Bomb-Threat / DDoS Ransom (Business Extortion)
A business receives a threat — a bomb 'planted' on premises or a promised website attack — demanding crypto to prevent it, usually an empty mass threat.
Think a message like this reached you? You can check it right now.
What this scam is
Scammers email businesses claiming they've planted a bomb in the building or will launch a crippling website (DDoS) attack unless a crypto ransom is paid by a deadline. These are typically mass-sent, baseless threats meant to scare a quick payment; occasionally a brief nuisance attack backs a DDoS demand. Paying invites repeat targeting. Bomb threats are a safety matter for police; extortion demands should not be paid.
What it usually looks like
- An emailed threat of a bomb or website attack on your business.
- A crypto ransom with a deadline.
- Claims of catastrophic consequences.
- Generic wording sent to many businesses.
Common warning signs
- Extortion demands paid in crypto.
- Threats with tight deadlines.
- Mass-mailed, non-specific content.
- Pressure to pay quietly.
Example wording scammers use
“We've placed a device in your building. Pay 1 BTC by 3pm or it detonates.”
“Pay now or we take your website offline for a week.”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- A crypto ransom.
- To exploit fear and liability.
- Repeat payments if you comply.
This is general safety information, not professional advice. It is not legal, financial, medical, or immigration advice, and it does not create a professional relationship. For your own situation, speak with a qualified professional or the official organisation involved. If you are in immediate danger, contact your local emergency number.
What to do
- For any bomb threat, treat safety first and follow your emergency plan; contact police (911).
- Do not pay extortion; report DDoS threats to your hosting/security provider.
- Preserve the message and involve your security team.
- Report to the FBI.
What to do if you already responded
- If you are overwhelmed or thinking about harming yourself, call or text 988 (Suicide & Crisis Lifeline, US) — it is free, 24/7, and confidential.
- Stop payments; engage your security provider and law enforcement.
- Report to ic3.gov.
- Harden DDoS protections with your host/CDN.