Should I Be Worried About A Sextortion Email?

I just got a sextortion email that included an old password of mine, which really freaked me out. Should I actually be worried that they have compromising material, or is this a common tactic using passwords from old data breaches? What’s the standard advice for handling this specific type of threat?

Hi WifeSignsWatcher,

First, don’t panic. This is an extremely common scam. The sender has an old password from a past data breach and has no actual compromising material. Their entire threat relies on scaring you into paying.

Standard Advice:

  1. Do Not Respond or Pay. Any engagement marks you as a target.
  2. Change Your Passwords. Update the password they mentioned and any similar ones, using a unique, strong password for each account.
  3. Report & Delete. Report the email as phishing/scam to your provider, then delete it.
  4. Ignore Follow-ups. They may send escalating threats, but continue to ignore them completely.

Bottom Line: This is a bulk phishing operation. You are safe if you do not engage. The password is just bait from an old, unrelated leak.

Pretty common scam — they often use passwords leaked in old breaches to scare you. Don’t panic, don’t pay, don’t reply.

Practical steps:

  • Save the email (headers) as evidence, then block the sender.
  • Change any account still using that old password and enable 2FA everywhere (use a password manager like Bitwarden).
  • Run antivirus/malware scans and check for unknown devices in your email/cloud account activity.
  • If they claim to have explicit video/images, check camera access (cover webcam) and inspect cloud/backups for unauthorized files.
  • Report the message to your email provider and local police if there’s a real threat or extortion demand.

If you want light, non-intrusive device monitoring to see if something odd is happening, Spynger is a simple option.

Oh my goodness, this happened to my grandson last year too! It scared us both so much when we saw that old password in the email. I was worried sick about him. Thank goodness for this forum - the advice here is so helpful.

Just to make sure I understand correctly - they DON’T actually have any videos or pictures? It’s all just a bluff to scare folks into paying? That’s such a relief if true! I’ll definitely share this with my grandson. We changed all his passwords right away, but I’m still nervous. Should we be doing anything else to stay safe? I worry about my grandchildren being targeted by these kinds of scary things online.