Listen to this Post
The New Face of an Old Scam
Sextortion scams have become a recurring menace in the digital world, often dismissed by cybersecurity professionals as just another layer of junk email. Yet, behind the scenes, these seemingly outdated scams continue to generate real income for cybercriminals. With digital hygiene improving across populations and cybersecurity training becoming more common, it’s easy to assume this scam would eventually fade into obscurity. However, recent findings reveal that not only is sextortion still active, but it’s also effective enough to keep the scammers motivated. This report dives deep into the anatomy of modern sextortion campaigns and the surprising evidence that they remain financially viable even in 2025.
Sextortion Still Cashes In: Here’s the Reality
Despite growing public awareness, sextortion scams are far from extinct. A recent analysis of 21 sextortion emails over the past year shows that attackers continue to rake in thousands of dollars from unsuspecting victims. These emails targeted 15 unique cryptocurrency wallets — mostly Bitcoin, with a few Litecoin addresses. While six wallets received no payments, the remaining nine wallets recorded incoming transactions ranging from a modest \$945 to a shocking \$10,715.
The average amount requested per email was around \$1,203, with the median at \$1,250 — indicating that scammers have maintained their demands at a psychologically threatening, yet believable, level. The actual payments made to these wallets averaged \$1,836, which means at least some victims are paying even more than requested. Although the sample size is relatively small, the data proves the scheme still works. In fact, the repeated use of one address over a span of 32 days hints at prolonged and possibly targeted operations.
While there is always a possibility that some of the incoming funds were unrelated to the scam, the strong overlap in timing and context suggests otherwise. This evidence directly challenges the notion that sextortion scams can be safely ignored in training or cyber-awareness campaigns. On the contrary, their persistence and continued profitability highlight the importance of remaining vigilant.
What Undercode Say:
Why Sextortion Still Works in 2025
The continued success of sextortion scams reveals a critical psychological flaw in the way people perceive online threats. Even with awareness campaigns, many individuals still panic when confronted with the idea of a potential data breach — especially one involving intimate or compromising material. The fear of public embarrassment, job loss, or reputational damage remains a powerful motivator, leading some victims to pay without verifying the threat’s legitimacy.
Small Scale, Big Impact
What’s particularly striking is the relatively small scale of these operations. The scammer used only 15 wallets, and yet some of these gathered thousands of dollars. This low-effort, low-risk attack vector provides a steady stream of income for bad actors, especially in areas with weak cybercrime enforcement. It doesn’t require technical sophistication, and bulk mailing tools make the operation easily scalable. As such, it’s a highly accessible crime model for novice cybercriminals.
Cryptocurrency Still Fuels Anonymity
The reliance on cryptocurrency — specifically Bitcoin and Litecoin — remains a key enabler. These decentralized, pseudonymous platforms allow scammers to receive funds without revealing their identity. Even though blockchain analytics tools have improved significantly, tracking and prosecuting sextortion criminals is still challenging. This makes the scam not only profitable but also low-risk from a legal standpoint.
Why It’s Ignored by Security Teams
Sextortion is often overlooked in corporate training programs. It doesn’t seem “sophisticated” enough, and many assume people won’t fall for it anymore. But that underestimates the human element. Fear-based scams don’t rely on logic — they prey on emotion. Without proper education, employees may still fall victim, especially if the message is crafted to appear plausible or includes personal details scraped from data breaches.
The Role of Spam Traps
Spam traps — email accounts used specifically to catch unsolicited messages — provided the sample in this study. The fact that so many sextortion emails ended up in these traps shows the widespread nature of the campaign. But it also means there are likely many more being sent that we don’t see, especially to compromised or harvested email addresses outside the range of monitoring tools.
Not Just a Numbers Game
While many addresses received no payments, others saw substantial deposits. This supports the idea that even if only a small fraction of victims pay, the scam remains profitable. This low conversion threshold keeps scammers in business. Unlike phishing, which requires stealing credentials or banking data, sextortion relies on fear to generate direct payments. It’s fast, efficient, and increasingly hard to stop.
Should It Be in Awareness Training?
Absolutely. The data confirms that people still fall for these scams, even in 2025. Training modules should teach not just the technical signs of a scam, but also how to manage emotional reactions. Simulations or role-playing scenarios involving fear-based tactics can help users build resistance to psychological manipulation.
The Danger of Overconfidence
Cybersecurity professionals sometimes fall into the trap of believing they’re immune to common scams. However, sextortion doesn’t need to fool everyone — just a few people. And those few payments are enough to keep scammers in business. Overconfidence breeds vulnerability. It’s critical that even experienced users stay updated on social engineering tactics and real-world trends.
What Needs to Change?
Security awareness programs need to evolve. The focus shouldn’t just be on phishing or malware but on the broader spectrum of scams — especially emotional manipulation. Encouraging a culture of openness where people feel comfortable reporting suspicious emails without shame is also crucial. The stigma associated with falling for sextortion emails can lead to silence, which plays directly into the scammer’s hands.
🔍 Fact Checker Results:
✅ Sextortion scams still receive payments in 2025
✅ Cryptocurrency remains the primary payment method
❌ Not all targets fall for the scam, but enough do to keep it profitable
📊 Prediction:
Given the continued effectiveness of sextortion scams, they are likely to evolve with even more convincing narratives and deeper personalization. Scammers may begin leveraging AI to craft messages using real leaked data, making threats more believable. Expect sextortion to become even more psychologically manipulative — targeting emotional vulnerabilities rather than just digital ones. 🧠💰📧
🕵️📝✔️Let’s dive deep and fact‑check.
References:
Reported By: isc.sans.edu
Extra Source Hub:
https://www.quora.com/topic/Technology
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon
