OnlyFans Agency Scams: 15 Red Flags to Check Before You Sign

The message comes through Instagram or Telegram: a manager saw your page, thinks you could be doing five times the numbers, and has one slot open this month. The website looks fine. The testimonials are glowing. Two weeks later the agency has your password, a signed contract with a 40% cut on gross, and a reason why the first payout is late.

Agency scams on OnlyFans are rarely elaborate. They rely on speed, on a creator not knowing what a normal contract looks like, and on access to the account. This guide lists the fifteen red flags that show up again and again, explains what each one does, and gives you a twenty-minute check to run on any agency before the first call. It ends with what to do if you are already inside a bad deal.

Key takeaways

• The three things a scam needs are control of your account recovery (email and two-factor device), money upfront with nothing behind it, or a contract you cannot leave. Refuse all three and most schemes fail before they start.
• A pure commission agency earns only when you do, so money asked for before any work needs a written deliverable, an invoice from a named entity and refund terms behind it. A fee with none of those is the clearest single warning.
• The market is young: 44% of the 199 agencies in the September 2026 snapshot of the State of OnlyFans Agencies were founded in 2024 or later. New is not the same as fake; the warning sign is an agency with no verifiable trace at all: no entity, no named people, no history.
• Fake reviews are cheap and common. Trust reviews that name specifics (dates, numbers, what went wrong), reviews from confirmed clients, and reviews the owner answered.
• Your own verification takes twenty minutes: legal entity, domain age, real people, consistent claims across the website, the TopAgencies profile and social accounts, and a contract you can read before any payment.

How the common schemes work

Most bad outcomes fall into five patterns. Knowing the pattern makes the individual flags easier to spot.

None of these require a criminal mastermind. The June 2026 BBC investigation into UK agencies found the same ingredients inside companies with offices and staff: cuts of up to 70%, passwords changed, creators locked out of pages they had built. The contract and the agency's first three requests identify the pattern faster than the office or the staff list.

The 15 red flags

Before the first call

• 1. Cold outreach that leads with numbers. "You could make $20K a month" from someone who has never seen your analytics is a sales script, not an assessment. Real agencies ask questions before they make promises.
• 2. Urgency built into the pitch. Limited slots, a price that expires Friday, a cohort starting Monday. The purpose is to stop you reading the contract. Nothing about management is time-critical.
• 3. No legal entity or address. Search the company name in a business register (Companies House in the UK, the state Secretary of State in the US, the local equivalent elsewhere). No entity, or an entity registered last month for a company that claims five years of experience, is a mismatch.
• 4. A website with no people. No founder names, no team, stock photos, testimonials without surnames or links. Pair it with a domain registered a few months ago (any WHOIS lookup shows this) and you have a ghost.
• 5. Claims that do not match across channels. The site says 150 creators, the TopAgencies profile says 10 to 49, the Instagram says "boutique". One of them is wrong, and the agency chose which to show you.

During the conversation

• 6. They want the recovery email or your 2FA device. Most agencies work inside your login session, often through a management tool, so a login request by itself is normal. Asking for the recovery email or the two-factor device, or moving them to the agency's phone, is different: that hands over the account itself. This is the flag that costs accounts.
• 7. A fee with nothing behind it. Setup, onboarding, technology or verification charges, or an ad budget paid to the agency rather than to the platform, with no invoice, no written deliverable and no refund terms. Hybrid models exist (a production fee plus a lower commission, or a paid audit), but every fee should buy something you can name and check.
• 8. The rate has no base. "We take 35%" without saying whether that is on gross or on net after the platform's 20%. The difference on a $10,000 month is $700. An agency that cannot answer this on the call has not written it down anywhere you can hold it to. Our fees guide has the full arithmetic.
• 9. Payouts through the agency. They collect from OnlyFans and forward your share. From that moment you see your revenue through their bookkeeping. Direct payout to you, with the agency invoicing, is the safe version.
• 10. Guaranteed income. No one can guarantee subscriber revenue on a platform they do not control. A guarantee is either a lie or a clause with conditions you will never meet.

In the contract

• 11. Long term, short exit window. Twelve months, auto-renewal, cancellation only in a 14-day window, early-termination fee. See our contract guide for what a fair exit looks like.
• 12. Commission on what you already had, hidden until signing. Some agencies charge on all revenue they manage, including subscribers you brought; that is a cost to negotiate, not a fraud. The flag is a base that only appears in the contract after a pitch built on growth alone. Ask for a named start date and for pre-existing revenue to be excluded or priced lower.
• 13. Content rights. "Assign", "jointly owned", "perpetual", "irrevocable". Your content is yours; the agency gets a licence that ends when the contract does.
• 14. Disputes abroad. Arbitration in Dubai or Cyprus for a creator in Ohio means any dispute is fought on the agency's ground at a cost most creators cannot carry. Awards can travel across borders under the New York Convention, but starting the case abroad is the part you will not afford, so in practice the clause protects the agency more than you.
• 15. Resistance to a lawyer. "Our contract is standard, everyone signs it as is." Professional agencies expect a review. The ones who discourage it are telling you what a lawyer would find.

