Bitcoin Porn Blackmail Scam Reports Surge

Reports of a spam email threatening to reveal sensitive adult content to friends and family unless paid in bitcoin have been surging over the last few days. This bitcoin address was reported twice today alone! 1LEBKnvLEZk2cUfyJ1vU5FpueakWyh4m28

For the last 6 months BitcoinWhosWho has received scam reports relating to some version of an email claiming to have used the recipient’s computer to create a video of recipient visiting adult websites and threatens to send it to recipients’ contacts if not paid $200-$400 in BTC within 20-24 hours. It comes in many languages and has made consistent appearances in our scam reports since October 2017.

These are some examples of the reports that came in today:

Reported Name of Scam: “Disgrace”.

Good morning.
Do not mind on my English, I am foreign.

I installed our malicious program onto your OS.

Now I thiefted all personal data from your system. Withal I obtained a little bit more compromising.
The most interesting evidence which I thieftend- its a videotape with your self-abusing.
I adjusted malware on a porn web page and then you loaded it. As soon as you chose the video and pressed play, my malicious software at once loaded on your OS.
After setup, your camera shoot the video with you self-abusing, furthermore it captured exactly the video you masturbated on. In next week my malicious software found all your social media and email contacts.

If you need to erase the records- transfer me 205 united state dollar in BTC(cryptocurrency).
It is my Btc address – 18T5UZCZ57y5ESUXcGUkJyMxys5ZfiPaoK
You have 24 h. after reading. As soon as I get transaction I will erase the evidence forever. Other way I will forward the video to all your friends.

Reported Name of Scam: “Now we are really close”.

Hello!
Dont mind on my illiteracy, I am from China.

I loaded mine virus onto your device.

Then I thiefted all personal data from your OS. Moreover I had slightly more evidence.
The most amusing evidence which I stole- its a record with your wanking.
I adjusted malware on a porn web page and after you loaded it. The moment you chose the video and tapped on a play button, my malware immediately loaded on your system.
After downloading, your web camera shoot the record with you wanking, in addition software saved the porn video you masturbated on. In next week my deleterious soft captured all your social and work contacts.
If you want to destroy the records- pay me 329 united state dollar in Bitcoins.
Its my Btc address – 1AG4eQxJ2EYNGGgpGrSdhzN8Ajw8D2qoGV
You have 24 hours to go since now. When I receive transaction I will erase the evidence evermore. Differently I will forward the tape to all your contacts.

Reported Name of Scam: “Your reputation is at stake”.

Good day…
Do not consider on my illiteracy, Im from Japan.

I put the malware on your device.

Since that moment I stole all confidential background from your device. Furthermore I received a little bit more then just data.
The most interesting evidence which I thieftend- its a record with your self-abusing.
I adjusted malware on a porn web site and then you installed it. When you decided with the video and clicked on a play, my virus instantly downloaded on your Operating System.
After adjusting, your front-camera made the video with you wanking, furthermore I captured exactly the porn video you chose. In next week my virus found all your social media and email contacts.

If you wish to delete the videotape- send me 300 euro in BTC(cryptocurrency).
Here is my Bitcoin wallet address – 17zZN65rYffp3SpDsmMXA34zhU1i7c3NJA
You have 22 h. since now. As soon as I see transfer I will destroy the evidence evermore. Other way I will send the video to all your contacts.

These are the bitcoin addresses reported to be associated with this blackmail scam genre.

