While most of us are stuck at home, the scammers are still hard at work. In fact, they are customizing their approach to target us while we work from home or otherwise spend time online as a way to stay connected to the outside world. The Fraud Watch Network Helpline has seen a big spike in email extortion scams. The FBI’s Internet Crime Complaint Center (IC3) documented over 51,000 cases of online extortion at last count, with victims suffering losses of $83 million.
How It Works
Scammers send emails containing a former or current password of yours.
They claim to be watching you over your computer’s camera or that they are recording websites you visit, and say they have evidence of you or your spouse visiting adult websites.
They threaten to share this information with your contacts or on social media platforms unless you pay them. Typically, the request is for hundreds of dollars in the online currency Bitcoin (complete with instructions on how to process the transaction).
What You Should Know
The password they have is most likely among information exposed in a data breach, which gets bought and sold among criminals.
The message likely has no mention of any specific websites you or your spouse have allegedly visited, because they don’t have this information.
It is highly unlikely your computer has been accessed. The scammers simply hope to stumble across a few people who don’t change their passwords regularly.
What You Should Do
Change passwords regularly, using a different password for each site you log into. Consider using a password manager to keep track of passwords.
Cover the lens on your computer’s camera with a piece of tape when you’re not using it to block a hacker who could use it to spy on you.
Avoid clicking any links in any email from an unknown source.
Report extortion emails to the IC3 or to an FBI Field Office in your area. Include the sender’s email address and payment information, if provided (for example, the number of his or her Bitcoin “wallet”), which may help with the investigation.