● MEDIUM RISK

Password Extortion Scam

An email leads with one of your real old passwords and threatens to release webcam footage unless you pay in Bitcoin. The password came from an old breach, and the footage almost never exists. It is a bluff wrapped around one real detail — change any password still in use and do not engage.

Losses: Part of $178 million in extortion losses (FBI 2024)

Targets: Anyone with email, especially people who reuse passwords

Updated: 2026-01-07

Also known as: Sextortion Email · Webcam Blackmail Scam · Bitcoin Extortion · Password Blackmail

How It Works

Scammers send millions of emails trying to scare recipients into paying. **The email typically claims:** - "I've hacked your computer and recorded you watching porn" - "I have access to all your accounts" - Shows one of your OLD passwords as "proof" - Demands Bitcoin payment within 24-48 hours - Threatens to send video to all your contacts **Where they get your password:** - Data breaches (LinkedIn, Adobe, etc.) - Password dumps sold on dark web - Phishing attacks - They DON'T actually have webcam access **Why it's effective:** - Seeing your real password is shocking - Many people HAVE watched porn and fear exposure - Shame prevents people from asking others for advice - Bitcoin payment is untraceable - Deadline creates urgency **The reality:** These are almost always bluffs. Scammers send millions of emails hoping a small percentage will pay out of fear.

How Scammers Make Contact

Warning Signs & Red Flags

Email claims to have recorded you via webcam
Shows an old password you recognize (but no other proof)
Demands Bitcoin payment
Threatens to send video to contacts
Short deadline (24-48 hours)
Generic email — doesn't mention specific details about you
Same email sent to millions of people
No actual video or images attached as proof

Real-World Example

"I got an email with my LinkedIn password from 2012 saying they'd recorded me through my webcam and would send the video to everyone unless I paid $2,000 in Bitcoin. I panicked because it was my real password. A friend told me it was a bluff — my password was leaked years ago and they had nothing else. I changed my passwords and nothing ever happened."
— FBI Public Service Announcement

How to Protect Yourself

Don't panic — these are almost always bluffs
Never pay the ransom — it won't stop future emails
Change any password they show you (and everywhere you reused it)
Use unique passwords for every site (password manager)
Enable two-factor authentication everywhere
Cover your webcam when not in use (tape or cover)
Check haveibeenpwned.com to see where your data was breached
Report and delete the email

What To Do If You're a Victim

1Don't respond or pay
2Change the compromised password everywhere you used it
3Enable 2FA on important accounts
4Report to FBI IC3 at ic3.gov
5Report to FTC at ReportFraud.ftc.gov
6Mark email as spam and delete
7If you paid, report to your local police
8Future emails are likely — continue ignoring them

Report This Scam

FTC Report Fraud FBI IC3 Identity Theft

Frequently Asked Questions

What is Password Extortion Scam?

What are the warning signs of Password Extortion Scam?

Email claims to have recorded you via webcam. Shows an old password you recognize (but no other proof). Demands Bitcoin payment. Threatens to send video to contacts. Short deadline (24-48 hours).

How do I protect myself from Password Extortion Scam?

Don't panic — these are almost always bluffs. Never pay the ransom — it won't stop future emails. Change any password they show you (and everywhere you reused it). Use unique passwords for every site (password manager).

What should I do if I'm a victim of Password Extortion Scam?

Don't respond or pay. Change the compromised password everywhere you used it. Enable 2FA on important accounts. Report to FBI IC3 at ic3.gov.

How serious is this threat?

We rate this a real but moderate risk. Reported losses: Part of $178 million in extortion losses (FBI 2024). Most exposed: Anyone with email, especially people who reuse passwords.

Can I get my money back?

Recovery depends on how you paid. Credit card payments may be reversed through chargebacks, while wire transfers and cryptocurrency are rarely recoverable. Report immediately to your bank and file complaints with the FTC at reportfraud.ftc.gov and the FBI IC3 at ic3.gov.

How do I report Password Extortion Scam?

Report to the FTC at reportfraud.ftc.gov. For internet crimes, file with the FBI IC3 at ic3.gov. For identity theft, visit identitytheft.gov. You should also contact your local police and your bank.

Sources & References

Related Scams

AI-Enhanced Phishing

Phishing used to give itself away with broken grammar. AI fixed that. The emails are now clean, personalized, and plausible, which means the old "look for typos" advice is dead. Verify any request through a channel you control, not the one that contacted you.

Sextortion Scam

Someone claims to have intimate images of you and threatens to send them to your contacts unless you pay — often when they have nothing at all. Paying only proves you will pay again. This increasingly targets teenagers, and the move is the same: stop responding, save everything, and report it.

Think you've encountered this scam?

Use the free AI scanner to analyze suspicious messages, websites, or phone numbers.

Scan Now — It's Free