Exposing the “I Want to Inform You About a Very Bad Situation” Email Scam
Written by: Thomas Orsolya
Published on:
A new and particularly insidious email scam has been making the rounds that preys on people’s fears of being “caught” viewing questionable content online. Known as the “I Want to Inform You About a Very Bad Situation for You” email scam, this fraudulent email threatens to release compromising videos to the victim’s contacts unless a ransom is paid.
This detailed article will provide an in-depth look at how this scam works, what you should do if you receive this email, and how to protect yourself going forward. Key topics covered include:
Overview of the Scam
Step-by-Step Explanation of How the Scam Works
What to Do If You’ve Fallen Victim
The Bottom Line
With online scams only growing in sophistication, awareness and vigilance are our best defenses. It’s important to educate yourself on how these scams operate so you can spot red flags and avoid falling victim. Read on for a comprehensive guide on the “I Want to Inform You About a Very Bad Situation for You” extortion email scam.
This article contains:
Overview of the Scam
The “I Want to Inform You About a Very Bad Situation for You” extortion scam starts with an email that greets recipients as “pervert” and claims to have deeply compromising and embarrassing videos that were obtained through hacking.
The lengthy, graphic email insists the sender used malware called “Pegasus” to access the recipient’s devices and spy on their online activity. It claims that “for months” the hackers have been monitoring the target’s private life, including watching them view inappropriate videos and illegal content through their webcam.
The message describes these alleged videos in explicit detail, accusing the victim of having depraved interests and a “sick perversion.” It threatens to send the supposed videos to all of the target’s contacts – family, friends, co-workers – unless a specified ransom is paid within 48 hours.
The email is crafted to instill fear and panic, making accusations of immoral behavior and claiming the victim’s “former life” will be destroyed once the videos are released. It urges them to pay up quickly before this “tsunami” of exposure sweeps away their reputation.
In reality, this is merely an extortion scam sent en masse in hopes of scaring some recipients into paying ransom out of desperation. The hackers do not actually possess any inappropriate videos nor have they accessed devices with malware. The vivid descriptions are pure fabrication, intended to alarm and intimidate.
Here is how the “I Want to Inform You About a Very Bad Situation for You” extortion scam email might look:
Hello pervert, I want to inform you about a very bad situation for you. However, you can benefit from it, if you will act wisely. Have you heard of Pegasus? This is a spyware program that installs on computers and smartphones and allows hackers to monitor the activity of device owners. It provides access to your webcam, messengers, emails, call records, etc. It works well on Android, iOS, and Windows. I guess, you already figured out where I’m getting at. It’s been a few months since I installed it on all your devices because you were not quite choosy about what links to click on the internet. During this period, I’ve learned about all aspects of your private life, but one is of special significance to me. I’ve recorded many videos of you jerking off to highly controversial porn videos. Given that the “questionable” genre is almost always the same, I can conclude that you have sick perversion. I doubt you’d want your friends, family and co-workers to know about it. However, I can do it in a few clicks. Every number in your contact book will suddenly receive these videos – on WhatsApp, on Telegram, on Skype, on email – everywhere. It is going to be a tsunami that will sweep away everything in its path, and first of all, your former life. Don’t think of yourself as an innocent victim. No one knows where your perversion might lead in the future, so consider this a kind of deserved punishment to stop you. Better late than never. I’m some kind of God who sees everything. However, don’t panic. As we know, God is merciful and forgiving, and so do I. But my mercy is not free.
Transfer $1220 USD to my bitcoin wallet: 1JVMTup4zuS1JMGXAYYRgvyr2PUmNnY6g2
Once I receive confirmation of the transaction, I will permanently delete all videos compromising you, uninstall Pegasus from all of your devices, and disappear from your life. You can be sure – my benefit is only money. Otherwise, I wouldn’t be writing to you, but destroy your life without a word in a second.
I’ll be notified when you open my email, and from that moment you have exactly 48 hours to send the money. If cryptocurrencies are unchartered waters for you, don’t worry, it’s very simple. Just google “crypto exchange” and then it will be no harder than buying some useless stuff on Amazon.
