The YouPorn Sextortion Email Spam Campaign Explained
Written by: Stelian Pilici
Published on:
The internet is filled with scams and fraudulent schemes trying to prey on unsuspecting victims. One such scam that has been circulating recently is the “YouPorn email scam”.
This article will provide an in-depth examination of this scam, including an overview of how it works, what to do if you receive such an email, and measures you can take to protect yourself.
This Article Contains:
YouPorn Email Scam Overview
YouPorn is one of the largest adult video sharing and viewing platforms on the internet. The website is owned by MindGeek, a global industry leader in online pornography.
Given YouPorn’s massive user base and brand recognition, scammers have been leveraging its name and reputation to craft elaborate extortion schemes and spread malware.
The YouPorn email scam comes in many forms, but the basic premise involves the recipient getting an unsolicited email claiming their personal information and browsing history on YouPorn has been compromised.
The email threatens to share this data with the recipient’s contacts unless a “removal fee” is paid, often demanding the payment in Bitcoin or gift card codes.
Some key things to note about this scam:
The emails are not really from YouPorn or affiliated entities. They are crafted by scammers to appear credible.
The claims of having personal information or browsing history are bogus. The scammers are simply trying to scare recipients into paying.
No contacts will actually be messaged. The threats to share data are empty and meant to create urgency.
Payment does nothing. Even if money is sent, the scammers have no intention of upholding their end of the “deal”. They just take the money and move on to their next target.
The YouPorn email scam can be classified under the broader category of “sextortion scams”.
Sextortion involves scammers threatening to reveal victims’ private, sensitive, or compromising information unless payment is made. In this case, the scammers leverage YouPorn’s reputation to make their threats seem credible.
Here is how the YouPorn email scam usually looks:
Subject: Urgent: Uploaded content notification
YOUPORN
Uploaded content: Feedback required
Greetings!
Our AI-powered tools have detected that you are featured in sexually explicit content that was uploaded to our platform.
At our company, we take the security and privacy of our users very seriously, and we use advanced technology to help detect and prevent the distribution of non-consensual intimate images and videos.
While our tools are powerful, we also rely on human oversight to ensure that our platform remains safe and secure for everyone.
If you have approved the upload of this content, you do not need to take any further action. The video will be published to our library within the next seven days, and you will have an opportunity to review the content after the grace period has passed.
However, if you did not approve the upload of this content, we kindly ask that you follow the instructions below to take immediate action.
Our platform boasts an extensive network of websites and partners, which means that ensuring the security of our content is a top priority.
To achieve this, all uploaded content is digitally fingerprinted using both the MediaWise® service from Vobile® and Safeguard, our own proprietary digital fingerprinting software.
This helps to prevent unauthorized distribution of content on our platform.
For our premium users who upload content, we offer monetary incentives. However, in some cases, uploaded content may be put on hold.
If this happens, we can initiate a quick automated removal process, but we would require an incentive refund to do so.
The basic express removal, blocking, and protection against re-uploading of content on our network of 20 websites costs $199 USD.
As a digital company, we take great pride in our integrity and measures, which is why we offer additional options for protecting against unauthorized content uploads 24/7.
We have all our processes automated, including payment processing, for your convenience.
Our Plan A includes everything in the basic removal option, plus digitally fingerprinting of the content and automated removal and protection against re-uploading to our vast network of partner websites (300+) for one year, all for $699 USD.
If you require the best protection available, we recommend our
Plan B, which includes everything in Plan A plus digital protection by MediaWise® and Safeguard based on facial recognition data for three years. This ensures that any content with your biometrics will be blocked, and it costs $1399 USD.
Our system takes care of your request automatically and swiftly, so there’s no need to contact us.
The payment process is automated through a Bitcoin gateway, and the digital number you receive below is unique to your case and doesn’t require any extra confirmation.
1DzWf1Y9nDKPgmc2em37KRjYePPmWggRce
To transfer the amount corresponding to your chosen option, copy and paste this identifier into your preferred cryptocurrency wallet.
You can review the content uploaded after the seven-day grace period, either by checking our Youporn.com library or by contacting the member who uploaded the content.