Bitcoin Address Current Balance Total Received # Tx Last Transaction
1GxG5dfnAGoHwxyahWkRq29ef7BwdEEgcr 0.00034581 19.92536951 316 2017-12-05 8:06:15
1ucJRLgBSAqcyC4bZoUJx3CdTupFAGQZf 0 0.57713932 27 2017-12-01 5:16:31
17VEVEzRNYgmFeqiPwDH8mmEUisRixNqG9 0 0.229071 6 2017-10-13 2:33:15
17R3V1kPvgFFijb3qGkerz1BFBzDir14gc 0 0.19785538 10 2018-01-26 13:54:14
16FqwvZdty3H3B5hjHK268YvDoDFaUxBhY 0 0.16248998 4 2017-09-15 22:14:30
1FoR6263co7SA9BAA3qrrH4sT7qSFnMMBG 0 0.15963634 3 2017-08-23 1:42:12
13DMmVeV6ZV5fWj4jDEKr3CfPRwVaHM9uj 0 0.14512131 5 2017-08-31 16:01:51
14r4WEjfCYFSqX1DkQgV9gDqjMCuUT6Pzb 0 0.14135441 4 2017-08-29 2:38:02
1AE2cBJDn4cuLCR6RPESpqdaDXdZwhgUya 0 0.1259728 6 2017-09-20 4:29:41
14AXbqCfLBh6MQzbA6VB7aM49Rsq8GigT6 0 0.121791 11 2017-12-20 12:47:46
1FozPjydsGCrRRnutPhhAuoh2XFonLvSVt 0 0.08477559 4 2017-11-29 7:06:02
1KKCC9qWKAfzMHckA6tX42f7NB1udL91jf 0 0.07814259 6 2018-01-28 15:58:52
193rUViP2jKkqn7ZD2SxfrdD4uf6toZMid 0 0.07618156 5 2017-10-12 6:46:08
1Gn1gaw3pn1CuS81t9ff77LhDjW7ie8eHZ 0 0.07104 3 2017-08-31 16:01:51
1E4Bvzhj82u8M22y7sGJskd62ZLhtNvj63 0 0.06991 2 2017-10-05 5:30:16
1NW3zSGDXbvcZgfTxRdkaC4PMmBCfaMmX3 0 0.068 2 2017-09-11 20:22:29
146VbDSrJqNuVDPwTMH86Zv4Y7Yft54GRc 0 0.06666467 2 2017-09-06 5:39:02
1DyphQnmq3rPDvcvkhoX5cSQU8cGURNYQi 0 0.06656466 2 2017-09-03 0:28:26
17iXuYKgHv4weVmU3Qm6ry1hz1QmYfZhrJ 0 0.06606 2 2017-09-08 6:39:27
1EQ1SWvxFHfCq3ENjrCUN1KKwdK8XnrgkR 0 0.06527702 4 2017-12-22 6:40:18
1ALLCkbjXfnKEFLSxVisVMbrAYZWocfVk2 0 0.06102245 2 2017-09-05 1:31:48
1BbW3RMzNjxHAtrWf8QgjWqsKpHACfQuEJ 0 0.06053585 2 2017-10-09 23:54:00
1FqHTugquxNZ8cHdm9LqPYvSrzuaatkRXs 0 0.05806785 5 2018-01-11 5:29:09
1LpaCV4Peq2px2JbFqESpMaeei9fuCnQ5i 0 0.05752876 3 2017-08-31 16:01:51
1FZHqtz9i7yjXPFJmff6uqZt1n1QedPTP 0 0.0545 2 2017-10-19 19:46:27
19KQpdXBtjAuzP6D8Tn21jdZ82PVkWk8XK 0 0.04880156 2 2017-09-07 19:43:17
12AKEtBu5jk1Jid3dQtMKk7q89JomhKwnC 0 0.046 2 2018-03-03 13:59:42
1AaM7MgGWP9FMSB4QDJdQtbr82cvuad3qs 0.0426 0.0426 1 2018-03-09 11:44:07
17HBG3fuchS7Kwsb5hb62nPi9r7J6m2coG 0 0.0312704 2 2018-01-29 4:35:17
1GiDx6PhykU6j9qV8Qb9h9D2BH28cDT3X 0 0.03111635 2 2018-01-25 4:31:44
