Fear with nothing behind it
Sextortion scams threaten to expose embarrassing images or activity unless you pay, usually in cryptocurrency. To seem credible, the message may include an old password from a data breach or address you by name.
In most mass sextortion emails, the scammer has no actual footage. They send the same template to thousands of people, betting that a few will be frightened enough to pay. Shame and urgency are the entire strategy.
How the scam works
They cite an old leaked password or your name to seem like they really know you.
They say they recorded you through your camera or have your private images.
Pay or they send everything to your family, friends, and coworkers.
A short deadline and a Bitcoin address, so the payment is untraceable.
What it looks like
I know your password is "summer2019". I placed malware on your device and recorded you. You have 48 hours to send $1,500 in Bitcoin to the address below, or I send the video to all your contacts.
Sextortion bluff. FraudScope flags the breach-sourced password as fake "proof," the unverifiable claim, and the crypto deadline. Its guidance: do not pay or reply. Change any reused passwords and report the message.
Warning signs to watch for
- An old password used as "proof," which usually comes from a public data breach.
- A claim to have hacked your camera or have private content, with no actual sample.
- A demand for payment in Bitcoin or another cryptocurrency.
- A short, high-pressure deadline of 24 to 48 hours.
- Generic wording that could apply to anyone.
Replace panic with a plan
Paste the message and FraudScope explains that these are almost always empty mass threats, identifies the breach-password tactic, and gives calm next steps: do not pay, change reused passwords, and report it.
Analysis runs entirely on your iPhone and makes no network requests. The only time FraudScope touches the internet is if you tap Inspect URL to check where a link really goes, and it tells you before it does.
Intent reconstruction · Calm guidance · On-device
Frequently asked
They knew my password. Does that mean they really hacked me?
Usually not. These passwords typically come from old data breaches that are sold in bulk. It is alarming but not proof of access. Change that password everywhere you used it and enable two-factor authentication.
Should I pay a sextortion demand?
No. Paying marks you as a willing target and invites more demands, and in most cases there is no real material at all. Do not reply, do not pay, preserve the message, and report it to the FBI’s IC3 and the platform involved.
Does FraudScope send my messages anywhere?
No. Analysis runs entirely on your iPhone with no network connection. The only time it contacts the internet is if you choose to inspect a link’s destination, and it tells you before it does.
Will FraudScope catch every scam?
No tool can. FraudScope is strongest with the full content of a message and weaker with a bare screenshot that has no link or sender. It is a powerful second opinion, not a guarantee. When in doubt, slow down and check with someone you trust.