Crypto blackmail email threatening to expose browsing history

17 October 2026

Yes, this is a common scam. The email claims someone has compromised your device or accounts, recorded you visiting adult websites, and will send the footage to your contacts unless you pay in cryptocurrency. No such recording exists, and the scammer has no access to your browsing history or device.

How the scam works

The email typically arrives with a subject line meant to alarm you, such as "Security Alert" or "I Know What You Did." It includes a specific threat: the sender says they installed malware on your device, recorded you through your webcam, or logged your browsing history. They demand payment - often in Bitcoin or Monero - to a wallet address provided in the email. A deadline of 24 to 48 hours is usual.

Key details in the email are designed to seem credible:

• Your email address appears in the "To" field, often the same address the email was sent to. This is trivial for a scammer to obtain from a data breach.
• An old password is sometimes included in the subject line or body. This password came from a breach of a site you used years ago; it has nothing to do with your current device or browsing.
• A screenshot or vague description of your supposed activity may be mentioned, but no actual evidence is attached.

Why the threat is empty

The scammer has no recording, no malware on your computer, and no access to your webcam. They rely on fear and the embarrassment of the alleged content. Here is why the threat cannot be carried out:

• No proof of infection. If they had malware on your device, they would have already stolen far more than browsing history - banking credentials, cryptocurrency wallet keys, personal files. They would not send a warning email asking for a small payment.
• The password is from a breach. Websites like LinkedIn, Adobe, or MySpace have leaked millions of passwords. Scammers buy these lists cheaply and send mass emails hoping someone panics. If your password appears in the email, change it on any account still using it - but this does not mean your computer is compromised.
• Webcam recording requires local access. Unless you have given remote control of your device or installed a malicious application, no one can turn on your webcam. Standard browser permissions block this without your consent.
• No distribution of footage. If the scammer had the supposed video, they would send it to a few contacts to prove the threat. They never do, because it does not exist.

What to do if you receive this email

Follow these steps in order:

1. Do not pay. Paying confirms your email is active and monitored, which invites follow-up scams. The scammer will likely demand more money or claim the first payment was "not enough."
2. Do not reply. Any response gives the scammer a reason to engage. Block the sender address and delete the email.
3. Check your email for breaches. Use a service like Have I Been Pwned (haveibeenpwned.com) to see if your email address appears in known data breaches. This explains how the scammer got your password.
4. Change passwords on any accounts sharing the leaked password. Use a password manager to generate unique, strong passwords for each site. Enable two-factor authentication where available.
5. Run a virus scan. While the threat is almost certainly empty, scanning your computer with trusted antivirus software is a reasonable precaution. This addresses the unlikely chance you have malware from another source.
6. Ignore the deadline. The 24-hour countdown is a pressure tactic. After it passes, nothing happens.

Variations of this scam

The same template appears with different claims:

• The "hacker" claims to have recorded you through your phone's camera. No such recording exists.
• The email demands payment in gift cards instead of crypto. This is a variant targeting less tech-savvy victims.
• The message includes a specific date and time of alleged browsing. Scammers generate these details randomly from templates.
• A follow-up email may arrive after the deadline, demanding a higher amount. This is a second attempt to exploit panic.

Why scammers use cryptocurrency

Bitcoin and other cryptocurrencies are pseudonymous and irreversible. Once sent, the scammer can withdraw the funds to an exchange or mixer, and you cannot reverse the transaction. This anonymity protects the scammer, not you. No legitimate authority asks for payment in cryptocurrency to resolve a blackmail threat.

If you have already paid

Paying does not end the threat. The scammer now knows you are willing to send money. Expect further demands, often with escalating amounts or new excuses. Do not pay again. Contact local law enforcement or a cybercrime reporting agency in your country. For example, in the United States, report to the FBI's Internet Crime Complaint Center (IC3) at ic3.gov. In the UK, report to Action Fraud. Provide the email headers and wallet address if you have them.

Summary

The email is a mass-mailed threat exploiting fear and breached passwords. No recording exists. No malware is on your device. No video will be sent to your contacts. The only real action needed is to secure your accounts with unique passwords and ignore the scammer.

Back to crypto scams