We encourage users who feature in content and wish to prevent its upload to our platform to consider proactively digitally fingerprinting it.
Thank you for your attention to this matter.
Some common attributes of the YouPorn email scam include:
Deceptive sender information
The “From” field in the email will typically show something like “YouPorn Support”, “YouPorn Legal”, “YouPorn Security”, etc. This is intended to make the recipient believe the email is from an official YouPorn representative.
Of course, the sender address is completely fake. But a casual glance by an unsuspecting recipient may be enough for them to think the message is legitimate.
Subject lines indicating security issue
Subject lines are crafted to grab attention and create urgency. Some examples include:
“YouPorn Account Blocked”
“Your YouPorn Activity”
“YouPorn Subscription Renewal Failed”
“YouPorn Account Verification Required”
“YouPorn Security Alert”
These subject lines scare recipients into thinking there is an issue with their YouPorn account that needs immediate attention.
Claims of illicit video evidence
The scam emails state that the recipient was identified in an explicit video uploaded on YouPorn without their consent.
Some emails get very descriptive, mentioning the alleged video contains the recipient exposing themselves or engaging in sexual acts. This shocking claim is meant to intimidate and embarrass the recipient.
The emails sometimes claim that advanced “AI tools” or “facial recognition software” were used to identify the recipient in the video. This makes the supposed evidence seem irrefutable.
Of course, these claims are completely fabricated with no truth behind them.
Threats to alert contacts
The scam emails threaten that if payment isn’t received in short order, the video evidence will be shared with the recipient’s contact list.
Some emails specify that the video will be emailed or texted to the recipient’s family members, friends, colleagues, and social media contacts.
This threat of ruining the recipient’s reputation through embarrassment is intended to scare the recipient into immediate action.
Demands for payment
The scam emails instruct the recipient to pay a fee if they want to avoid the release of the explicit video featuring them. The demanded amount ranges from $500 to $2000 in most cases.
Payment is usually required to be made in untraceable forms like Bitcoin, gift cards, or money transfers.
The emails emphasize urgency, giving deadlines of 24-48 hours before the alleged compromising footage gets released. This creates pressure for quick payment.
Auto-payment options
Many of the scam emails tout an “automated payment system” that removes the need to directly engage with the scammers.
They provide Bitcoin wallet IDs or gift card account details that the victim can simply transfer money into. This eliminates obstacles to payment.
Of course, once money is deposited into those accounts, it disappears into the scammers’ pockets with no actual services rendered.
Follow-up extortion attempts
If the initial scam email achieves no payment, the scammers may send follow-up messages after a few weeks or months.
These claim that a new explicit video featuring the recipient has emerged and demand a larger payment to block its release.
The follow-up extortion attempts aim to scare and intimidate recipients who didn’t fall for the first email.
How the Scam Works
Now that we’ve examined the common attributes of the YouPorn email scam, let’s look at how the scam operates from start to finish:
Obtaining contact data
The scammers first need to acquire email addresses and other contact details for their potential victims.
There are multiple ways cybercriminals can gather such data, including:
Data breaches – Email addresses and other personal information from various services often gets leaked through data breaches. Scammers obtain these data dumps and compile huge contact lists.
Malware infections – Malware planted on victim devices can copy contacts information and other data found on the device. This gets relayed back to the scammers.
Social engineering – Scammers may pose as someone trustworthy to trick victims into surrendering their contact details voluntarily.
Dark web – Massive troves of data are illegally bought and sold on dark web marketplaces. Scammers can purchase harvested contact data.
Crafting scam emails
With lists of target contacts available, the scammers get to work creating scam emails.
The sender address, subject line, and content within are carefully crafted for maximum deceptiveness and intimidation based on the scam attributes outlined earlier.
The emails are made to seem as legitimate as possible at a cursory glance.
Mass distribution
Using email spoofing techniques, the scammers send the bogus emails to their contact lists en masse. Thousands of emails can be pumped out rapidly using automation tools.
The mass scattershot approach maximizes the chances of the scam emails reaching those unfamiliar with the scheme who may fall victim.
