Suspicious Login Issues

How to Handle a Sextortion Scam Email from Your Own Outlook Account

Guest Writer Sep 28, 2026 869 views

Question details

The user received a threatening extortion email that appears to have been sent from their own Outlook address, demanding cryptocurrency under the threat of releasing private videos.

How to Handle a Sextortion Scam Email from Your Own Outlook Account

Product: Microsoft Outlook
Device & OS: not provided
Scenario: Dealing with a suspicious and threatening email that demands cryptocurrency payments.
Observed behavior: The extortion email falsely claims that Pegasus spyware has recorded private videos and uses email spoofing to make the sender address match the user's own Outlook address.

Before you start

Do not panic, do not reply to the sender, never click on any links inside the message, and do not pay the cryptocurrency demand. These emails use spoofing techniques to falsely appear as if your account was compromised.

Solution 1Recommended

Secure Your Microsoft Account and Remove the Threat

Follow these critical steps to ensure your Microsoft account is safe from unauthorized access and properly report the phishing attempt.

Even though the email is likely spoofed, it is highly recommended to secure your Microsoft account to rule out any real breaches. Taking these steps will lock out any potential intruders and help Microsoft's spam filters catch similar threats in the future.

Update your account password

Go to the Microsoft account security page, sign in, and change your password to a strong, unique combination immediately.

Enable Multifactor Authentication

In your Microsoft account security settings, turn on Two-Step Verification to add an extra layer of security against unauthorized logins.

Review recent sign-in activity

Check the 'Recent activity' page within your Microsoft account dashboard to verify if there are any unfamiliar or unauthorized logins from unknown locations.

Inspect mail-forwarding rules

Open your Outlook settings, navigate to the 'Mail' section, and check for any unexpected forwarding rules that hackers might have set up to monitor your inbox.

Report and delete the email

Select the threatening email in Outlook, click on the 'Report' button to mark it as 'Phishing', and then delete the message permanently.

Secure Your Microsoft Account and Remove the Threat

Security Tip: Using a password manager can help you generate and securely store complex passwords for your email and other important online accounts.

Solution 2

Run a Security Scan and Check for Data Breaches

Verify that your devices are free of actual malware and check if your email address was exposed in a known data breach.

Free Microsoft Office alternative

Try WPS Office for a Secure and Lightweight Document Experience

If you are concerned about your digital security and want a fast, reliable, and secure alternative to Microsoft Office, WPS Office offers a comprehensive suite for Word, Excel, and PowerPoint files without the heavy subscription fees.

1. Download the installer: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install the software: Run the downloaded installer and follow the on-screen instructions to set up WPS Office on your device safely.
3. Open your files: Double-click any existing Microsoft Office document to instantly open and edit it within the secure WPS Office environment.

Highly compatible with Microsoft Word, Excel, and PowerPoint formats.Lightweight software that runs smoothly and securely on various devices.Free to use with a familiar, user-friendly interface.Built-in PDF tools for secure document editing, signing, and sharing.

microsoft office alternative - wps office

Frequently Asked Questions

Why does the scam email look like it came from my own address?

Scammers use a technique called 'email spoofing' to forge the 'From' address. This tricks your email provider into displaying your own address, making the threat seem more credible and bypassing some spam filters.

Should I pay the cryptocurrency ransom to protect my privacy?

Absolutely not. This is a mass-mailed empty threat. The scammers do not actually have any private videos of you or access to your device. Paying them only marks you as a profitable target for future scams.

What should I do if I clicked a link in the extortion email?

Immediately disconnect your device from the internet, run a full antivirus scan, and change the passwords for your email and other important accounts from a different, known-secure device.

How can I prevent these spoofed emails from reaching my inbox?

Ensure your Outlook junk mail filters are set to 'Strict', avoid publishing your email address on public websites or forums, and regularly update your account security settings.

Microsoft Office Security Issues