Before you reply
How to spot a scam agency DM
A scam agency DM usually promises guaranteed income or huge growth, pushes you to move to Telegram or WhatsApp, asks for money upfront, or asks for your login or a security code. Never share a login code with anyone. Before replying, ask for a company name and check it on Companies House, and ask to see the full contract before you agree to anything.
If you've got any following, you'll get agency DMs. Most are mass messages. Some are genuine, many are low quality, and some are designed to take your account or money. These are the patterns to look for.
The lines to watch for
| What they say | What it usually means |
|---|---|
| "We guarantee you £10k a month" | Nobody can guarantee your income. It's a hook. |
| "We'll 10x your earnings" | Big numbers with no proof. Ask for verifiable results. |
| "Let's move to Telegram" | Off-platform, harder to trace, and easier to pressure you. |
| "Small setup fee to get started" | Real agencies earn from your growth, not upfront fees. |
| "Send us your login so we can audit your page" | Never needed to assess your page. Don't share it. |
| "Just send the code you've been sent" | An account takeover attempt. See below. |
| "Offer ends today" | Pressure tactic. Good offers wait for you to check them. |
| "Send your ID and bank details to onboard" | Far too early. Nobody needs this before you've agreed a contract. |
The login code trick
A common way accounts get taken over: someone triggers a password reset or login on your account, then asks you to "confirm" by sending them the code that arrives by text or email. That code lets them into your account. No genuine agency, platform or support team will ever ask you to send them a login or security code. If you've already sent one, change your password, check your email and payout details, and contact the platform's support straight away.
How to check if an agency is real
- Ask for the company name. A real UK business should give you one. Search it on Companies House to see when it was set up and who runs it.
- Check the website and contact details yourself. Don't rely only on links they send you.
- Ask for the full contract before any call. If they won't send it, that tells you something.
- Ask to speak to creators they manage now, through contact details you can check are real. Screenshots of earnings are easy to fake.
- Check the deal against the red flags. See 10 red flags before you sign.
What to reply
If you're interested, keep it simple: "Thanks. Before a call, please send your company name and the full contract." A genuine agency will. If they push back, pressure you, or ask for codes or money, block and move on.
If you've lost money to a scam, report it to Action Fraud on 0300 123 2040.
Questions creators ask
How do I know if an OnlyFans agency DM is a scam?
Watch for guaranteed income, huge growth promises, requests to move to Telegram or WhatsApp, upfront fees, and any request for your login or a security code. Ask for a company name and the full contract before replying further.
Should I give an agency my login to "audit" my page?
No. An agency can assess your page from the outside. Sharing your login gives them control of your account, your fans and your money.
Someone asked me to send a code I received. What should I do?
Don't send it. If you already have, change your password immediately, check your email and payout details, and contact the platform's support.
Can The Creator Side check an agency DM for me?
Yes. Use the "Is it legit?" check on our homepage. Screenshot the DM, answer a few questions, and we'll tell you what we think, free.
Not sure about your deal? We'll check it.
Send us your contract, the chat where you agreed terms, or the agency's DM. A person reads every check. Free, private, and we're never on the agency's side.
Start my free checkSources
- BBC News: OnlyFans "agents" control and threaten creators while taking half their earnings (15 June 2026)
- Companies House: search for a company
- Action Fraud: report fraud