. -->
Beat the Scam Scam checks, alerts, and consumer protection guides
Home / Guides / Email Scams / Sextortion Email Scam UK: How to Respond Safely
Email Scams

Sextortion Email Scam UK: How to Respond Safely

A mass sextortion email may quote an old password to make a false webcam claim convincing. Do not pay or reply; secure any exposed account and report it.

· · · 5 min read

Quick answer: The mass email claiming to have webcam footage of you is a bluff: the senders are guessing, and any quoted password was probably taken from an old data breach. Do not pay or reply; change that password if you still use it and forward the email to report@phishing.gov.uk. If real intimate images are involved, contact police instead.
Key rule: verify through an official route you opened yourself, not the link, number, app, or payment details supplied by the suspicious message.
On this page
  1. What the mass sextortion email scam is
  2. Signs of the common phishing version
  3. What to do when you receive one
  4. If the threat may involve real images
  5. If you already paid or shared information
  6. Reporting and support

What the mass sextortion email scam is

In the common phishing version, a criminal claims to have recorded the recipient visiting adult websites or using a webcam and threatens to share footage unless a cryptocurrency ransom is paid. The message may include technical-sounding details or a real password to make the story credible.

The National Cyber Security Centre guidance at https://www.ncsc.gov.uk/guidance/sextortion-scams-how-to-protect-yourself says the senders of these mass emails are guessing: they do not know whether the recipient has a webcam, visited an adult site or communicates in the way claimed. A quoted password was probably obtained from a historic data breach. It is not evidence that a camera was accessed.

However, sextortion is also a real form of blackmail. Criminals can obtain genuine images through social media, dating apps, account compromise, coerced video calls, stolen material or manipulated images such as deepfakes. If the sender possesses or threatens real intimate material, follow police sextortion guidance rather than assuming it is only a bulk-email bluff.

Signs of the common phishing version

  • An unsolicited email makes a broad webcam or adult-site claim but gives no verifiable detail specific to you.
  • It uses a generic template and a short payment deadline.
  • It demands Bitcoin or another cryptocurrency and provides a wallet address.
  • It quotes an old or reused password. The NCSC says this is likely to have come from a previous breach.
  • It uses implausible technical claims about cameras, screens, malware or access to every contact.
  • Similar wording appears in published scam warnings.

No single sign proves that a threat is false. Do not click a supposed “sample”, open an attachment or reply to demand proof: those actions can expose you to further risk. If the message contains personal images, recent account activity or credible information that worries you, report it to police.

What to do when you receive one

For a typical mass-email claim with no indication that intimate material is real:

1. Do not reply, pay or negotiate. 2. Forward the email to the NCSC Suspicious Email Reporting Service at report@phishing.gov.uk, then delete it. 3. Mark it as phishing or spam with your email provider. 4. If the message quotes a password you still use, change it immediately everywhere it is used. Start with your email account and enable two-step verification. 5. Check whether your email address appears in a known public breach using a reputable service such as Have I Been Pwned at https://haveibeenpwned.com/, which the NCSC cites. Do not type a current password into an unfamiliar breach-checking site. 6.

Review your email and social-media account sessions, recovery details and security alerts for evidence of actual access.

Opening a normal email does not by itself prove that the sender has camera access. Nonetheless, “safe to open” is too absolute: messages can contain tracking content, harmful links or attachments, and software vulnerabilities exist. Use your provider's reporting function, do not enable remote content unnecessarily, and do not interact with links or files.

If the threat may involve real images

Stop contact and do not pay. Police.uk says payment does not guarantee that images will be deleted and offenders may demand more. Preserve usernames, account details, payment information, message times and the conversation so police can advise on evidence.

Report through your local police force's online service or call 101; call 999 if someone is in immediate danger. If you are in Scotland, use Police Scotland. Report the account to the platform as well.

Be careful when preserving evidence. Police.uk warns not to screenshot, record or share an intimate image if you are unsure whether everyone shown is 18 or over, even when reporting; tell police what exists and follow their instructions. Adults worried that an intimate image may be shared can consider StopNCII.org at https://stopncii.org/. Under-18s can use the UK Report Remove service at https://www.childline.org.uk/info-advice/bullying-abuse-safety/online-mobile-safety/report-remove/ with Childline and the Internet Watch Foundation.

If you already paid or shared information

  • Contact the bank, payment provider, cryptocurrency exchange or wallet provider immediately through an official channel. A completed cryptocurrency transfer usually cannot simply be reversed, but the provider may be able to secure an account or preserve information.
  • If you made a UK bank transfer, ask the bank about the APP-scam reimbursement rules. Scope, time limits, caps and exceptions apply.
  • Do not send another payment. Paying may identify you as someone likely to respond to further demands.
  • Change exposed or reused passwords, secure the associated email account and enable two-step verification.
  • If money was lost to a mass scam, report it to Report Fraud in England, Wales or Northern Ireland, or Police Scotland on 101 in Scotland. If real sexual material is involved, report the blackmail directly to police.

Reporting and support

  • Suspicious email: forward it to report@phishing.gov.uk.
  • Fraud loss in England, Wales or Northern Ireland: use Report Fraud at https://www.reportfraud.police.uk/ or call 0300 123 2040.
  • Fraud in Scotland: call Police Scotland on 101 or use its online reporting routes.
  • Real or suspected sextortion: report to your local police force; use 999 in an emergency.
  • Emotional support: In England and Wales, Victim Support's free support line is 08 08 16 89 111. Scotland and Northern Ireland have separate victim-support services. If you are in immediate danger or feel at risk of harming yourself, call 999 or seek urgent medical help.

Frequently asked questions

The email contains a real password. Was my webcam hacked?

The password alone is not evidence of camera access. The NCSC says it was probably obtained from a historic data breach. Change it immediately if it is still in use.

Should I ask the sender for proof?

No. Do not engage or click a supposed sample. Report the message. If it contains credible personal material or evidence of account compromise, contact police.

Is every sextortion email a bluff?

No. The familiar bulk email claiming to have filmed an adult-site visit is generally a phishing bluff, but genuine sextortion using real, stolen or manipulated images occurs. Assess evidence cautiously and report credible threats.

What if I have paid?

Contact the payment provider immediately, make no further payment and report the incident through the appropriate fraud or police route. Recovery depends on the payment and circumstances.

Should I cover my webcam?

A cover can be a general privacy measure, but it does not resolve account compromise and the email alone does not show that a camera was accessed. Update devices and review camera permissions and account security.

Sources checked

Think you’ve spotted a scam? Use the AI scam checker for an automated second opinion, or report it to Report Fraud for England, Wales and Northern Ireland, or Police Scotland on 101 for Scotland.

Reporting routes in this guide are checked against our verified canon of official UK sources — Report Fraud for England, Wales and Northern Ireland, or Police Scotland on 101 for Scotland, the National Cyber Security Centre, and the consumer service for each nation — by an automated accuracy gate before publication. Editorially updated by , Founder & Editor, on 2026-07-30. Read about how Beat the Scam writes guides.