Fake reviews and how to read around them

Reviews are the first place a creator looks and the easiest thing to fake. On TopAgencies a new review is visible immediately but joins the rating only after a three-day hold, during which an editor can approve it early or mark it as fake; agency owners can report reviews they believe are fake, confirmed fakes are labelled and excluded, and owners can confirm reviewers as real clients. Use those signals, and add your own reading.

• Specifics beat adjectives. "Doubled my income" is a slogan; "joined in March, 38% on net, chatting coverage 16 hours, left in August because reporting stopped" is a review.
• Bursts are campaigns. Eight five-star reviews in one week, then nothing, is a launch or a purchase, not a track record.
• Read the owner's replies. An agency that answers a bad review with what happened and what changed is showing you its support process. An agency that answers with a threat is showing you its exit process.
• Cross-check platforms. A Trustpilot page with 40 reviews and a TopAgencies page with none, or the reverse, is worth a question.

You can browse every agency review with these filters on the reviews page: verified clients only, with owner reply, lowest rating first.

The twenty-minute verification

Run this before the call, not after the contract. Once an agency passes, the how to choose guide covers the twelve questions for the call itself.

1. Entity. Company register search for the legal name. Note the incorporation date and the director names.
2. Domain. WHOIS lookup for the website. A domain younger than the agency's claimed history is a mismatch to raise.
3. People. Find one named human with a traceable footprint: LinkedIn, a podcast appearance, a conference, anything older than the agency.
4. Consistency. Compare roster size, founding year, platforms and commission across the website, the agency's profile in the OnlyFans agency ranking and social accounts. Agencies control their own profile data on TopAgencies, so a mismatch is theirs, not ours.
5. Verification status. A verified listing on TopAgencies means the owner confirmed the listing and the agency links to us from its own site; it does not change the rating (methodology); it confirms that the person managing the listing controls that website, not that a company is registered or that the service is good.
6. Contract before money. Ask for the agreement in writing before any payment or access. Silence or a delay is the answer.
7. Reference call. Ask for two current clients you can message. A real agency has them and knows they will say yes.

If you are already in

Start with control, not with the argument. If the agency has your password, change it and the recovery email now, and enable two-factor authentication on a device you hold. If you cannot get in, contact OnlyFans support with proof of identity before doing anything else; the account is tied to the identity you verified at signup, and recovery runs through that identity.

Then read the exit clause, export your earnings statements from the platform, send written notice quoting the clause, and on the end date have the agency disconnect its tools, change the password and check that access has stopped. If money was taken upfront or payouts were withheld, keep every message and statement; a chargeback through your card issuer or a small-claims filing is often faster than a lawyer. Report the agency to the platform as well, with the same evidence.

And leave a review. A specific, dated account of what happened is the most useful thing the next creator will read.

Frequently asked questions about OnlyFans agency scams

Are OnlyFans agencies a scam?

No, but the market is young and lightly regulated: 44% of the 199 agencies in the September 2026 snapshot of the State of OnlyFans Agencies were founded in 2024 or later, and only 12 publish a commission rate. Most bad outcomes follow the five patterns above rather than coming from outright fake companies, and the contract and the first three requests tell you which pattern you are in.

What is the biggest red flag?

A request for your recovery email or two-factor device, or an agency that moves them to its own phone. Sharing a login is how most agencies work; handing over recovery is what turns a shared login into a takeover, and it is the mechanism behind the lock-out stories the BBC documented in June 2026.

Do real agencies charge upfront fees?

Some do, legitimately: a production fee, a paid audit, coaching, or a hybrid of a small fee and a lower commission. The test is what stands behind the money: an invoice from a named entity, a written deliverable with dates, and refund terms. A percentage of your earnings plus an unexplained fee before any work is the version to walk away from.

How can I check if an agency is legitimate?

Company register, domain age, named people with a footprint older than the agency, consistent claims across its website and its TopAgencies profile, a contract you can read before paying, and two current clients you can message. Twenty minutes, before the first call.

Can an agency take my OnlyFans account?

It needs your recovery channels or an open session. Keep the account email and two-factor authentication yourself, treat the password as a key you can change, and on the day the contract ends have the agency disconnect its tools, change the password and check that access has stopped, through OnlyFans support if you cannot confirm it yourself. If an agency has already changed your login, go to OnlyFans support with your ID; recovery runs through the identity the account was verified with.

How do I report a scam agency?

To the platform, through OnlyFans support, with your correspondence and any evidence of account takeover or withheld payouts. To your card issuer or bank for upfront fees. And publicly, with a dated, specific review on the agency's TopAgencies profile, so the next creator has the information you did not.