Scott Ross became suspicious of a scam when he received a lengthy email from an unknown sender, claiming to have access to his online browsing data, personal photographs and his phone number — information the person said would be released if he didn’t pay almost $2,000 in bitcoin.