1AsdJnnpZFBUxYuxs4tkwzeUPTENyRQwk6 0 0.02492 2 2018-02-04 6:36:57
1KowtJ26v9MpS9xHwM5sSyD4Gqzyqyeqqo 0 0.01977513 2 2017-12-20 12:47:46
19gpFuShH1Js7B7vJ9RziikhUBdKyWtNe6 0.000327 0.000327 1 2018-03-09 6:59:04
15oWsEQ8N2zN72X3UmenwuP3CSdwqnf8bp 0 0.0001 2 2018-03-06 7:23:41
1AG4eQxJ2EYNGGgpGrSdhzN8Ajw8D2qoGV 0.00010795 0.00010795 1 11 Mar 18
1XvdqxzGM8KYFedPeBTu3FFZ5JRHi54E4 0 0 0  
1sdVjarp83LgB8ogxPg3ZavURd8tE36Mo 0 0 0  
1qxnya7yCFj3ypAYvFFD3UaKK7PaXHvAV 0 0 0  
1PqY1nbxTYhpwR9J5rPPuToR2PKmWW8tZb 0 0 0  
1PEhA5Fdi1mzL46zvZZSXAenSYDrRtNoCb 0 0 0  
1P2Udy325s2WfHCXYhftJj1SRPBRopbc29 0 0 0  
1NK6NyMHnAuiYh3TMr8ADtca5wTHzora3u 0 0 0  
1MvqFK9TVbZyF18UbyKiXgYQ4wHN5ChVBw 0 0 0  
1MCzCmYdKJZ9Qt5F3Z48dQpuCvLYf1Uaik 0 0 0  
1M27sreqSwmxCgy6jbuEKPfv9gLjRVfchW 0 0 0  
1KjrdMiUUzXk46JZfmubKSKT9eUFcUv2Sd 0 0 0  
1KHjvZJBrQyffWKEqjFAcCXcfLKV3fRxxM 0 0 0  
1JSv9Mo2mpZRUffiJm4Rzqtc49PRvNqFvU 0 0 0  
1HAKmdQNDGAuCEW3QbW7ijbo2eKMUpNH7c 0 0 0  
1GxJFBeok1yinq69kcBRszDpcYcGyJfE3L 0 0 0  
1E8Dakdr2Ttnogu6xDTKqdGU8azkpQ13my 0 0 0  
1Dp9xhDrHKXRDQQMQG1RM1hKwgbgff39cd 0 0 0  
1DLLpvM1vEGSNhKzHAEb3MQPcVGEdNrZmS 0 0 0  
1DDwNwee8rzg9yzpeAv4adFZQFs1HskYPM 0 0 0  
1D6SMJy8WPVYr6f6CQ9oDeUfbeGbv82a2d 0 0 0  
1CFUZ1eSJQsropXLEgfAuv1Z6onbmNsrCf 0 0 0  
1CEiHF2J5zH6KinVowTvpeiovUpeFpitrU 0 0 0  
1BjVdpAxMUgq3NVWW3TLZvvgpWFXhVJsjA 0 0 0  
1AjAc9Q5uGe2jYtEzzAcRQUDTnpwQWMo9z 0 0 0  
1A9iDkhePxfvNWaCtjT6SqHebcadEyKvY 0 0 0  
19LxnddHVWziji8kihNNp2A3iuC1mDSxUm 0 0 0  
19erHb7FxesMTjSm3QB9bKAscpPw46fcSe 0 0 0  
18pM92Rwa1kc2hr1cinePt4Vvxu5FQkiqq 0 0 0  
18c84hdnjHvV3jbeEqMz4ERB1DC6c3fWV4 0 0 0  
16xaTT2AaPmaiaAYn9wwbjVLwmzozPckJw 0 0 0  
16UYZnQUTPZ8ek2ZbuU6wEZX47M6gbnfMm 0 0 0  
16rbS4dG2AdhxY7dBhyiFd6iVp3Eqs3PNt 0 0 0  
16oooMVEjvdbmMRXJip8PPBewKh2PPkxmm 0 0 0  
16NqZUQSH8VbJSzn8Hj1W7dU3geSQ7AehM 0 0 0  
16iSLTJM4de8jKDu5fgBvwZSyykKFBpFhS 0 0 0  
16hB7JVjDncoSy8gabWkcR21P2ErV5SYsj 0 0 0  
167RSmMyAP9iC8pvfEgcLSmNB9kWzXDMVM 0 0 0  
15yrw6fSvPq8AwGjEz7Cy5W8PfuXC1rcnk 0 0 0  
14XvLp1B7vac8QJKauiQwuLi9eVrXXLe2H 0 0 0  
147umHo2E8pFnZPvSPc3uFpsYu1dy6xBud 0 0 0  
13xjRFEbQNn8Ut6Jkxv9w5dDcD23ymZhuw 0 0 0  
13ToMt3AQTqg4NLT2jcXAdEjvfJ1r953p2 0 0 0  
13CnGVAfY6W5SArvEz8Yu6ngFMyzngLJSr 0 0 0

