The scammer tried to trick me into thinking that he had hacked me by sending me a password that I have used in the past (he probably got it from some password dump when another site got hacked). The header of the email was spoofed to make it look like the email was sent by my own email address, however on closer inspection the email had bounced all over the world before reaching my inbox. He demanded $900.