Facilitating untraceable payment
An integral part of the scam is making payment easy while also keeping it untraceable. Hence options like Bitcoin and gift cards are pushed.
The scam emails provide the necessary wallet IDs and account details for auto-payment. Quick response QR codes are also sometimes included.
Harvesting payments
Once scam emails are sent, it becomes a waiting game to see how many victims get fooled into paying the demanded fees.
Payments made in cryptocurrency or gift cards quickly end up in the possession of the scammers with minimal effort.
Follow-up extortion
For recipients that don’t pay immediately, aggressive follow-up scam emails are sent threatening the release of another supposed explicit video.
These emails intensify the urgency and increase demanded payment amounts. The goal is to coerce victims who didn’t initially fall for the scam.
Maintaining anonymity
Sophisticated methods like VPNs and sender spoofing are leveraged by the scammers to hide their identities and locations.
Untraceable payment methods complete the anonymity loop, making it exceedingly difficult for authorities to track the scammers down.
Repeating the process
Once one scam campaign winds down, the scammers simply repeat the process with new target contact data.
The scam is honed constantly to increase effectiveness, while remaining essentially the same in its core extortion methodology.
This allows scammers to operate the YouPorn email scam indefinitely, scamming countless victims over an extended period of time.
What to Do if You Receive the Email
If you receive an unsolicited email claiming to be from YouPorn and threatening exposure unless you pay a fee, here are some important tips:
Don’t panic
The most important thing is to not let fear and anxiety overwhelm you upon reading such a disturbing email. The claims are fabricated without any truth behind them. Letting the threats manipulate you could lead to costly mistakes.
Don’t pay anything
Regardless of how convincing the email seems, do not pay the demanded fee. The threats are a total bluff, meant to extort money. Paying will likely just lead the scammers to target you again down the line.
Check email headers
View the full email headers using your email client settings. See if there are inconsistencies that expose it as fake, like a shady sender address. Email headers help reveal spoofed messages.
Look for typos
Scam emails often have tell-tale mistakes and typos that legitimate companies would not make. Look for any obvious spelling, grammar or formatting errors.
Call out the scam
Consider responding to the email, clearly stating you recognize it as a scam attempt and will not be paying. This lets the scammers know their tactics failed. Do not click any links or open attachments in the email though.
Report the email
Forward the scam email to YouPorn (abuse@YouPorn.com), as well as to your email provider and cybersecurity authorities. This helps get the fraudulent accounts shut down.
Enable 2FA
Check that two-factor authentication is enabled on your important accounts. 2FA requires secondary confirmation of logins, which adds critical security protection.
Run antivirus scans
Thoroughly scan your devices with updated security software to check for any malware or spyware infections. This detects lingering threats that may have exposed your data.
Reset passwords
As a precaution, reset passwords on your email, financial, and social media accounts. Use unique complex passwords. Enable 2FA wherever possible. This prevents unauthorized logins.
Place fraud alert
Consider placing a fraud alert on your credit report if you suspect details like SSN may have been compromised. This makes it harder for scammers to open new accounts in your name.
Protecting Yourself from Sextortion Scams
Here are some key ways you can avoid falling victim to sextortion scams like the YouPorn email scam in the future:
Be wary of unsolicited messages
Never trust random emails or messages that demand payment while threatening you with embarrassing or damaging information. Legitimate companies don’t operate like this. Delete unsolicited messages.
Avoid oversharing online
Be very selective about the personal information and content you post online, even privately. Scammers exploit oversharing to craft convincing scams tailored to victims’ indiscretions.
Secure devices and accounts
Use strong unique passwords, enable two-factor authentication wherever possible, maintain updated antivirus software, and avoid risky links. This makes it much harder for scammers to access your data.
Learn scam warning signs
Educate yourself on the common attributes of popular scams doing the rounds. This makes identifying and responding to scam attempts much easier. Trust your gut if something seems off.
Ignore follow-up threats
If you receive repeated scam attempts, ignore follow-up threats no matter how intimidating they seem. The scammers are simply trying to scare you into paying. Block them outright.
Don’t communicate further
Refrain from engaging in any back and forth with the scammers. Any response simply confirms you’re a viable target. Report the scam and move on with vigilance.