So far the total received balance of all the bitcoin addresses reported to BitcoinWhosWho is 23.03498249 BTC.

Previous post on this topic: http://bitcoinwhoswho.com/blog/2017/10/09/blackmail-scam-run-on-russian-wallet-matbea/

***
Help police and deter future frauds by always reporting scam addresses to BitcoinWhosWho.com. Just lookup the address and select “Report Scam”.

You may also report to the FBI https://complaint.ic3.gov/default.aspx

All scam reports are accessible by keyword search on our website or from our “Blacklisted Bitcoin Address” API.

The safest place to buy bitcoins in the United States is Coinbase.com

11 thoughts on “Bitcoin Porn Blackmail Scam Reports Surge”

  1. I received this email message ( in Dutch language)
    Demanding me to pay 500 EURO within 5days to BTC address 19UCxmM7KzVTV1x6rmcTqFDCSujNk6XYAK

    –=== ORIGINAL Dutch message ==–
    Subject: Voorkom een grote schande
    From: “ONBEKEND”
    Date: 14-03-18 01:55
    To:

    Goedenavond,

    Wij willen niemand veroordelen en we denken ook niet dat het verkeerd is om jezelf
    van tijd tot tijd te bevredigen. Maar als je naasten hier getuige van worden is dit
    natuurlijk een grote schande.

    We houden je al een tijdje in de gaten doordat wij via een Trojan Virus uw apparaat
    hebben weten te besmetten. Dit is gebeurd via een een advertentie op een porno website.
    Een Trojan Virus geeft volledige toegang en controle over een computer, of elk ander apparaat.
    Hierdoor hebben wij alles op uw scherm kunnen meekijken zonder dat u hiervan op de hoogte bent geweest.
    Ook hebben wij controle over uw camera en microfoon, en kunnen deze in en uitschakelen.
    Alle voor ons interessante informatie hebben wij zorgvuldig opgeslagen.
    U moet hierbij denken aan o.a. uw contactpersonen, social media, etc.

    Er is van u een video gemaakt waarop te zien is hoe u zichzelf bevredigt op de linker helft
    van het scherm en op de rechter helft zie je de video waar u naar keek.
    Met een druk op de knop kan ik deze video doorsturen naar al uw contactpersonen, en social media.

    Als u dit wilt voorkomen, maakt u dan een bedrag van 500 euro over naar het volgende Bitcoin adres.

    Stap 1: Ga naar http://www.coinbase.com en maak een account aan.
    Stap 2: Bevestig je account d.m.v. je paspoort of ID.
    Stap 3: Stort het geld op je coinbase bitcoin account via je creditcard of rekening.
    Stap 4: Verzend de bitcoins naar onderstaand Bitcoin adres.

    Bitcoin adres:
    19UCxmM7KzVTV1x6rmcTqFDCSujNk6XYAK

    Zodra de betaling is ontvangen wordt uw video en informatie verwijderd.
    We geven u 5 dagen de tijd om de betaling in orde te maken.
    Doet u dit niet, dan zijn de gevolgen voor u!
    U weet dan wat er gebeurd.
    Aangifte doen heeft geen zin, deze e-mail is op geen enkele manier te traceren en via een
    externe provider in het buiteland verstuurd. Ook betreft het een gehackt e-mail.
    Wij maken geen fouten.
    Als wij erachter komen dat u toch aangifte heeft gedaan, of dit bericht met iemand
    anders heeft gedeeld zal de video direct verspreid worden. Ook is het voor ons mogelijk
    te monitoren wanneer u deze e-mail leest, vanaf dat moment begint de tijd te lopen.

