sexual Exploitation Actors Stealing and Leaking Explicit Content.
  6. Federal Bureau of Investigation. (n.d.). Spoofing and Phishing.
  7. Federal Trade Commission, Consumer Advice. (2023, December). Refund and Recovery Scams.
  8. Federal Trade Commission, Consumer Advice. (2022, September). How To Recognize and Avoid Phishing Scams.
  9. National Center for Missing & Exploited Children. (n.d.). Sextortion.
  10. Federal Trade Commission, Consumer Advice. (2026, September). Was your intimate image shared online without your consent? Here’s what to do.
  11. 988 Suicide & Crisis Lifeline. (n.d.). 988 Suicide & Crisis Lifeline.
Scroll to Top