ScamSplain

Bomb-Threat / DDoS Ransom (Business Extortion)

A business receives a threat — a bomb 'planted' on premises or a promised website attack — demanding crypto to prevent it, usually an empty mass threat.

Think a message like this reached you? You can check it right now.

What this scam is

Scammers email businesses claiming they've planted a bomb in the building or will launch a crippling website (DDoS) attack unless a crypto ransom is paid by a deadline. These are typically mass-sent, baseless threats meant to scare a quick payment; occasionally a brief nuisance attack backs a DDoS demand. Paying invites repeat targeting. Bomb threats are a safety matter for police; extortion demands should not be paid.

What it usually looks like

  • An emailed threat of a bomb or website attack on your business.
  • A crypto ransom with a deadline.
  • Claims of catastrophic consequences.
  • Generic wording sent to many businesses.

Common warning signs

  • Extortion demands paid in crypto.
  • Threats with tight deadlines.
  • Mass-mailed, non-specific content.
  • Pressure to pay quietly.

Example wording scammers use

We've placed a device in your building. Pay 1 BTC by 3pm or it detonates.
Pay now or we take your website offline for a week.

These are illustrative examples written by ScamSplain, not real messages.

What the scammers want

  • A crypto ransom.
  • To exploit fear and liability.
  • Repeat payments if you comply.

This is general safety information, not professional advice. It is not legal, financial, medical, or immigration advice, and it does not create a professional relationship. For your own situation, speak with a qualified professional or the official organisation involved. If you are in immediate danger, contact your local emergency number.

What to do

  • For any bomb threat, treat safety first and follow your emergency plan; contact police (911).
  • Do not pay extortion; report DDoS threats to your hosting/security provider.
  • Preserve the message and involve your security team.
  • Report to the FBI.

What to do if you already responded

  • If you are overwhelmed or thinking about harming yourself, call or text 988 (Suicide & Crisis Lifeline, US) — it is free, 24/7, and confidential.
  • Stop payments; engage your security provider and law enforcement.
  • Report to ic3.gov.
  • Harden DDoS protections with your host/CDN.

Related scams