Sextortion alert: Scammers target users with spoofed emails and fake hacked video threats

If you receive a sextortion email, stay calm, scan your device with trusted security software, change your password, enable two-factor authentication, avoid replying, report the scam, and consider covering your webcam for added privacy

A new wave of email-based sextortion scams is spreading rapidly, leveraging classic spoofing tactics to scare recipients into believing their digital privacy has been compromised. Cybersecurity experts are warning users to stay alert, as attackers send emails that appear to come from the victim’s own email account, falsely claiming full control over their device, webcam, and sensitive information.

The scam begins with a deceptive email that appears to originate from the recipient’s email address. This technique, known as email spoofing, involves falsifying the sender field to trick the recipient into believing the message is authentic and sent from within their own account. The body of the email alleges that the recipient has been monitored for months and claims they were infected with njRAT, a known remote access trojan.

According to the message, the alleged malware was installed when the user visited adult websites, giving the scammer access to their device, including their screen, camera, microphone, and contact list. The email goes further, stating that a video was created—split-screen style—showing the recipient engaging in private acts alongside the adult content they supposedly viewed. The scammer threatens to release this fabricated video to friends, family, and professional contacts unless $1,200 is transferred to a Bitcoin wallet within 48 hours.

While the message is crafted to incite panic, security analysts confirm that this is a fraudulent extortion attempt. In most cases, there is no malware, no actual video, and no breach of the user’s device or data. The scammers rely on fear, embarrassment, and urgency to coerce victims into paying the ransom without verifying the claims.

Investigations into the Bitcoin wallet listed in these emails have shown no signs of transactions, suggesting that the current campaign may still be in its early stages or using a unique wallet per target to evade tracking.

How to spot these sextortion scams

Sextortion scams often follow a pattern that makes them easier to recognize once you know what to look for. These emails typically appear as though they were sent from your own email address, creating a false sense of urgency and fear. They usually accuse you of visiting adult websites and claim to have recorded compromising videos of you. The scammer may mention well-known spyware like njRAT or Pegasus to make the threat sound more believable. In most cases, they demand a payment in Bitcoin within a short deadline to prevent the supposed video from being shared. Some messages may also come as attachments like images or PDFs to avoid being flagged by spam filters.

What you should do after receiving a scam email

If you ever receive a message like this, the most important thing is not to panic. These scams are designed to scare you into reacting quickly. First, run a scan on your device using trusted antivirus or anti-malware software to make sure it’s clean. Then, change your email password and enable two-factor authentication to keep your account secure. Avoid replying to the email, as this only confirms that your account is active and may lead to more threats. Finally, report the scam to your email provider or to cybercrime authorities to help prevent others from falling victim.

To add peace of mind, users may also choose to cover their webcams when not in use or invest in privacy-focused hardware accessories.