I strongly warn you against the following: ) Do not reply to this email. I sent it from a temp email so I am untraceable. ) Do not contact the police. I have access to all your devices, and as soon as I find out you ran to the cops, videos will be published. ) Don’t try to reset or destroy your devices. As I mentioned above: I’m monitoring all your activity, so you either agree to my terms or the videos are published.
Also, don’t forget that cryptocurrencies are anonymous, so it’s impossible to identify me using the provided address. Good luck, my perverted friend. I hope this is the last time we hear from each other.
And some friendly advice: from now on, don’t be so careless about your online security.”
These fraudulent emails started circulating around 2018 but intensified in 2022, with many reporting receiving multiple variations. The messages often include a password associated with the recipient, which lends credibility to the supposed hacking claims.
In truth, these passwords are gleaned from massive third-party data breaches and sold on the dark web. Criminals purchase leaked credentials then incorporate them into scam emails, making threats seem real and personal.
The emails insist recipients keep quiet, not respond, and not contact authorities. This aims to prohibit any scrutiny or skepticism that could reveal the scam. Any questioning is met with additional threats of exposure and extortion.
The ransom demands are for large sums sent urgently through untraceable cryptocurrency to a specified wallet. The short time windows given, often 48 hours, pressure victims to comply immediately without thinking rationally.
In summary, despite alarming claims and threats, the “I Want to Inform You About a Very Bad Situation for You” extortion email scam is a complete bluff. No compromising videos exist and engaging with scammers only enables further exploitation.
Awareness of the detailed tactics and false threats used in this scam can help recipients avoid manipulation. The message is designed to provoke fear and hasty decisions, but no real evidence exists. These are empty threats distributed randomly to frighten recipients into paying ransom. Caution and level-headedness are the best defenses.
How the “I Want to Inform You About a Very Bad Situation for You” Scam Works
The “I Want to Inform You About a Very Bad Situation for You” scam can be broken down into several steps:
1. Scammers Obtain Email Addresses and Passwords
The scammers likely purchased lists of email addresses and passwords that were previously leaked in data breaches. Hundreds of millions of usernames, emails, and passwords can be found for sale on the dark web from various breaches over the years.
This gives them two crucial pieces of information – the target’s email address and an associated password.
2. Mass Emails Sent Threatening Blackmail
Using the purchased email lists, the scammers send out mass emails with nearly identical threatening messages. The emails include the recipient’s email address and one of their passwords in the body.
The message is crafted to scare and shock the reader with accusations of inappropriate online activity that has allegedly been recorded. Deception, fear, and urgency provoke victims to act irrationally out of desperation.
3. Ransom Demand Made for Bitcoin
The email demands payment to be sent within 48 hours to a specified Bitcoin wallet address. The amount varies but is usually $500 – $1000 worth of Bitcoin.
Bitcoin is used because it offers more anonymity compared to traditional payment methods. This makes it very difficult for authorities to track or recover funds.
4. Scammers Disappear After Receiving Ransom
For recipients who comply and send the ransom amount in Bitcoin, the interaction often ends there. The scammers now have their money and typically cut off all communication.
Of course, they never actually had compromising videos to begin with. The threats were a fabrication to elicit fast payment. Once the scam succeeds, the criminals disappear with the funds.
5. Reputational and Financial Damage for Victims
Those fooled into paying the ransom suffer both financial loss and emotional distress. Beyond the lost money, victims may experience anxiety, fear, and embarrassment at having been manipulated.
There are also risks of double extortion. After identifying susceptible victims, scammers may return demanding even larger payments over longer periods.
Ultimately for victims, there are no compromising videos to be deleted. The scammers never had any leverage beyond the initial email deception, but will continue demanding money from victims if they comply.
What to Do If You’ve Fallen Victim
If you receive one of these emails and especially if you ended up paying the ransom, here are important steps to take:
Don’t Panic
First and foremost, try to remain calm. The email is ultimately a scam, even if it includes some personal information about you. Take a breath and assess the situation logically before acting.