Monitor accounts closely
Keep a close watch for any unauthorized charges or activity on your financial and payment accounts following scam attempts. Promptly report unauthorized transactions to institutions.
Seek help from authorities
If sextortion scammers persist, or you already paid them, don’t hesitate to enlist the help of law enforcement and cybersecurity experts. They have tools to trace scammers and can advise victims appropriately.
Is Your Device Infected? Check for Malware
If your device is running slowly or acting suspicious, it may be infected with malware. Malwarebytes Anti-Malware Free is a great option for scanning your device and detecting potential malware or viruses. The free version can efficiently check for and remove many common infections.
Malwarebytes can run on Windows, Mac, and Android devices. Depending on which operating system is installed on the device you’re trying to run a Malwarebytes scan, please click on the tab below and follow the displayed steps.
Malwarebytes For WindowsMalwarebytes For MacMalwarebytes For Android
Scan your computer with Malwarebytes for Windows to remove malware
Malwarebytes is one of the most popular and most used anti-malware software for Windows, and for good reasons. It is able to destroy many types of malware that other software tends to miss, without costing you absolutely nothing. When it comes to cleaning up an infected device, Malwarebytes has always been free and we recommend it as an essential tool in the fight against malware.
Download Malwarebytes for Windows.
You can download Malwarebytes by clicking the link below.
When Malwarebytes has finished downloading, double-click on the MBSetup file to install Malwarebytes on your computer. In most cases, downloaded files are saved to the Downloads folder.
You may be presented with a User Account Control pop-up asking if you want to allow Malwarebytes to make changes to your device. If this happens, you should click “Yes” to continue with the Malwarebytes installation.
Follow the on-screen prompts to install Malwarebytes.
When the Malwarebytes installation begins, you will see the Malwarebytes setup wizard which will guide you through the installation process. The Malwarebytes installer will first ask you what type of computer are you installing this program on, click either Personal Computer or Work Computer.
On the next screen, click “Install” to install Malwarebytes on your computer.
When your Malwarebytes installation completes, the program opens the Welcome to Malwarebytes screen.
Click on “Scan”.
Malwarebytes is now installed on your computer, to start a scan click on the “Scan” button. Malwarebytes will automatically update the antivirus database and start scanning your computer for malicious programs.
Wait for the Malwarebytes scan to complete.
Malwarebytes will now scan your computer for browser hijackers and other malicious programs. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Quarantine”.
When the Malwarebytes scan is finished scanning it will show a screen that displays any malware, adware, or potentially unwanted programs that it has detected. To remove the adware and other malicious programs that Malwarebytes has found, click on the “Quarantine” button.
Restart computer.
Malwarebytes will now remove all the malicious files and registry keys that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your computer.
Your computer should now be free of trojans, adware, browser hijackers, and other malware.
If your current antivirus allowed this malicious program on your computer, you may want to consider purchasing Malwarebytes Premium to protect against these types of threats in the future. If you are still having problems with your computer after completing these instructions, then please follow one of the steps:
Scan your computer with Malwarebytes for Mac to remove malware
Malwarebytes for Mac is an on-demand scanner that can destroy many types of malware that other software tends to miss without costing you absolutely anything. When it comes to cleaning up an infected device, Malwarebytes has always been free, and we recommend it as an essential tool in the fight against malware.
Download Malwarebytes for Mac.
You can download Malwarebytes for Mac by clicking the link below.
When Malwarebytes has finished downloading, double-click on the setup file to install Malwarebytes on your computer. In most cases, downloaded files are saved to the Downloads folder.
Follow the on-screen prompts to install Malwarebytes.
When the Malwarebytes installation begins, you will see the Malwarebytes for Mac Installer which will guide you through the installation process. Click “Continue“, then keep following the prompts to continue with the installation process.
When your Malwarebytes installation completes, the program opens to the Welcome to Malwarebytes screen. Click the “Get started” button.
Select “Personal Computer” or “Work Computer”.
The Malwarebytes Welcome screen will first ask you what type of computer are you installing this program, click either Personal Computer or Work Computer.
