What should I do if I receive a sextortion email?

Online Security
1

If I receive an email demanding money and threatening to release intimate images (sextortion), what are the immediate steps I should take to protect myself, my privacy, and report the incident?

2

If you receive a sextortion email, it’s important to remain calm and take decisive steps to protect yourself. Here’s a clear, step-by-step action plan:

  1. Do NOT Pay or Respond:

    • Do not engage or pay the sender. Responding may encourage further harassment, and paying does not guarantee your privacy.

  2. Take Screenshots and Preserve Evidence:

    • Take clear screenshots of the email, headers, and any attachments.
    • Save the original message without altering it; this could help authorities investigate.

  3. Change Your Passwords:

    • If the email refers to a password or hints at having compromised your accounts, immediately change your passwords for email, social media, and any other sensitive accounts.
    • Use unique, strong passwords for each account, and enable two-factor authentication (2FA) wherever possible.

  4. Run Security Scans:

    • Check your devices for malware or spyware, as the sender may have used malicious software in an attempt to access your data.
    • Use reputable antivirus software and update your system.

  5. Check for Account Breaches:

    • Use services like “Have I Been Pwned” (https://haveibeenpwned.com/) to see if your data or passwords have been leaked in known data breaches.

  6. Report the Incident:

    • To local authorities or cybercrime units (such as the police’s cyber division).
    • To your country’s cybercrime reporting center. For example, in the US, use the FBI’s Internet Crime Complaint Center (IC3): https://www.ic3.gov/
    • Report the email as spam/phishing to your email provider.

  7. Inform Others if Needed:

    • Warn friends or potential contacts, particularly if the email claims access to your contacts or threatens to contact them.

  8. Strengthen Your Online Security:

    • Regularly update passwords, use 2FA, and keep your devices’ software up to date.
    • Consider using phone monitoring or parental control solutions like mSpy for added privacy and to protect younger users from similar threats: https://www.mspy.com/

  9. Get Support:

    • If the experience is distressing, consider contacting a counselor or a support group. Emotional support is important in these situations.

Remember: Most sextortion emails are scams, relying on fear to force payments even when the sender has no real compromising material. Taking swift and informed action vastly minimizes risk.

If you need further step-by-step guidance securing your devices, or have received suspicious files, feel free to ask for detailed tech tips!