Do Not Pay
If you haven’t paid yet, don’t. As covered above, paying the ransom does not guarantee the scammers will actually follow through on any promises to delete evidence or leave you alone. More demands may follow.
Change Passwords
If one of your current or old passwords was included in the email, change it immediately. Use a new, strong, unique password for each account. Enable two-factor authentication wherever possible.
Scan Devices for Malware
Run anti-virus scans on all your devices to check for malware or spyware. The email’s claim of hacking your devices is highly unlikely, but checking for viruses is a smart precaution.
Contact Your Email Provider
Your email provider may be able to offer assistance in blocking additional scam emails. They can also help secure your email account if you reuse the password mentioned in the scam.
Report the Email
Forward the scam email to spam@uce.gov and to the FTC at spam@uce.gov. You can also report it to the FBI at https://www.ic3.gov. This helps authorities track down scammers targeting people across the country.
Monitor Accounts Closely
Keep an eye out for any suspicious activity in your online accounts, especially incoming or outgoing Bitcoin transactions. Contact financial institutions immediately for any unauthorized activity.
Seek Professional Help if Needed
Being victimized by this type of scam can take an emotional toll. Don’t be afraid to seek mental health support or counseling if you are continuing to experience fear, anxiety, or embarrassment from the situation.
Is Your Device Infected? Check for Malware
If your device is running slowly or acting suspicious, it may be infected with malware. Malwarebytes Anti-Malware Free is a great option for scanning your device and detecting potential malware or viruses. The free version can efficiently check for and remove many common infections.
Malwarebytes can run on Windows, Mac, and Android devices. Depending on which operating system is installed on the device you’re trying to run a Malwarebytes scan, please click on the tab below and follow the displayed steps.
Malwarebytes For WindowsMalwarebytes For MacMalwarebytes For Android
Scan your computer with Malwarebytes for Windows to remove malware
Malwarebytes stands out as one of the leading and widely-used anti-malware solutions for Windows, and for good reason. It effectively eradicates various types of malware that other programs often overlook, all at no cost to you. When it comes to disinfecting an infected device, Malwarebytes has consistently been a free and indispensable tool in the battle against malware. We highly recommend it for maintaining a clean and secure system.
Download Malwarebytes for Windows
You can download Malwarebytes by clicking the link below.
After the download is complete, locate the MBSetup file, typically found in your Downloads folder. Double-click on the MBSetup file to begin the installation of Malwarebytes on your computer. If a User Account Control pop-up appears, click “Yes” to continue the Malwarebytes installation.
Follow the On-Screen Prompts to Install Malwarebytes
When the Malwarebytes installation begins, the setup wizard will guide you through the process.
You’ll first be prompted to choose the type of computer you’re installing the program on—select either “Personal Computer” or “Work Computer” as appropriate, then click on Next.
Malwarebytes will now begin the installation process on your device.
When the Malwarebytes installation is complete, the program will automatically open to the “Welcome to Malwarebytes” screen.
On the final screen, simply click on the Open Malwarebytes option to start the program.
Enable “Rootkit scanning”.
Malwarebytes Anti-Malware will now start, and you will see the main screen as shown below. To maximize Malwarebytes’ ability to detect malware and unwanted programs, we need to enable rootkit scanning. Click on the “Settings” gear icon located on the left of the screen to access the general settings section.
In the settings menu, enable the “Scan for rootkits” option by clicking the toggle switch until it turns blue.
Now that you have enabled rootkit scanning, click on the “Dashboard” button in the left pane to get back to the main screen.
Perform a Scan with Malwarebytes.
To start a scan, click the Scan button. Malwarebytes will automatically update its antivirus database and begin scanning your computer for malicious programs.
Wait for the Malwarebytes scan to complete.
Malwarebytes will now scan your computer for browser hijackers and other malicious programs. This process can take a few minutes, so we suggest you do something else and periodically check the status of the scan to see when it is finished.
Quarantine detected malware
Once the Malwarebytes scan is complete, it will display a list of detected malware, adware, and potentially unwanted programs. To effectively remove these threats, click the “Quarantine” button.
