The Fake Pegasus Email Scam is a sextortion phishing attack where scammers claim:
- They installed Pegasus spyware on your phone or computer.
- They recorded you using your webcam.
- They have access to your emails, contacts, and social media.
- They will send private footage to everyone you know.
- You must pay in cryptocurrency (Bitcoin or Litecoin) within 48 hours.
The email often says it was sent from your own iCloud or email account to make it feel real.
Is Pegasus Spyware Real?
Yes, Pegasus spyware is real. However:
- It is used by governments and law enforcement agencies.
- It costs hundreds of thousands of dollars to deploy.
- It is NOT used by scammers targeting random individuals.
Why This Scam Looks So Convincing
Scammers use psychological and technical tricks:
- Email Spoofing: They fake the sender address to appear as your own email.
- Fear Tactics: They use embarrassing claims to create panic and emotional pressure.
- Urgency: They give you 24–48 hours so you act without thinking.
- Cryptocurrency Demands: Crypto payments are difficult to trace, making it easy for scammers to disappear.
- Text Manipulation: They use altered characters (like “pеrvеrt”) to bypass spam filters.
The Truth About the “Sent From Your iCloud” Email
Let’s be clear:
- No one installed spyware on your device.
- No one recorded you.
- No one has access to your contacts.
- No one is monitoring your activity.
This is a mass email sent to thousands or millions of people hoping a few will panic and pay.
What To Do If You Receive This Email
Do NOT panic. Follow these steps:
- Do not reply to the email.
- Do not click any links.
- Do not send money.
- Mark it as spam or phishing.
- Delete the email.
That’s all you need to do.
Recommended Security Steps
Even though this is a scam, take these steps to stay protected:
- Change your email password.
- Enable two-factor authentication (2FA).
- Update your devices and software.
- Avoid clicking suspicious links in the future.
How Houston Tech Guys Can Help
Houston Tech Guys provides professional on-site IT support and cybersecurity services across Houston.
We help with:
- Virus and malware protection.
- Email security and phishing protection.
- Network security and firewall setup.
- Computer and device troubleshooting.
- Managed IT services for businesses.
We come to your location, so you don’t have to disconnect anything. All of our technicians have over 10 years of experience.
Additional Resources
For more information on cybersecurity and how to protect your business, consider exploring resources from trusted IT support providers. They can offer insights and tools to keep your technology secure and your operations running smoothly.
Stay vigilant and remember, knowledge is your best defense against scams like these.
Verify independently and respond to exposure
Treat phone numbers, sender names and amounts described here as details reported in the source case, not proof of who owns a number or who placed a call. Caller ID and email sender displays can be spoofed. Open the organization’s official app or type its known website yourself; use contact information obtained there, not from the message. Do not share passwords, recovery codes or unexpected sign-in approvals. If you shared access or credentials, disconnect an exposed device, use a different trusted device to change passwords and review sessions, and contact the affected bank or service promptly. Keep evidence and report the message. A suspicious message alone does not prove a device or account was compromised.
What the message does and does not prove
A demand claiming Pegasus infection, a cryptocurrency deadline or a sender address matching your own is not evidence that spyware was installed. Spoofing can explain the display, but cannot rule out a separate compromise. Review account activity through the official account service and investigate unfamiliar sessions; do not pay or reply to the extortion demand.
