The following bitcoin addresses (
cf. below) are linked to an increasing number of '
sextortion' scams, essentially electronic or online blackmail that purports to be from someone, typically claiming to have hacked the recipients email address to send an often self-addressed 'spoofed' message, with threats that various **** have been hacked and malware placed to hijack the users webcam to record compromising videos, the
threat then being the captured materials release to the public if payment is not sent to a bitcoin address included in the message, amounts often in excess of $1000's of dollars (USD).
It's important to note sextortion scammers acquire target addresses not from compromised websites as suggested by the scammer, but from lists of breached email accounts available online - breaches of gaming sites that end up being sold online for example, which is why it's always a good idea to change passwords when notified of such events.
Typical sextortion email - message body may be text, an image or combination (
the latter making it additionally annoying to type the bitcoin address accurately), with poor grammar, spelling and punctuation. Unlike other sextortion or money scams, Western Union money grams for example, the anonymous nature of bitcoin makes these scams particularly troublesome due to the difficulty in tracking down the scammers - at present the only effective means to combat these scams is to shine a light on the addresses being used, even then there are always exchanges willing to process funds sent to them regardless (
see below for more resources/info).
Hello!
I'm a programmer who cracked your email account and device about half year ago. You entered a password on one of the insecure site you visited, and I catched it. Your password from {users email address} on moment of crack: {password or other PII} Of course you can will change your password, or already made it. But it doesn't matter, my rat software update it every time. Please don't try to contact me or find me, it is impossible, since I sent you an email from your email account.
Through your e-mail, I uploaded malicious code to your Operation System. I saved all of your contacts with friends, colleagues, relatives and a complete history of visits to the Internet resources. Also I installed a rat software on your device and long tome spying for you.
You are not my only victim, I usually lock devices and ask for a ransom. But I was struck by the sites of intimate content that you very often visit. I am in shock of your reach fantasies! Wow! I've never seen anything like this! I did not even know that SUCH content could be so exciting! So, when you had fun on intime sites (you know what I mean!) I made screenshot with using my program from your camera of yours device. After that, I jointed them to the content of the currently viewed site. Will be funny when I send these photos to your contacts! And if your relatives see it? BUT I'm sure you don't want it. I definitely would not want to ... I will not do this if you pay me a little amount. I think {amount USD} is a nice price for it!
I accept only Bitcoins. My BTC wallet: {bitcoin address}
If you have difficulty with this - Ask Google "how to make a payment on a bitcoin wallet". It's easy. After receiving the above amount, all your data will be immediately removed automatically. My virus will also will be destroy itself from your operating system. My Trojan have auto alert, after this email is looked, I will be know it!
You have 2 days (48 hours) for make a payment. If this does not happen - all your contacts will get crazy shots with your dirty life! And so that you do not obstruct me, your device will be locked (also after 48 hours) Do not take this frivolously! This is the last warning! Various security services or antiviruses won't help you for sure (I have already collected all your data). Here are the recommendations of a professional: Antiviruses do not help against modern malicious code. Just do not enter your passwords on unsafe sites!
I hope you will be prudent. Bye.