Malwarebytes will now delete all of the files and registry keys and add them to the program’s quarantine.
Restart your computer.
When removing files, Malwarebytes may require a reboot to fully eliminate some threats. If you see a message indicating that a reboot is needed, please allow it. Once your computer has restarted and you are logged back in, you can continue with the remaining steps.
Your computer should now be free of trojans, adware, browser hijackers, and other malware.
If your current antivirus allowed this malicious program on your computer, you may want to consider purchasing Malwarebytes Premium to protect against these types of threats in the future. If you are still having problems with your computer after completing these instructions, then please follow one of the steps:
Scan your computer with Malwarebytes for Mac to remove malware
Malwarebytes for Mac is an on-demand scanner that can destroy many types of malware that other software tends to miss without costing you absolutely anything. When it comes to cleaning up an infected device, Malwarebytes has always been free, and we recommend it as an essential tool in the fight against malware.
Download Malwarebytes for Mac.
You can download Malwarebytes for Mac by clicking the link below.
When Malwarebytes has finished downloading, double-click on the setup file to install Malwarebytes on your computer. In most cases, downloaded files are saved to the Downloads folder.
Follow the on-screen prompts to install Malwarebytes.
When the Malwarebytes installation begins, you will see the Malwarebytes for Mac Installer which will guide you through the installation process. Click “Continue“, then keep following the prompts to continue with the installation process.
When your Malwarebytes installation completes, the program opens to the Welcome to Malwarebytes screen. Click the “Get started” button.
Select “Personal Computer” or “Work Computer”.
The Malwarebytes Welcome screen will first ask you what type of computer are you installing this program, click either Personal Computer or Work Computer.
Click on “Scan”.
To scan your computer with Malwarebytes, click on the “Scan” button. Malwarebytes for Mac will automatically update the antivirus database and start scanning your computer for malware.
Wait for the Malwarebytes scan to complete.
Malwarebytes will scan your computer for adware, browser hijackers, and other malicious programs. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Quarantine”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes has detected. To remove the malware that Malwarebytes has found, click on the “Quarantine” button.
Restart computer.
Malwarebytes will now remove all the malicious files that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your computer.
Your Mac should now be free of adware, browser hijackers, and other malware.
If your current antivirus allowed a malicious program on your computer, you might want to consider purchasing the full-featured version of Malwarebytes Anti-Malware to protect against these types of threats in the future. If you are still experiencing problems while trying to remove a malicious program from your computer, please ask for help in our Mac Malware Removal Help & Support forum.
Scan your phone with Malwarebytes for Android to remove malware
Malwarebytes for Android automatically detects and removes dangerous threats like malware and ransomware so you don’t have to worry about your most-used device being compromised. Aggressive detection of adware and potentially unwanted programs keeps your Android phone or tablet running smooth.
Download Malwarebytes for Android.
You can download Malwarebytes for Android by clicking the link below.
In the Google Play Store, tap “Install” to install Malwarebytes for Android on your device.
When the installation process has finished, tap “Open” to begin using Malwarebytes for Android. You can also open Malwarebytes by tapping on its icon in your phone menu or home screen.
Follow the on-screen prompts to complete the setup process
When Malwarebytes will open, you will see the Malwarebytes Setup Wizard which will guide you through a series of permissions and other setup options. This is the first of two screens that explain the difference between the Premium and Free versions. Swipe this screen to continue. Tap on “Got it” to proceed to the next step. Malwarebytes for Android will now ask for a set of permissions that are required to scan your device and protect it from malware. Tap on “Give permission” to continue. Tap on “Allow” to permit Malwarebytes to access the files on your phone.
Update database and run a scan with Malwarebytes for Android
You will now be prompted to update the Malwarebytes database and run a full system scan.
Click on “Update database” to update the Malwarebytes for Android definitions to the latest version, then click on “Run full scan” to perform a system scan.
Wait for the Malwarebytes scan to complete.
