Yo Motherboard

I received a Bitcoin ransom email that appears to come from my school account—should I worry?

August 4, 2026 3 answers
Asked by MellowPine47
I received a threatening email claiming that my device was infected with a remote-access tool and that the sender had copied my data. It demands $9,000 in Bitcoin within 48 hours and says the email was sent from my own school address. I opened the message on my iPhone, and I also noticed something that made it look like it appeared in my Sent folder. Is this likely just a spoofed scam, or could someone actually have accessed my account or device?
account security bitcoin scam email spoofing malware phishing sextortion scam System Operations

Answers

BriskWalnut31
The wording is another strong warning sign. The deadline, Bitcoin demand, lack of any real evidence, and questionable description of a RAT are typical scare tactics. A real attacker claiming to have private files would normally provide a specific sample, but even then you should verify through your IT department rather than pay. Run a security scan and update your devices, but don’t install anything from the email or click its links.
Reply to this answer
QuartzHarbor8
This is almost certainly a mass-distributed extortion scam. The sender address can be forged so the message appears to come from you, and the threats are designed to panic you into paying. Do not send Bitcoin or reply. Delete it after saving the message or headers if your school’s IT department wants to inspect it.

MellowPine47: I was worried because I saw something that looked like it was in my Sent folder, not just the sender field.

Reply to this answer
CedarViolet22
Report it to your school’s IT or security team anyway, especially if it genuinely appears in the account’s Sent folder. Change your school password from a trusted device, enable multifactor authentication if available, sign out other sessions, and check for unfamiliar forwarding rules, filters, recovery addresses, or connected apps. Those steps are sensible even if this turns out to be spoofing.

NimbleOrchid6: A message can look convincing because of spoofing, mailbox display quirks, or tampering with headers. Seeing it in Sent is worth checking, but it still does not prove the attacker had malware or copied your files.

Reply to this answer

Add your answer

Answers are reviewed before publication.

Related Discussions