crackthe.net
Got an extortion email? Stay calm – do this
"I recorded you through your camera – pay up, or else." These emails are almost always a bluff. Here is the right response: do not pay, do not reply, act calmly.
- Do not pay. No money, no cryptocurrency – that is the entire point of the exercise.
- Do not reply, and do not click any link or attachment.
- Preserve evidence: screenshot the email with the sender and the full text.
- Check the password: if a real password of yours is quoted, change it everywhere you use it.
First, size it up: almost always a bluff
Sextortion emails claim the sender recorded you through your webcam or hacked your device, and threaten to publish unless you pay. In the overwhelming majority of cases, the threat is empty. The same email goes out to hundreds of thousands of addresses, in the hope that a small fraction pays out of fear.
The email often quotes a real old password of yours to make an impression. That came from an earlier data breach, not from your device. It is no proof that anyone has access to your camera.
Here is what one typically looks like, with the four pressure tactics marked:
I know that one of your passwords is Summer2019!. I used it to gain access to your device.
I installed malware and recorded you through your webcam. Pay $1,200 in Bitcoin within 48 hours, or I will send the video to all of your contacts.
My Bitcoin address: bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh
- Forged sender: the email appears to come from your own address - a technical trick called spoofing, not proof of a hack.
- An old password as leverage: it comes from an earlier data breach, not from your device. Change it anyway, everywhere you still use it.
- Deadline and threat: a short deadline plus public humiliation - the standard pattern of every extortion attempt. Almost always an empty bluff.
- Bitcoin demand: an anonymous payment with no way back. Never pay - it marks you as a target worth chasing.
Step by step
What to do now
- Stay calm – time pressure and fear are the tools being used on you.
- Do not pay and do not reply.
- Screenshot the email as evidence (sender, subject, full text).
- Change the quoted password if you still use it anywhere – and turn on 2FA there.
- Mark the email as spam or phishing, then delete it.
- Report it at IC3.gov and ReportFraud.ftc.gov, especially if you already paid.
What not to do
- Do not pay. Anyone who pays is flagged as a worthwhile target and gets new demands.
- Do not reply, not even to “clear this up.”
- Do not open links or attachments – they can carry actual malware.
- Do not delete your account or wipe the device in a panic before you have preserved evidence.
Who to contact
- IC3.gov (FBI) – report it, particularly if real images are involved or you already paid.
- ReportFraud.ftc.gov for the FTC.
- Your email provider: report the message as phishing so similar ones get filtered.
- StopNCII.org if intimate images of you really do exist – it blocks them from being shared on major platforms.
- If it is weighing on you: talk to someone. You do not have to handle this alone.
Preserve the evidence
Before you delete the email, take screenshots: the sender address, the subject, the full text and any payment address given (a Bitcoin address, for instance). That is what a report needs. Delete it afterwards, not before.
Protecting yourself from now on
An extortion email is usually just spam – but it is a reminder about the basics:
- Check for a data breach : see whether your address appears in known leaks.
- Use a password manager : unique passwords make old breaches worthless.
- Turn on two-factor authentication – then a known password is not enough on its own.
- Cover the webcam if it puts your mind at ease. It never hurts.
Frequently asked questions
The email contains a real password of mine. Was I actually hacked?
Very probably not. Those passwords come from old data breaches and are mailed out en masse to make the threat look credible. If you still use that password anywhere, change it right now – that is the real danger, not the threat.
Should I reply or negotiate to buy time?
No. Any response tells the sender your address is live, and you will get more of them. Do not reply, do not pay, do not click anything – preserve the evidence and report it.
What if the threat were real and material actually exists?
Even then, paying does not protect you – it marks you as someone who pays. Preserve evidence, report it to the FBI at IC3.gov and get support. If real images exist, law enforcement can push for removal, and StopNCII.org can block them from being reposted.