Malwarebytes will now start scanning your phone for adware and other malicious apps. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Remove Selected”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes for Android has detected. To remove the malicious apps that Malwarebytes has found, tap on the “Remove Selected” button.
Restart your phone.
Malwarebytes for Android will now remove all the malicious apps that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your device.
Your phone should now be free of adware, browser hijackers, and other malware.
If your current antivirus allowed a malicious app on your phone, you may want to consider purchasing the full-featured version of Malwarebytes to protect against these types of threats in the future. If you are still having problems with your phone after completing these instructions, then please follow one of the steps:
Restore your phone to factory settings by going to Settings > General management > Reset > Factory data reset.
Frequently Asked Questions About the “I Want to Inform You About a Very Bad Situation for You” Sextortion Scam Email
Concerned you may have received one of these fraudulent extortion attempt emails? Find answers to the most common questions surrounding this scam below.
What is the “I Want to Inform You About a Very Bad Situation for You” email scam?
This is a widespread scam email that accuses recipients of visiting illicit websites and claims the sender has compromising videos of this activity. The email threatens to send the supposed videos to all the recipient’s contacts unless a ransom is paid in Bitcoin within 48 hours. It is a form of sextortion – attempting to extort money by claiming to have embarrassing or illegally obtained materials.
How does this email scam work?
Criminals obtain leaked email addresses and passwords from previous data breaches.
They mass email threats to recipients, including one of the associated passwords.
The email demands Bitcoin payment within 48 hours or the sender will release fabricated inappropriate videos of the recipient.
Victims pay out of fear, but receive no videos in return. The scammers disappear with the money.
What details are in the scam email?
The intimidating email greets recipients as “pervert” and claims the sender utilized malware to access devices and spy through webcams. It describes supposed illicit online activities in graphic detail and says videos will be sent to all contacts. Bitcoin payment information is provided.
Is it really possible my devices were hacked?
No, this is an empty threat designed to scare recipients. The passwords used were likely stolen in unrelated third-party data breaches, not from hacking your personal devices. No real malware or videos exist.
I paid the ransom already – what do I do?
First, don’t panic. Contact your bank and cybercrime authorities immediately. Monitor accounts closely for further unauthorized activity. Unfortunately, the likelihood of recovering lost funds is very low. Do not correspond further with the scammers.
What should I do if I receive this blackmail email?
Do not respond to the email or pay the ransom. Report the scam attempt and change any passwords mentioned in the message. Perform malware scans as a precaution. Seek help if you are experiencing significant distress. The threats are fabricated to manipulate you.
Can the scammers actually expose videos of me if I don’t pay?
No, the scammers do not have any real videos. The graphic descriptions are completely invented. Their threats are a bluff intended to scare recipients into paying. Even if you don’t pay, they cannot follow through.
How can I identify this as a scam email?
Be wary of any message demanding urgent payment to avoid alleged damaging information being released. Look for grammatical errors, threats that don’t make sense, and pressure to keep the situation secret. Legitimate demands would not come initial contact via email in this manner.
How can I protect myself from this scam?
Use unique passwords on all accounts and enable two-factor authentication where possible. Be vigilant about links and attachments in emails. Never send money based solely on threats made through email. Seek help if you feel you are being maliciously targeted online.
Why is this scam so common?
The anonymous nature of email and prevalence of leaked credentials allow scammers to cast a wide net impersonally with minimal effort. Even a low response rate can yield profitable results at scale. Raising awareness is key to protecting individuals and stemming these scams.
Stay alert, but do not let fear or embarrassment manipulate you into irrational decisions. Talk to someone you trust if you receive this scam email and ensure you do not correspond with the sender. Your information and money are both at risk if you engage.
So, I shouldn’t pay the ransom?
You should not pay the ransom. If you pay the ransom, you’re not only losing money but you’re encouraging the scammers to continue phishing other people. If you do pay, then the scammers may also use that as a pressure point to continue to blackmail you, knowing that you’re susceptible.
Should I respond to the email?