    De groeten!
    –=== ORIGINAL Dutch message ==–

  2. Here are some other BTC wallets that I received related to this scam. Im sure this scam/spam will continue as who ever is doing this must have access to a new IP each email message that comes in.

    18T5UZCZ57y5ESUXcGUkJyMxys5ZfiPaoK (11-03-18)
    13e7WUrigtACx45n4s3MUeLYLi3q5cN86r (13-03-18)
    1Ntfjk211noGraGACcnDZJZa8ouDE4tqi9 (16-03-18)

  3. Got 2 scam mails with a gap of 29 sec.

    Good day!

    Dont mind on my illiteracy, I am from Romania.We uploaded the virus onto your device.Since that moment I stole all personal background from your OS. Furthermore I had some more compromising.The most entertaining compromising that I thieftend- its a record with your masturbation.I set malicious software on a porn web page and after you installed it. As soon as you selected the video and clicked on a play button, my malicious software instantly adjusted on your system.

    After downloading, your camera shoot the record with you self-abusing, moreover malware saved the porn video you chose. In next few days my virus collected all your social and work contacts.

    If you desire to eliminate the videotape- transfer me 960 usd in BTC(cryptocurrency).
    It is my Bitcoin number – 1DHUFtUuSdWC3ZwjPTZFsDGwDu9w5wDTgc

    You have 30 h. after reading. If I get transfer I will destroy the videotape evermore. Other way I will send the tape to all your colleagues and friends.

    Good day.

    Do not regard on my illiteracy, Im from Japan.We installed the malicious program onto your system.After that I stole all individual information from your device. In addition I obtained some more compromising.The most important compromising which I thieftend- its a record with your masturbation.I installed malware on a porn web site and then you installed it. The moment you chose the video and clicked on a play button, my malware immediately adjusted on your device.

    After setup, your front-camera made the video with you masturbating, moreover software saved the porn video you chose. In next week my virus collected all your social media and email contacts.

    If you need to destroy all the compromising evidence- send me 300 usd in Bitcoins.
    Here is my Bitcoin number – 1M581U2wAccM7drAmQGcQj5PmeGurVDuc

    You have 30 h. to go from this moment. As soon as I get transaction I will erase the evidence in perpetuity. Otherwise I will send the video to all your friends.

  4. Today I have received the following message:
    ————————————————————
    Good morning.

    Do not mind on my illiteracy, Im foreign.I uploaded mine malware onto your OS.At present I pilfered all confidential information from your system. Furthermore I had a little bit more compromising.The most amusing evidence which I have- its a video with your masturbation.I set malicious software on a porn web page and then you installed it. The moment you picked the video and tapped on a play button, my malicious software at once set up on your OS.

    After downloading, your front-camera shoot the video with you self-abusing, moreover I saved exactly the video you masturbated on. In next few days my deleterious soft captured all your social media and work contacts.

    If you desire to destroy all the evidence- transfer me 290 united state dollar in BTC(cryptocurrency).
    It is my Btc address – 1DHUFtUuSdWC3ZwjPTZFsDGwDu9w5wDTgc

    You have 22 hours after reading. When I see transfer I will erase the evidence evermore. Otherwise I will send the video to all your colleagues and friends.

  5. Huh? They have earned 23 BTC ~ 170000 EUR on this?? And the list of wallets is not even complete, I have received yet another one.

    Dont consider on my illiteracy, I am from China.I put our malware onto your device.Now I pilfered all individual background from your device. In addition I got a little bit more compromising evidence.The
    most important evidence which I got- its a videotape with your wanking.I adjusted deleterious soft on a porn page and after you downloaded it. When you decided with the video and pressed play, my malware
    instantly adjusted on your system.

