untrappable.Check

Sextortion scam: don't pay — here's what to do

Yes — this is a scam. Don't pay, and take a breath: the “we recorded you” email is a mass-sent bluff — and if someone really has images of you, you are not in trouble and you are not alone.

Exhibit · Email

sunrise2013 is your password
A
am-9917
am-9917@bulk-relay-send[.]net
11:03 PM
I know sunrise2013 is one of your passwords. I placed malware on an adult website you visited, recorded you through your webcam, and copied all of your contacts. If you want the video deleted, send $1,450 in Bitcoin to the wallet below within 48 hours. If you tell anyone or contact the police, it goes to every contact instantly. Do not reply — I will know when you have read this.

Other versions you might get: The other version is real and crueler: someone you met on a dating app, social media, or a game builds trust, trades photos, then demands money to keep yours private. The FBI's IC3 warns this version usually starts as a mutual, friendly contact that moves to another messaging app before the blackmail turns. If that's you — especially if you're a teenager — you are the victim of a crime, not the person in trouble. Don't pay, stop responding, save the messages, and use the steps below.

Reported versions of this message

Each source below documented a email. Web addresses are defanged, and identifying values may be redacted; the remaining wording follows the source. Similar wording is a reason to check independently, not proof that two messages came from the same sender.

  • “I am aware one of your passphrase: password. Lets get directly to point. Not a single person has compensated me to investigate about you. You do not know me and you are probably wondering why you're getting this e mail?”
  • “I know about the secret you are keeping from your wife and everyone else. You can ignore this letter, or pay me a $8600 confidentiality fee in Bitcoin”

What to do right now

  1. Do not pay or send more material. Preserve the threats and account details, report them, and stop engaging. A generic threat may be a bluff, but do not promise yourself that no material exists.
  2. Change any exposed password wherever it is still used. Enable stronger authentication and check account activity. A breach is one possible source, not a proven explanation for this message.
  3. If someone has real images of you: you are not in trouble, and this is not your fault. Save the messages and profile (screenshots are evidence), then block. If you're under 18 — or the images are from when you were — Take It Down, NCMEC's free, anonymous service, can help get them removed or blocked on participating platforms without the images ever leaving your device. Tell a parent or another adult you trust; carrying this alone is what the scammer is counting on.
  4. Report the threats to the FBI or local law enforcement. If a minor is involved, also seek NCMEC’s help. You deserve support; ask the reporting organization about its privacy practices rather than assuming absolute confidentiality.
  5. Be wary of “helpers” who charge. The FBI warns about companies that charge sextortion victims steep fees for “assistance” — law enforcement and NCMEC help for free.

Reduce the risk of another scam

Do not use the message’s link to check the claim. Open the real service yourself. If you paid or shared account details, start with what to do after a scam. Blocking and reporting can reduce unwanted contact, but they cannot stop every attempt or tell you how the sender found you.

● Public service · free steps first

Take the free protection steps first

A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.

Decide what protection you need

Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.

Frequently asked

The email has my real password. Doesn't that mean they hacked my webcam?
An old password is not proof of a webcam recording. Mass threats may use previously exposed credentials, but the message alone cannot establish where the password came from or whether a device was compromised. Change exposed passwords, check security, preserve the message, and report the threat.
Should I pay to make it go away?
Do not pay or send more material. Payment cannot guarantee deletion or an end to demands. Preserve evidence and seek help from law enforcement and someone you trust. If you paid, contact the bank or crypto provider promptly.
I'm a teenager and someone I met online is threatening to share my photos. What do I do?
First: you are not in trouble, this is not your fault, and you are not alone — this crime is common enough that the FBI and NCMEC run national programs for exactly your situation. Don't pay and don't send more images. Save the messages, block the account, and use NCMEC's free, anonymous Take It Down to help remove or block images taken when you were under 18. Then tell a parent or an adult you trust, and report it at ic3.gov.
Will they really send the video or photos to my family and friends?
You cannot tell from a generic threat alone. Some threats bluff; others involve real or manipulated material. Do not pay. Preserve evidence and report it. Take It Down and StopNCII can help with eligible material on participating services, but neither guarantees removal everywhere.
How do I report sextortion?
Preserve messages, usernames, and payment details and report to the FBI or local police. For material made when the person was under 18, consult NCMEC and Take It Down; adults can consult StopNCII. Do not download or share intimate material just to submit it. Ask services about privacy and eligibility; avoid paid recovery promises.

Sources

  1. 01FBI Warns about an Increase in Sextortion Complaints (PSA I-090221)— FBI Internet Crime Complaint Center
  2. 02Take It Down — free removal help for images of minors— National Center for Missing & Exploited Children
  3. 03How to avoid a Bitcoin blackmail scam— Federal Trade Commission
  4. 04Sextortion Scam: What to Do If You Get the Latest Phishing Spam Demanding Bitcoin— Electronic Frontier Foundation
  5. 05Official security and fraud guidance— fbi.gov

Pass it on

Help protect someone else

If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.