Bitcoin Scam Addresses/ID's(
see below posts for more bitcoin addresses)
- 17XansAD9geWqX31sP7a8A3DmoVseVikyt
- 12PbXS2eR22tAXeCAPJa2RbPoHq33ZXycn
- 16MCEmoXrJdevMHRAnj2RTUMoT45i3BoTw
- bc1qmqs2lavzy9k8ulcdgkrjj2njpcl62vksuhsytt
- 13RuNi9xhDN5ngYy251h4WFDYoE3VA4kPJ
- 17aB5wwDJ6EGdzzMgp3Y5deKCrqe7ga3qR
- bc1q549rwxx67lhhhfn4y9073t4pyah539pw09cf9a
- 1FADcN5uSxtzV4E3zGCfQ4f3XzgxEPzT3M
- 1C2g3BixavU7Vupm1Atka6qErPZkhS18TY
- 1Pd7qACCUtM1zVXixbyxuJCXmDi4D1qMjn
- 1E3mVbLSLLUgdmrp8GV5RRu1Qz5FkWs4rJ
- 1FXXt4n3GnZKGJeK4LkHmZdKxwpgMwS67e
- 1A28fiWUfQnqEMqoDmMf7KZcjSDY7mEjfs
- 1Abx3eY5pHFE1aC4AJLdU91qhHS5rzqP4E
- 3H9Be5foif5NkUEQwGP5Yo3dxgEoMN9XDY
- 34mhcVGgZo6mqH6aMXa5ZDEZmxE2JRfMsg
- 13BfNz9CsS9YHDs2UeDkH6m7rZDM4Xo81u
- 12mwSFYDyCWta8uMNxq52mENdi3nkjQGa5
- 12iPLbH9BGsBkbJvoy2iULyLYiawxZreT4
- 1PzZ3jX1zrGov2qyrMB8x3fKCrfxvTU2Tx
- 1JEvR3g6o6AbBZLWm9bvdVyeWk3yC8Rs8w
- 1DYfqwqz7Tq93Fau61YFXBAoogQv56FvJz
- 1LbbzFmNMMFMwsketCSzxAur6yinXBSiQQ
- bc1qufltvvk9y59zc7eyhq9608tk08ze3e0rft39av
- 185kB82fakN7BCDpcS9tfzbDc8uytm5Wo
- 13XbYjAxrgSwsvMM4hXQpdwEqQTA5vbvnE
- bc1qq85lm69h3z6wuatrtgzmzakzz2cdv6s3prxurr
- bc1qagz7afujdtmuf06y6tk39t8cw7vlnptrxu2fre
- 1GXQym1cfFhHBFbqqZGp2tTQkAfU9yBS1w
- 19gjxoZ2x8xzNC18FYtLxCL3FWRi15cP39
- 16RrKqp6gvepFSBMTcoVzdJZ1NSbA7PjZA
- 1ELed4R6FhJEL5pQQzP6PM9wFQbvHjuZng
- 1BqMb5HKDj5xaTR65Psx1pfaDfzqWKPE65
- bc1qg2yj3uu33wum9valr5l00xgmxrp2s838l4wy9w
- 16wrVfSkDkSNs7ZBSojJ741GMBP9Ee3Mhm
- 1EV3qSyz4XKoZAWvB1eVSYqHyqCNRdv9i7
- 15PjLxvFvVuUASkWLTReBDf1SAnGboiE3Q
- 17uRSEYKbco6kMrEc5aVCsCPAsFTVRPtsd
- 1MvogqA76t4o8Cya83SbPCGn52VRJsbiUV
- 1EfCwNrGgGbNAn4bKUX7XydSzFu4RHheC4
- 15J3ZhZ6q6n2146Gdk5ncjqWaN84rNtvMd
- 19U1xBf2UZeLfPkVh1Gu3WGHheYCzjsVxs
- 1GmtfRMFdctbJmhNZMgNNEeB7x1L8oKido
- 16cX1KRRPc56LuZrWFJPXLLvrr8m4DVPrS
- 1N1AvndRxpo3dfKwaMTDmiy1Uaers6hZJk
- 1L1VmEatFZZSdU2DYD3JnS9RtpzXdPGmLZ
- 1HTAhiza95JocaB3ZtXrv5qmGPkjpBECNa
To this point (Oct 23) the bitcoin addresses listed below have scammed victims of approximately $95,000 USD.
