Is an email with my home address threatening to expose me a scam?
Yes. This is a sextortion or extortion scam. The threat is a bluff designed to create panic.
Last reviewed: 1 August 2026
Explanation
Doxxing-style extortion emails include the recipient's real home address — sourced from data breaches or public records — to prove the sender 'knows everything about you'. They claim to have compromising footage, browsing history, or personal secrets and demand payment in cryptocurrency within 24 to 48 hours, or they will send the material to your employer, family, or neighbours. In the vast majority of cases no compromising material exists. The address and sometimes a real password are used purely to make the threat seem credible. Do not pay. Payment invites further extortion and confirms your details are active.
These emails are sent in vast automated batches, personalised only by mail-merging breach data — your address, an old password, sometimes a phone number. The occasional inclusion of a street-view photo of your home is the same trick performed with mapping tools. Nothing in the message demonstrates access to your devices; if the sender truly had footage, they would show it.
The healthy response is administrative, not emotional. Update any password the email quoted, and anywhere it was reused, enable two-factor authentication, report the email, and delete it. Payment is the only real danger in the situation — it marks you as responsive, funds the operation, and invites indefinite follow-up demands.
Common red flags
- Email contains your real home address or an old password
- Demands cryptocurrency payment within a tight deadline
- Claims to have installed spyware or accessed your webcam
- Threatens to share footage with your contact list
- Sender uses an anonymous or auto-generated email address
What to do now
- Do not pay — it will not end the harassment
- Change any password referenced in the email immediately
- Report the email to your national fraud reporting service
- Do not reply, which confirms your address is active
Frequently asked questions
Should I be worried that they have my address?
It is alarming, but most home addresses are available through public records or past data breaches. Having your address does not mean they have compromising content about you.
The email included a password I really used — doesn't that prove they hacked me?
It proves the password appeared in a historical data breach, nothing more. Millions of credential pairs circulate from old leaks. Change that password wherever it survives and treat the rest of the message as theatre.