Is the “I have your webcam footage, pay Bitcoin” email real?
Last reviewed: 2026-08-01 · Checked with Hunch’s on-device engine, the same one inside the extension. How Hunch checks →
Part of our guide: How to secure and recover a hacked account →
Almost certainly not. The mass email that claims a hacker recorded you through your webcam, often quoting an old password of yours and demanding Bitcoin “or I send it to your contacts”, is a bulk bluff. Scammers send the same template to millions of addresses using a password leaked in a past data breach; seeing a real (usually old) password makes it feel personal, but there is no video and no access to your device. Do not pay and do not reply. If the password is one you still use anywhere, change it now.
The net is cast wide, any adult with an email address, and it works on privacy and shame: even someone who’s done nothing feels a jolt of panic when a stranger claims to have watched them. The real, if old, password lends false credibility, and the fear of being exposed to contacts pushes people to pay quietly instead of pausing to realize the identical template was blasted to millions of inboxes. If you are under 18, do not handle this alone, tell a trusted adult and contact NCMEC’s Take It Down at takeitdown.ncmec.org or your local authorities.
Real help
How to verify it yourself
- Don’t pay. Paying confirms your address is active and invites more demands; there is no footage to release.
- Don’t reply or open any attachment, engaging only marks you as a responsive target.
- If the email quotes a password you still use, change it everywhere and turn on two-factor authentication; check haveibeenpwned.com to see which breach exposed it.
- Report the email to the FBI at ic3.gov and at reportfraud.ftc.gov, then delete it.
Common questions
is the webcam blackmail email real
No. It’s a bulk-sent bluff. The same message goes to millions of people; there is no webcam recording and no access to your device.
the email has my real password, did they hack me
Not necessarily, that password almost always comes from an old data breach, not from watching you. It’s included to make a generic threat feel personal. Change it if you still use it.
should I pay the Bitcoin sextortion demand
No. There is nothing to release, and paying only confirms your address is active and marks you for more demands. Don’t pay and don’t reply.
how do these blackmail emails know my password
From a past website breach where account data leaked and was sold. Enter your email at haveibeenpwned.com to see which breaches exposed it, and change any password still in use.
If you already responded
- If you paid, contact your bank or the crypto exchange immediately, recovery is unlikely but worth attempting, and don’t pay again.
- Change any password the email quoted, everywhere you still use it, and enable two-factor authentication.
- Report it to the FBI at ic3.gov and at reportfraud.ftc.gov, then delete the email.