- 32j388V1d3Na9QBJfSqLVd3pxAwDUj87dL
- 3PLP6QMmqE7ixFSqBydDRnevGXQFjgCucb
- 3Hew7jNoAtrGQTNFX2pmgovEYDGDfFhB5S
- 1P28gw81epAv9RfjhaJikNjukboCrj8Lvn
- 1AXBHuEiGvryS2HkM2tSPFnDDqt92sC8DM
- 1Fgiv3CQ15pkaMG4BzNzNiZGjy5NxaiLt5
- 1DvEgCFc6MHsbajRvkctjUPAPtn51b6DcN
- 1JSYZui6naWDUuqRjih9vZgetbkqWY4cTq
- 1CK41adce6KuM3UM2eySnzUyR9SAJnf4wu
- 1E4Ek9N68mogRZq9x4hiRQ4W2k3iiDehYk
- 15L57f8G22cPmDtq2devcQw6J4SbC8EX8b
- 17nwWzU9WA9tmRrQLaJqHRszzjLt2xMgmG
- 1FRoqN2qUEqNKM7e2xwNd9yoGxx5LSaeao
- 1HbJxyHEKTKVzgp9rb7r7KVZLBoUp6qErH
- 1QDgvdFPUvUdUMXYMm6eZg55cicyfYrmGs
- 1Mo73pEdA2B7xHefJa8j15cLZXMV9WbubW
- 1qiua14J2UveEWHKSrytrnVC6QNAomv5Y
- 1J7RYCYp8D7zYoAAR4HQDXujaRU6D9tDbf
- 1Hx9GJEHfA8BUh9MczmmyxXhX9gtpzfvQ4
- 1LzggssAAtthNh2bvUkbe6ADN5EJk8i1sd
- 18z7GJZjP2eAK4M2DvmzsEAYFFndnBEi7o
- 1GzNpKDWNuvQXuRWdK1RdDgX9YEizwynPQ
- 1HBiRxpSxekVND1Rqwqh1gbUKeZiYBsDkt
- 1LhnqVQB4GPKSLEctTma3gdkYRQefJv5eB
- 1G8U8mNRBkBPmMrHZ3MMZnM1dH5bLKhLhp
- 15wQk4AHFCtWGyAzjsG9c947prqdeR2tGb
- 1DzWf1Y9nDKPgmc2em37KRjYePPmWggRce
- 1N4Foo1dbRJ26GBy6SpbjhpxYHuHtdcitw
- 13HA6EVfvTPidW3xv5Tp88WRvH96QtB3XV
- 14UTJBbtUsKxPtkf8WvGwWBpB4D6MmGqAk
- 1Nx353jT8zZYaqmoMdMr2PRtdixStrDoZE
- 16pKS1TeH4xHqqBiUz3BtvgfgkHQrAH2yC
- 13g3WtdxuoB9AVyy54QW9xxbDtFjE2iNHk
- 14UTJBbtUsKxPtkf8WvGwWBpB4D6MmGqAk
- 1Nx353jT8zZYaqmoMdMr2PRtdixStrDoZE
- 17HVBHWtzmewGsiqjugbajvDhDgpvZ4T3m
- 1FDynarknwUQ2iSD3BmF8HSBjTeQHWKKai
- 1GS1SRz3QBC1NUeuhu8EWkx37qQXanUxGG
- 1McWWFd3eYwvm7v2Rj2jMmDZGFWyFRjZ4P
- bc1qqsm0xsdr40awd5hyp5ncm95fyshtpvt9zqnxc9
- 15NCWERN56DQNf4WiPLR2txgiEF2np5Q2g
- 19eXNvqfdK7w8NVX1Db5o6GBYR1tcpWTKv
- 1BtfPsKpk13fReZsTkVotBffkS63eN6L8p
- 1CNEPy79uNLJ9o6DQXD44CsHjGDgpCbTL2
- 17WhVHdWCW3yNNAo4LXsPRpTCnhN8wVtG8
- 1GnGGkm4kRjhU71mZSUCEkkQFNbCpGAneG
- bc1qgnl94qvlfeyd39xfydcgh8lwrrmarves2c83l5
- bc1qv0anh9jxck5vvc3uk9pv6z5kq95rx7gnsny3vm
- 13yQcMFQSf7ixzJrNceCDL4E1jVHEVqrcY
- bc1qujdfkefrs0p8423uns7qercgqk6ys5pp8eym5r
- 1Pp5DTCTRSzoFyaHbrSEWGDWZZRp3rMsWv
- bc1qvumapzgx0adq9qphwlawhyuftxmecxdmxj8lsz
- bc1qvz5hn4ylpktu2k5kt8cn3nyx6nnhzslh9lqx2c
What to do if scammed by bitcoin fraudThe following resources can be used, depending on location and jurisdiction, to report sextortion bitcoin scams;
- https://www.bitcoinabuse.com/ - database that keeps track of user submitted bitcoin scams, search for and report bitcoin abuse including sextortion emails (be sure to clear personal information when submitting a report).
- https://haveibeenpwned.com/ - database that keeps track of compromised account data, usually in the form of drops from breached websites.
- Report the scheme to the local authorities, Action Fraud (https://www.actionfraud.police.uk/report-phishing) in the UK for example - availability may vary (optional).
- Depending on mail client Header information may be available that can be used to report abuse to mail provider (optional).
