Introduction
If you’ve received an email claiming that someone has hacked your computer, recorded you through your webcam, and will release the video unless you pay in Bitcoin, you’re not alone. These Bitcoin sextortion emails are sent by the millions every day. They are almost always fake.
This guide explains how the scam works, why the threats are empty, and exactly what to do — and not do — if you receive one. It’s part of our broader guide on avoiding crypto scams, which covers the most common crypto fraud patterns in 2026.
The short version: don’t panic, don’t pay, and don’t reply. The rest of this article explains why.
How the Bitcoin Sextortion Scam Works
The scam follows a predictable script. Understanding it makes it almost impossible to fall for.
Step 1 — A mass email with a scary subject line
The email arrives with a subject like “Your account has been compromised”, “I have your password”, or “Your private video is ready”. It’s sent to thousands or millions of addresses at once. The scammers don’t know who you are — they’re casting a wide net and hoping a small percentage of recipients will panic.
Step 2 — A claim of compromise
The email claims that the sender has:
- Hacked your computer or phone
- Installed malware
- Recorded you through your webcam
- Accessed your contacts, social media, or email
In some variants, the email includes a real password you’ve used in the past. This is not proof of a hack — it’s the result of old data breaches being sold and reused. If your password appears in a breach database, scammers can look it up and paste it into the email to make the threat look credible.
Step 3 — A demand for Bitcoin
The email demands payment in Bitcoin, usually between $500 and $2,000, to a specific wallet address. It threatens to release the video to your contacts, family, or employer if you don’t pay within 24–48 hours.
Step 4 — Nothing happens
If you don’t pay, nothing happens. The scammers move on to the next batch of emails. They have no video, no malware, and no access to your accounts. The entire threat is a bluff.
Why the Threat Is Almost Always Fake
There are several reasons to be confident that a sextortion email is a bluff.
1. The scammers don’t know who you are. These emails are sent in bulk. The scammers have no idea whether you’re a CEO, a student, or a retiree. They’re hoping that fear will do the work for them.
2. The “proof” is not proof. A password from an old breach, a screenshot of a generic email, or a claim that “your contacts will be notified” — none of this is evidence of an actual compromise. It’s designed to look convincing, but it isn’t.
3. The economics don’t work. Recording someone through their webcam, exfiltrating their contacts, and managing a blackmail operation is expensive. Scammers don’t do this for a $500 payout from a random recipient. They send mass emails because it’s cheap and scalable.
4. The Bitcoin address is public. If you search the Bitcoin address in the email on a blockchain explorer, you’ll often find that it has received payments from multiple people — proof that it’s a mass scam, not a targeted attack.
5. The deadline is arbitrary. A 24-hour or 48-hour deadline is designed to create urgency. Real blackmailers don’t need a countdown. Scammers do, because they want you to act before you think.
What to Do If You Receive a Sextortion Email
Here’s the step-by-step response.
1. Don’t reply
Replying confirms that your email address is active. The scammers will add you to more lists, and you may receive more emails.
2. Don’t pay
Paying does not stop the scam. In fact, it confirms that you’re willing to pay, which may lead to further demands. There is no “video” to delete, and paying won’t make the emails stop.
3. Don’t click on any links or attachments
The email may contain links or attachments designed to install malware or steal credentials. Don’t click on anything.
4. Check if your password was in a breach
If the email included a real password, it’s likely from an old data breach. Check your email address on Have I Been Pwned (haveibeenpwned.com) to see which breaches it appears in. If the password is still in use anywhere, change it immediately.
5. Enable two-factor authentication
If you haven’t already, enable 2FA on your email, social media, and any financial accounts. This is the single most effective protection against account compromise.
6. Report the email
Forward the email to your email provider’s abuse address (e.g., abuse@gmail.com for Gmail). You can also report it to your national cybercrime unit. In the US, report to the FBI’s IC3. In France, report to the PHAROS platform.
7. Delete the email
Once you’ve reported it, delete it. Don’t keep it in your inbox as a reminder — it serves no purpose.
What NOT to Do
Don’t pay. This is the most important rule. Paying does not stop the scam and may lead to further demands.
Don’t reply to “negotiate.” There is nothing to negotiate. The scammers have no leverage.
Don’t contact the sender through social media or other channels. This confirms that you’re a real person who is worried, which is exactly what the scammers want.
Don’t pay a “recovery service.” If you’ve already paid, you may be contacted by someone offering to recover your funds for a fee. These are always scams.
Don’t assume the worst. If the email claims to have access to your contacts, your webcam, or your files, remember: it almost certainly doesn’t. The threat is designed to make you panic, not to be true.
How to Protect Yourself Going Forward
A few practical steps to reduce your exposure to sextortion scams and other email-based fraud.
1. Use unique passwords for every account. A password manager makes this easy. If one account is breached, the others remain safe.
2. Enable two-factor authentication everywhere. Especially on email, banking, and social media.
3. Check Have I Been Pwned periodically. If your email appears in a new breach, change the affected password immediately.
4. Be skeptical of urgency. Any email that demands immediate action — payment, click, reply — is suspicious. Slow down.
5. Don’t reuse passwords across accounts. This is the single most common cause of account compromise.
Conclusion
Bitcoin sextortion emails are scary, but they’re almost always fake. The scammers send them by the millions, hoping that fear will do the work for them. The defense is simple: don’t panic, don’t pay, don’t reply. Report the email, delete it, and move on.
Three takeaways:
- The threat is almost always a bluff. The scammers don’t have your video, your contacts, or your files.
- Don’t pay. Paying does not stop the scam and may lead to further demands.
- If the email included a real password, it’s from an old breach — change it and enable 2FA.
Last updated: October 2026.