Absolutely not. With this type of scam, the perpetrator relies on the likelihood that a small number of people will respond out of a batch of potentially millions. Fundamentally this isn’t that much different from the old Nigerian prince scam, just with a different hook. By default they expect most people will not even open the email, let alone read it. But once they get a response—and a conversation is initiated—they will likely move into a more advanced stage of the scam. It’s better to not respond at all.
The Bottom Line
The “I Want to Inform You About a Very Bad Situation for You” email scam preys on recipients’ fears and vulnerabilities. While the threats seem ominous, the reality is scammers are conducting a numbers game, sending millions of fraudulent emails in hopes of netting some ransom payments.
If you receive this email, stay calm and avoid acting rashly out of fear or urgency. Do not communicate with the sender or pay the ransom. The scammers cannot actually follow through on their threats beyond the initial deceptive email.
Take smart steps like changing passwords, scanning for malware, and reporting the scam. And know that you are not alone – this scam has targeted people across the world looking for easy money through deception. Awareness, education, and collective reporting are our best defenses to help put an end to these scams.
Key Takeaways:
The “I Want to Inform You About a Very Bad Situation for You” email scam uses threats and fear to extort money from recipients.
The emails claim to have compromising videos of you, obtained by hacking your devices – but this is a complete fabrication.
Do NOT pay the ransom or engage with the scammers. Report the email instead.
Change any passwords mentioned in the email and enable two-factor authentication where possible.
Seek support if you are struggling with fear, anxiety or embarrassment from being targeted. You are not alone.
How to Stay Safe Online
Here are 10 basic security tips to help you avoid malware and protect your device:
Use a good antivirus and keep it up-to-date.
It's essential to use a good quality antivirus and keep it up-to-date to stay ahead of the latest cyber threats. We are huge fans of Malwarebytes Premium and use it on all of our devices, including Windows and Mac computers as well as our mobile devices. Malwarebytes sits beside your traditional antivirus, filling in any gaps in its defenses, and providing extra protection against sneakier security threats.
Keep software and operating systems up-to-date.
Keep your operating system and apps up to date. Whenever an update is released for your device, download and install it right away. These updates often include security fixes, vulnerability patches, and other necessary maintenance.
Be careful when installing programs and apps.
Pay close attention to installation screens and license agreements when installing software. Custom or advanced installation options will often disclose any third-party software that is also being installed. Take great care in every stage of the process and make sure you know what it is you're agreeing to before you click "Next."
Install an ad blocker.
Use a browser-based content blocker, like AdGuard. Content blockers help stop malicious ads, Trojans, phishing, and other undesirable content that an antivirus product alone may not stop.
Be careful what you download.
A top goal of cybercriminals is to trick you into downloading malware—programs or apps that carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather.
Be alert for people trying to trick you.
Whether it's your email, phone, messenger, or other applications, always be alert and on guard for someone trying to trick you into clicking on links or replying to messages. Remember that it's easy to spoof phone numbers, so a familiar name or number doesn't make messages more trustworthy.
Back up your data.
Back up your data frequently and check that your backup data can be restored. You can do this manually on an external HDD/USB stick, or automatically using backup software. This is also the best way to counter ransomware. Never connect the backup drive to a computer if you suspect that the computer is infected with malware.
Choose strong passwords.
Use strong and unique passwords for each of your accounts. Avoid using personal information or easily guessable words in your passwords. Enable two-factor authentication (2FA) on your accounts whenever possible.
Be careful where you click.
Be cautious when clicking on links or downloading attachments from unknown sources. These could potentially contain malware or phishing scams.
Don't use pirated software.
Avoid using Peer-to-Peer (P2P) file-sharing programs, keygens, cracks, and other pirated software that can often compromise your data, privacy, or both.
To avoid potential dangers on the internet, it's important to follow these 10 basic safety rules. By doing so, you can protect yourself from many of the unpleasant surprises that can arise when using the web.
Meet Thomas Orsolya
Thomas is an expert at uncovering scams and providing in-depth reporting on cyber threats and online fraud. As an editor, he is dedicated to keeping readers informed on the latest developments in cybersecurity and tech.
