How to Verify an Extortion Email Before Paying or Responding

This guide walks you through verifying whether an extortion email is real or a scam before you consider paying or replying. You’ll learn practical steps to check the threat’s credibility, protect your accounts, and decide your next move without falling for a bluff.

What You’ll Need

• Access to the email account that received the threat
• A web browser for checking leaked data and researching the sender
• A password manager or a way to generate strong, unique passwords
• A separate device (like a phone) to verify your online accounts

Step-by-Step

1. Do not panic and do not reply. Extortion emails rely on fear and urgency. Replying confirms your email address is active and monitored, which may lead to more targeted attacks. Close the email and take a few deep breaths before proceeding.
2. Read the email carefully for generic language. Most extortion emails are sent to thousands of addresses at once. Look for phrases like “I have a video of you,” “I know your password,” or “I placed malware on your device.” If the email doesn’t mention a specific detail that only you would know (like a recent purchase or a unique username), it’s likely a mass campaign.
3. Check if your email address appears in known data breaches. Go to a reputable breach-checking service (like Have I Been Pwned) and enter your email address. If it shows up in a breach, the sender may have obtained your password or personal details from there. This strongly suggests the threat is a bluff based on recycled data.
4. Inspect the sender’s email address and links. Hover over (but do not click) any links in the email. Check the sender’s full email address, not just the display name. Look for misspellings, extra characters, or domains that don’t match the company they claim to represent. If the email asks you to open an attachment or click a link, do not do it—it may install malware.
5. Search for the exact email text online. Copy a distinctive sentence from the email (without any personal info) and paste it into a search engine in quotes. If you find the same wording on forums or scam-reporting sites, it’s a known template used in mass extortion campaigns.
6. Check your accounts for signs of compromise. If the email claims to have your password, check if that password is still active on any of your accounts. If it is, change it immediately. Also check your email’s forwarding settings and login history for unauthorized access. If you find nothing unusual, the claim is almost certainly false.
7. Look for specific, verifiable threats. Real extortionists usually include a specific detail to prove they have access—like a recent password, a photo, or a list of files. If the email only says “I have everything” without evidence, it’s a bluff. If they do include a password, it’s likely from a breach, not from hacking your device.
8. Verify if your webcam is actually at risk. The classic “I have a video of you” threat is rarely real. Check if your device has a webcam cover or indicator light. If you’re worried, run a full antivirus scan on your computer and phone. Most modern operating systems show which apps are using the camera.
9. Report the email to the appropriate authorities. In the US, report to the FBI’s Internet Crime Complaint Center (IC3). In the UK, report to Action Fraud. Other countries have similar agencies. Reporting helps track campaigns and may prevent others from falling victim.
10. If you’ve been compromised, act quickly. Change passwords for any accounts that use the leaked password. Enable two-factor authentication (2FA) on your email, banking, and social media accounts. If the email mentions a specific account, check that account’s login history and security settings.
11. Do not pay. Even if the threat seems real, paying does not guarantee the extortionist will delete the material. In many cases, paying makes you a target for future extortion. Instead, focus on securing your accounts and documenting the email.
12. If the email includes a cryptocurrency wallet address, search it. Many scam addresses are already flagged online. A quick search may show that the address is associated with known scams, confirming it’s not a targeted threat.

Common Mistakes

• Replying in anger or fear. Any reply tells the scammer your email is active and monitored, making you a more valuable target.
• Clicking links or opening attachments. These may contain malware that gives the scammer real access to your device.
• Assuming the password they show is proof of hacking. It’s almost always from a data breach, not from malware on your device.
• Paying without verifying. Payment doesn’t guarantee deletion and often leads to repeat demands.
• Ignoring the email entirely without securing your accounts. Even if it’s a scam, it’s a good reminder to change passwords and enable 2FA.

Tips

• Use a password manager to generate unique passwords for every site. This limits the damage if one site is breached.
• Enable two-factor authentication on all important accounts, especially email and banking.
• Keep your software updated to patch vulnerabilities that malware could exploit.
• Use a separate email address for sensitive accounts so a breach of a forum doesn’t expose your primary email.
• If you have a webcam, cover it when not in use for peace of mind.
• Trust your instincts. If something feels off, it probably is—but verify before dismissing it entirely.

Troubleshooting

• The email includes a real password of yours. This is likely from a data breach. Check the breach database, change that password immediately, and verify no other accounts use it. Run a malware scan to be safe, but the password alone doesn’t prove your device is compromised.
• The email claims to have a video from your webcam. Check your device’s camera indicator light and app permissions. If you never see the light on unexpectedly, the claim is almost certainly false. Run a scan anyway.
• You find that your email account has been accessed. Change your password immediately, log out of all devices, and check forwarding rules. Enable 2FA if you haven’t already.
• The email threatens to send your info to friends and family. This is a common scare tactic. Even if they have your contacts (from a breach), sending that info would expose their own scam and provide evidence against them. Rarely do they follow through.
• You already paid. Stop further payments. Report the incident to authorities and your bank. You may be able to dispute the transaction, but it’s not guaranteed. Expect the scammer to try again—block them and don’t engage.
• You’re still unsure if it’s real. Consult a trusted tech-savvy friend or a professional. You can also ask on forums like Reddit’s r/Scams, where experienced users can help analyze the email.

Frequently Asked Questions

What if the email includes a picture of my house or a map?

This is often pulled from public records or Google Maps. It doesn’t mean the sender is nearby. It’s a scare tactic to make the threat seem credible.

Should I change my passwords even if the email is a scam?

Yes, it’s a good practice. The email may have come from a breach, so changing passwords for any accounts that use the leaked password is wise. Also enable 2FA.

Can the scammer actually hack my webcam?

It’s possible but rare. Most webcams have an indicator light. If you’re concerned, run a malware scan and cover your camera when not in use.

What if the email has my phone number?

Phone numbers are often in data breaches or public directories. It doesn’t make the threat more credible. Block the number if they text or call.

Is it illegal to ignore an extortion email?

No, you are not obligated to respond. Ignoring a scam is not a crime. Reporting it to authorities is encouraged.

What if the email demands Bitcoin and gives a wallet address?

Search the address online. If it’s associated with scams, that confirms it’s a mass campaign. Do not send any cryptocurrency.

Related

• How to Avoid Buying the Wrong Mac
• Madden 27 Realistic Sliders: Best All-Madden Settings
• This Device Is Currently in Use? Meaning & Fix