How about putting the source of the story, I like to check the full details.

4000 is too big, I check the address used and it's just less than 1 btc, so where are the others going?

https://www.blockchain.com/btc/address/1GYNGZLEUGkkQjHo19dHDnGE87WsAiGLLB

Somewhere in the middle of this page I found the BTC addresss and email:
https://krebsonsecurity.com/2018/07/sextortion-scam-uses-recipients-hacked-passwords/

Here you see that the scammer consolidated the 11 successful frauds on the 1GYN.. address into address 1JsACYBoRCYkz7DSgyKurMyibbmHwcHbPd which received more than 4000 BTC in thousands of previous transactions. Thescammer used many different addresses.
https://www.blockchain.com/btc/tx/9d7208192348171c9beb1bede3b7f610ab1811c464fb9cb57891a9f4ad647a9e