I think you have two separate incidents that are unrelated and merely a coincidence.
I have a strong online presence, I run several large Facebook Groups, participate here and other public forums and social media platforms. I use my real name on the websites etc. I get scam texts, Facebook Messenger notes etc. and many start with lines such as, Saw you online, I saw you in this video, I saw you OMG and on and on. This is a common hook by scammers to get you to click on a link. Don’t ever do it. Just ether message and go on about your day.
The camera light is a separate issue. Please follow this path,
iPhone > Settings > Privacy & Security > Camera > those are all the apps you’ve given permission to use your camera
If you see apps that you don’t want using your camera, switch it off.
I suspect X was given permission (by you) to use your camera. If that makes you uncomfortable, switch it off.
I have several bank apps that have permission to use my camera. Why would a bank want permission to use my camera? It allows the app to scan credit and debit cards for card activation. So, there are lots of reasons an app might want access.
I think you’re fine, and had a coincidence and given your context, you did the right thing. Going forward, you know how to control apps having access to features on your iPhone.