“I Am a Professional Hacker” Email Scam: Do Not Pay the Bitcoin Demand
If you received an email beginning with “I am a professional hacker,” take a breath before doing anything. The message may claim that someone hacked your computer, activated your camera, recorded you visiting an adult website, and will send an embarrassing video to your contacts unless you pay Bitcoin.
This is a well-known form of email blackmail commonly called a sextortion email scam. The message is written to frighten and embarrass you into paying before you have time to investigate.
What the threatening email says
One version begins:
“I am a professional hacker and have successfully managed to hack your operating system. Currently I have gained full access to your account.”
The sender then claims to have installed spyware or a Trojan after the recipient visited an adult website:
“Thanks to Trojan viruses, I can gain complete access to your computer or any other device that you own.”
The scammer claims to have controlled the camera and microphone, collected emails and chat messages, and produced a split-screen recording containing an explicit video of the recipient.
The demand follows:
“Transfer the Bitcoins equivalent of $1,400 to my Bitcoin account.”
The original Bitcoin wallet address has been removed from this article. The scammer also imposes a short deadline and warns the recipient not to contact anyone:
“Complete the above-mentioned transfer within 50 hours.”
“If I discover that you shared this message with others, I will straight away proceed with making your private videos public.”
These threats are designed to create panic—not prove that the sender controls your computer.
Why this is probably a scam
This message follows a script distributed to large numbers of email addresses. The scammer generally provides no verifiable evidence that a recording exists.
Several warning signs appear in the message:
It uses a generic greeting instead of identifying the recipient.
It makes dramatic technical claims without providing proof.
It relies on shame, fear and urgency.
It demands payment through Bitcoin.
It threatens consequences if the recipient asks anyone for help.
It claims the sender will know exactly when the email was opened.
Words contain unusual spaces or hidden characters, possibly intended to evade spam filters.
The email may even appear to come from your own address. That can happen through email spoofing and does not, by itself, prove that your account was accessed.
Some variations include a real password previously used by the recipient. According to the Federal Trade Commission, that password may have come from an earlier data breach. Its appearance in the email is a reason to change the password—not proof that the scammer currently controls your computer.
Should you pay the Bitcoin demand?
No. Do not send Bitcoin or any other payment.
Paying does not prove that a recording exists, guarantee that anything will be deleted, or prevent the scammer from demanding more money. Cryptocurrency transfers can also be extremely difficult to reverse.
Do not reply, negotiate, threaten the sender, or test the supplied Bitcoin wallet.
What to do after receiving the email
Take the following precautions:
Preserve evidence. Save a screenshot or copy of the message, including its full email headers if possible.
Do not reply or pay. Communicating confirms that your address is active and that the message frightened you.
Mark the message as phishing or junk. After preserving anything required for a report, delete it.
Change exposed passwords. If the email contains a password you recognize, change it anywhere it is still used. Every important account should have a unique password.
Enable multifactor authentication. Protect your email, financial accounts, cloud storage and social-media accounts with an authenticator application or another strong second factor.
Review your email account. Check recent sign-ins, connected devices, recovery information, forwarding addresses and inbox rules for changes you did not authorize.
Update and scan your devices. Install current operating-system, browser and security updates, then perform a reputable security scan.
Report the message. Canadians can report attempted or completed fraud to the Canadian Anti-Fraud Centre. If money was sent or an account was compromised, contact local police and the relevant financial institution or cryptocurrency exchange immediately. People in the United States can report the scam through the Federal Trade Commission.
What if the threat contains real information?
A generic message with no evidence is usually a mass-distributed scam. However, take the situation more seriously if the sender provides a genuine private image, a newly captured screenshot, specific information unavailable from public sources, or proof of access to one of your current accounts.
In that situation, do not pay or negotiate. Preserve the evidence, secure your accounts from a trusted device, and contact local police or a qualified cybersecurity professional.
Do not let embarrassment prevent you from reporting it
The scam succeeds by making recipients feel ashamed and isolated. Receiving the message does not prove that you visited any particular website or that a compromising recording exists.
Talk to someone you trust, secure your accounts, and report the attempted fraud. The most important thing is not to let a frightening but unsupported email pressure you into sending money.