THERE have been 15 cases across Merseyside since the start of last month of a 'sextortion' email scam which threatens the recipient that a video will be shared of them visiting adult websites.

Email users are being warned by the North West Regional Organised Crime Unit (NWROCU) about an increase in ‘sextortion’ scam messages which have been reported to Action Fraud.

Sextortion scams are a type of phishing attack where people are coerced into paying a BitCoin ransom because they have been threatened with sharing video of themselves visiting adult websites.

These scams are made to appear all the more credible because they provide seemingly plausible technical details about how this was achieved, and the phish can sometimes also include the individual’s password.

The phisher is gambling that enough people will respond so that their scam is profitable; they are guessing and do not actually know if you have a webcam, have been visiting adult websites, or the means by which you communicate with people.

Action Fraud suspects that the fraudsters may have gained victim’s passwords from an old data breach.

Action Fraud have reported a national increase in cases of 'sextortion' and this is reflected regionally, with 15 reports in Merseyside.

Detective Sergeant John Black said: "While we have seen an increase in reports, we know that it remains a massively under reported crime. It is only natural that a victim would feel reluctant to report it.

"However, we will treat all reports with discretion and compassion, and every report to us or Action Fraud helps us identify who is responsible for sending the messages, bring them to justice and could stop others becoming victims.

"There is no need to suffer in silence and I encourage anyone who has been a victim of this crime to report it to us either via direct message on Twitter to @MerPolCC, messaging us on Facebook at 'Merseyside Police CC' or calling 101. Alternatively contact Action Fraud on 0300 123 2040."

Advice from the National Cyber Security Centre:

As with other phishes, our advice is not to engage with the phisher, delete the email and report it to Action Fraud: actionfraud.police.uk/report-phishing

• Do not be tempted to pay the BitCoin ransom, doing so will likely encourage more scams as the phisher will know they have a ‘willing’ customer

• Do not worry if the phish includes your password; in all likelihood this has been obtained from historic breaches of personal data. You can check if your account has been compromised and get future notifications by visiting: haveibeenpwned.com/

• If the phish includes a password you still use then change it immediately, advice on how to create suitable passwords and enable other factors of authentication is available from Cyber Aware: cyberaware.gov.uk/passwords

• If you have been a victim of a sextortion scam and have paid the BitCoin ransom, then report it to your local police force by calling 101

• If you need emotional support this is available from charities such as Victim Support by calling 0808 168 9111 or visiting: victimsupport.org.uk/

Action Fraud has also published some useful guidance in response to sextortion scams: actionfraud.police.uk/alert/alert-cyber-criminals-send-victims-their-own-passwords-in-new-sextortion-scam