Click on “Scan”.
To scan your computer with Malwarebytes, click on the “Scan” button. Malwarebytes for Mac will automatically update the antivirus database and start scanning your computer for malware.
Wait for the Malwarebytes scan to complete.
Malwarebytes will scan your computer for adware, browser hijackers, and other malicious programs. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Quarantine”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes has detected. To remove the malware that Malwarebytes has found, click on the “Quarantine” button.
Restart computer.
Malwarebytes will now remove all the malicious files that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your computer.
Your Mac should now be free of adware, browser hijackers, and other malware.
If your current antivirus allowed a malicious program on your computer, you might want to consider purchasing the full-featured version of Malwarebytes Anti-Malware to protect against these types of threats in the future. If you are still experiencing problems while trying to remove a malicious program from your computer, please ask for help in our Mac Malware Removal Help & Support forum.
Scan your phone with Malwarebytes for Android to remove malware
Malwarebytes for Android automatically detects and removes dangerous threats like malware and ransomware so you don’t have to worry about your most-used device being compromised. Aggressive detection of adware and potentially unwanted programs keeps your Android phone or tablet running smooth.
Download Malwarebytes for Android.
You can download Malwarebytes for Android by clicking the link below.
In the Google Play Store, tap “Install” to install Malwarebytes for Android on your device.
When the installation process has finished, tap “Open” to begin using Malwarebytes for Android. You can also open Malwarebytes by tapping on its icon in your phone menu or home screen.
Follow the on-screen prompts to complete the setup process
When Malwarebytes will open, you will see the Malwarebytes Setup Wizard which will guide you through a series of permissions and other setup options. This is the first of two screens that explain the difference between the Premium and Free versions. Swipe this screen to continue. Tap on “Got it” to proceed to the next step. Malwarebytes for Android will now ask for a set of permissions that are required to scan your device and protect it from malware. Tap on “Give permission” to continue. Tap on “Allow” to permit Malwarebytes to access the files on your phone.
Update database and run a scan with Malwarebytes for Android
You will now be prompted to update the Malwarebytes database and run a full system scan.
Click on “Update database” to update the Malwarebytes for Android definitions to the latest version, then click on “Run full scan” to perform a system scan.
Wait for the Malwarebytes scan to complete.
Malwarebytes will now start scanning your phone for adware and other malicious apps. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Remove Selected”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes for Android has detected. To remove the malicious apps that Malwarebytes has found, tap on the “Remove Selected” button.
Restart your phone.
Malwarebytes for Android will now remove all the malicious apps that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your device.
Your phone should now be free of adware, browser hijackers, and other malware.
If your current antivirus allowed a malicious app on your phone, you may want to consider purchasing the full-featured version of Malwarebytes to protect against these types of threats in the future. If you are still having problems with your phone after completing these instructions, then please follow one of the steps:
Restore your phone to factory settings by going to Settings > General management > Reset > Factory data reset.
Frequently Asked Questions About the YouPorn Email Scam
What is the YouPorn email scam?
The YouPorn email scam involves fraudulent emails being sent that claim compromising or embarrassing videos/images of the recipient have been uploaded to YouPorn without consent. The emails threaten to make the supposed material publicly available on YouPorn unless a “removal fee” is paid. In reality, the emails are not from YouPorn and are a scam tactic to extort money.
Are the claims in the email real?
No, the claims of inappropriate content being uploaded are completely fabricated. The emails are not really from YouPorn, and no actual private material exists to be leaked – it is an empty threat meant to scare recipients into paying.
How do the scammers get my email address?
The scammers likely obtained large email lists through various illegal methods like data breaches. The emails are sent en masse to general email addresses, with no specific targeting.
What are some red flags the email is a scam?
Red flags include a mismatch between the “From” address domain and YouPorn’s real domain, grammatical errors, threatening urgent tone, Bitcoin payment requirement, lack of concrete details about the material, and more.
What should I do if I get one of these scam emails?
Do not engage with or reply to the email. Report it as phishing/spam. Check email headers and sender address closely. Avoid clicking any links. Change account passwords as a precaution against a potential breach.
What will happen if I don’t pay the scammers?
Nothing will happen if you don’t pay, since the claims of inappropriate content being uploaded are completely fabricated. No actual private material exists to publish. The threats are empty scare tactics.
Can I get my money back if I already paid?
If you paid by credit card, you may be able to request a chargeback from your bank. Recovering cryptocurrency like Bitcoin is very difficult though. You can report the fraud to authorities to aid investigations.
How can I avoid these scams in the future?
Watch for red flags in unsolicited emails, don’t overshare personal info online, use strong unique passwords, enable two-factor authentication, be wary of links/attachments, use antivirus software, and carefully vet any sites you share private content through.
Who should I report these scam emails to?
Forward the emails to the FTC at spam@uce.gov, YouPorn at abuse@youporn.com, and your email provider as phishing/spam. You can also report to the FBI and IC3 to aid scam investigations.
Conclusion
The YouPorn email scam is a textbook example of modern-day sextortion tactics used to extort money from internet users.
These scams can seem quite convincing and alarming at first glance, but learning to identify the formulaic attributes they contain allows one to recognize the falsehoods.
Resist the urge to pay demands, no matter how embarrassing the supposed compromising material is. The scammers never actually possess anything incriminating.
With vigilance and safe online habits, users can avoid falling into this insidious scam. Be wary of any unsolicited messages containing threats and payment demands. Seeking help and reporting such scams is key to frustrating the efforts of cyber extortionists.
How to Stay Safe Online
Here are 10 basic security tips to help you avoid malware and protect your device:
Use a good antivirus and keep it up-to-date.
It's essential to use a good quality antivirus and keep it up-to-date to stay ahead of the latest cyber threats. We are huge fans of Malwarebytes Premium and use it on all of our devices, including Windows and Mac computers as well as our mobile devices. Malwarebytes sits beside your traditional antivirus, filling in any gaps in its defenses, and providing extra protection against sneakier security threats.
Keep software and operating systems up-to-date.
Keep your operating system and apps up to date. Whenever an update is released for your device, download and install it right away. These updates often include security fixes, vulnerability patches, and other necessary maintenance.
Be careful when installing programs and apps.
Pay close attention to installation screens and license agreements when installing software. Custom or advanced installation options will often disclose any third-party software that is also being installed. Take great care in every stage of the process and make sure you know what it is you're agreeing to before you click "Next."
Install an ad blocker.
Use a browser-based content blocker, like AdGuard. Content blockers help stop malicious ads, Trojans, phishing, and other undesirable content that an antivirus product alone may not stop.
Be careful what you download.
A top goal of cybercriminals is to trick you into downloading malware—programs or apps that carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather.
Be alert for people trying to trick you.
Whether it's your email, phone, messenger, or other applications, always be alert and on guard for someone trying to trick you into clicking on links or replying to messages. Remember that it's easy to spoof phone numbers, so a familiar name or number doesn't make messages more trustworthy.
Back up your data.
Back up your data frequently and check that your backup data can be restored. You can do this manually on an external HDD/USB stick, or automatically using backup software. This is also the best way to counter ransomware. Never connect the backup drive to a computer if you suspect that the computer is infected with malware.
Choose strong passwords.
Use strong and unique passwords for each of your accounts. Avoid using personal information or easily guessable words in your passwords. Enable two-factor authentication (2FA) on your accounts whenever possible.
Be careful where you click.
Be cautious when clicking on links or downloading attachments from unknown sources. These could potentially contain malware or phishing scams.
Don't use pirated software.
Avoid using Peer-to-Peer (P2P) file-sharing programs, keygens, cracks, and other pirated software that can often compromise your data, privacy, or both.
To avoid potential dangers on the internet, it's important to follow these 10 basic safety rules. By doing so, you can protect yourself from many of the unpleasant surprises that can arise when using the web.
Leave a Comment
Meet Stelian Pilici
Stelian leverages over a decade of cybersecurity expertise to lead malware analysis and removal, uncover scams, and educate people. His experience provides insightful analysis and valuable perspective.
MALWAREBYTES FOR WINDOWS DOWNLOAD LINK