    After loading, your front-camera shoot the videotape with you masturbating, additionally I captured precisely the video you masturbated on. In next few days my virus grabbed all your social media and email
    contacts.

    If you desire to erase the videotape- pay me 730 euro in BTC(cryptocurrency).
    I provide you my Bitcoin wallet address – 1GFgLeB9uvnLW5h2wDddm6i7yNtUBZPCBw

    You have 22 h. from this moment. When I see transaction I will erase the video forever. Other way I will send the tape to all your contacts.

  6. Here’s the email!
    “Cody Haines You should be more careful ID Y3ub2
    M

    meredith.lee1955@bol.com.br
    Thu 5/3/2018 7:48 PM
    Junk Email
    To:
    killercerx@live.com;

    Cody Haines

    Your notebook computer is affected by the dangerous file .

    What is it all about??

    I deposited the virus on a soft pornography web site, you clicked on the record and urgently set the malicious program to your notebook computer .

    The hostile program make your front-facing camera making video and I receive a clip with you choke a chicken.

    During the next 4 hours the hostile program captured all your contact information.

    At this moment, I own all your contact files and video with you touching yourself, now if you want me to eliminate all the contact information make payment 379 $USD in BTC cryptocurrency.

    In other circumstances I wanna send the video to all your contacts .

    I provide you mine Bitcoin wallet – 1AqQoAMDJGqj4KMxL3bkYFWSxpHXePfx5o You possess 25 hours after opening it. In a case if I obtain this sum of money I would annul the video evermore.

    I beg pardon for my mistakes- I’m fr om China .
    P.S. this mail address, I have hijacked it.
    Do not reply to this letter. It’s temporary address!”

    [The email address is meredith.lee1955@bol.com.br]

  7. Do not be a dumb

    Hello.

    Dont regard on my illiteracy, I am foreign.We uploaded mine malware onto your device.At present I stole all personal information from your device. Additionally I got a little bit more then just data.The most important evidence that I thieftend- its a record with your masturbation.I put virus on a porn page and after you downloaded it. As soon as you decided with the video and pressed play button, my software instantly adjusted on your OS.

    After loading, your front-camera shoot the videotape with you self-abusing, in addition malware captured exactly the porn video you masturbated on. In next few days my malware grabbed all your social media and email contacts.

    If you desire to destroy all the evidence- pay me 390 united state dollar in BTC(cryptocurrency).
    I provide you my Btc number – 1KT2aCgVRJDj3WhfZQktWwK13sST9RYgVX

    You have 22 hours from this moment. If I get transfer I will destroy the videotape in perpetuity. Other way I will forward the video to all your contacts.

  8. I just received an email with this bitcoin address: 1AomtjWq7GNdwinEEoaUDmKHADMmRnYpf

    They request 400 bitcoin.

  9. 1G5f2Qdg3CHDtbFXBPR2QcyZ4Hf7tBnjyy

    This BTC number is attached to BITCOIN Phishing Porn Scam.

    Please add this one to the list of Bitcoin scammers

  10. Another example:
    Sender: order@premiumdrupalthemes.com

    “Good day!

    Dont mind on my grammar, Im from Japan.We put our malicious program onto your device.At present I thiefted all confidential data from your system. Moreover I received a little bit more compromising evidence.The most important compromising which I thieftend- its a videotape with your wanking.I installed virus on a porn web page and after you loaded it. The moment you chose the video and clicked on a play button, my deleterious soft at once adjusted on your system.

    After loading, your camera made the videotape with you wanking, moreover it saved precisely the porn video you chose. In next week my deleterious soft grabbed all your social media and work contacts.

    If you wish to destroy the videotape- pay me 740 euro in Bitcoins.
    It is my Bitcoin wallet address – 1MYzG4fPnDLzYMH9Fhk7EctxmApu6SXe1H

    You have 30 h. to go since now. When I see transaction I will eliminate the compromising evermore. Other way I will forward the video to all your contacts.”

Leave a Reply

Your email address will not be published. Required fields are marked *