An email that says it has your password, your photos or a video of you, and wants money, often in Bitcoin. Or a message that threatens arrest. What it really is, and what to do.
From to me
I know your password is sunshine1987. I recorded you through your camera. Pay $1,450 in Bitcoin within 48 hours or I send the video to all your contacts.
On this page
From to me
I know your password is sunshine1987. I recorded you through your camera. Pay $1,450 in Bitcoin within 48 hours or I send the video to all your contacts.
From to me
I hacked your account. See? This email comes from you.
Text Message
This is the police. There is a warrant for your arrest for unpaid taxes. Call us now to settle it.
Examples. The names and amounts change; the shape doesn't.
A real old password. It comes from a leak on some website years ago, not from your computer.
Sent “from your own address”. Sender addresses are easy to fake.
No proof. They never show the video or name a contact.
A deadline, and payment in Bitcoin or gift cards.
Money to cancel an arrest, or to delete a “report” about you. Real police, tax offices and reporting sites never ask for it.
Don't pay and don't reply. These emails go to many people at once.
If it shows a password you still use, change it, everywhere you use it.
If it names the police or a government office, call that office on a number you find yourself.
If someone really has pictures of you and is threatening you, tell your police or someone you trust. Keep the messages. Don't pay: paying usually brings more demands. Under 18? Tell a parent or a teacher; you won't be in trouble for it.
Then delete it. You can report it to your police or your country's fraud reporting service. Your phone may also let you report it as junk or spam.
In the US: ReportFraud.ftc.gov (the FTC's website, opens in a new tab)
Fear and shame make people pay fast and tell no one. The same email goes to thousands of people.