Scams creators get in their DMs, and how to spot them

How to tell if it's happening to you

The more visible your account, the more of these messages you get. You don't have to be naive to fall for one: they're well written, use real logos and land right when the offer sounds most tempting. Be suspicious if a message checks two or more of these boxes:

• Urgency: "today only," "your account will be deleted in 24 hours."
• You pay first: "a small fee," "shipping for the product," "verification."
• They pull you out of the app: a link to "log in," a file to download, or a move to another messaging app.
• They ask for a code you just got by text or email.
• Too good to be true for an account your size.

Many of these scams end in a stolen login and then a shut-down account, which is why they're part of our guide to why creator accounts get banned.

The message, the scam and what to do

The five scams, one by one

1. The fake brand

They write with a real logo and a professional tone. The catch comes later: they ask you to pay for the product "and we'll reimburse you," install an app or open a file with the "contract." How to handle it: find the brand's official account and reach out there yourself; a real brand doesn't charge you to work with it.

2. Fake support

Messages about "copyright," "pending verification" or "your account will be deleted," with a link to "fix it." The goal is your password. How to handle it: real notices show up inside the app and on your account status. If you already entered your details, change your password and follow how to lock down your accounts.

3. The agency that charges you to join

They promise income and ask for a fee, or your passwords, in the very first message. How to handle it: a legit agency gets paid out of sales, puts its terms in writing and lets you vet it first. The same guide covers the questions to ask: are OnlyFans agencies legit?

4. The fan who wants to pay off-platform

They offer more money if you sell to them another way. That's where reversed payments, content circulating out of your control and trouble with the platform come from. How to handle it: everything gets paid inside the platform, no exceptions.

5. Extortion

Someone claims to have your content or personal details and demands money to keep quiet. How to handle it: don't pay (it guarantees nothing), stop replying, save evidence and report it to the platform and to the authorities. In the US, the TAKE IT DOWN Act requires platforms to remove intimate images posted without consent within 48 hours, according to the FTC (checked November 9, 2026).

What NOT to do

• Don't pay anything up front to get paid, collab, get verified or recover an account.
• Don't share verification codes, even if they say it's "to confirm it's you."
• Don't log in through a link someone sent you; always go through the app.
• Don't download files from strangers, no matter how official the message looks.
• Don't negotiate with someone threatening you, and don't send them anything else.

If you already fell for one

1. Change the password on the affected account and your email, and turn on two-factor authentication.
2. Log out sessions you don't recognize and remove connected apps.
3. Call your bank if you paid anything.
4. Report the profile on the platform and keep screenshots.
5. If your Instagram was stolen, use the official hacked-account page; if you got penalized, follow the 7-day ban recovery plan.

Tools that help

• In-app notices and your account status, to tell whether a warning is real.
• Fansly's security tools, like geoblocking and Management Sessions, explained in its creator security FAQ.
• An authenticator app for two-factor authentication.
• A folder of dated screenshots, in case you need to file a report.

What we never do: ask you for money up front, to get started or for anything else. Our share comes out of sales, and the terms are in writing. For privacy from day one, see privacy tips for new OnlyFans creators.

Frequently asked questions