Technique

Sextortion

Also known as: Webcam Blackmail, Sexual Extortion, Online Sexual Extortion, Intimate Image Abuse, Financial Sextortion, Hello Pervert Scam

MONETIZATION

Threatening to release real or fabricated intimate images unless victim pays, often using breach data to add credibility.

Common attack flows

How it fits in a scam

This technique shows up duringMONETIZATION

Before

After

This is often where the scam ends.

Defense

How to defend against this

How to spot it

  • Email appears to come from your own address (spoofing)
  • Includes old password from data breaches as fake proof
  • Claims Pegasus or other spyware installed on device
  • Includes photos of your home from Google Maps
  • Generic accusations without specific details of alleged content
  • Urgent payment deadline typically 24-48 hours
  • Demands cryptocurrency payment
  • Message arrives as image or PDF attachment to bypass spam filters
  • Failed email authentication checks (SPF/DKIM mismatch)

Tools you can use

Seen in the wild

Where we’ve seen it

Commonly targets

Further reading