The quick answer
Verify the business independently, understand the agreement and keep control of your account recovery and payout arrangements. Treat pressure, secrecy and unsupported earnings guarantees as reasons to slow down. Poor results alone do not prove fraud; misrepresentation and unauthorized activity deserve a different response.
Being contacted is not the same as being vetted
A polished Instagram profile, a confident video call and a screenshot of a large balance can make an agency feel established before you know anything verifiable about it. Start with a less exciting question: who exactly would you be entering a contract with?
Get the business name, contact information and the identity of the person authorized to represent it. Compare the details in the proposal, invoice, email address and agreement. Where a business registry is relevant, check the entry through the registry itself. A registered company is not a guarantee of good service, but mismatched identities need an explanation.
Find contact details independently rather than relying only on the link in an unsolicited message. Impersonation can involve a real agency’s name and a completely unrelated account.
Slow down when the pitch becomes urgent
The FTC’s modeling-scam guidance highlights pressure to sign, guaranteed work and unsupported success claims. Creator management is a different service from traditional modeling representation, but those sales behaviors are still worth examining. FTC guidance.
Ask for a written scope and time to read it. Request evidence of the work without demanding another model’s private account or messages. A reference should be shared with that person’s consent and checked through a contact method you can trust.
Do not equate every upfront expense with fraud. Production or software can involve real costs. The questions are whether the cost was disclosed, what you receive, who supplies it and what happens if the work is not delivered. An unexplained fee to “unlock guaranteed income” is a very different proposition.
Understand access before providing it
Discuss the exact access method and confirm that it is permitted by the relevant platform. Agree who needs access, for which tasks, and how it will be removed. Keep recovery email, authentication and payout arrangements under control appropriate to you and your business.
Do not send recovery codes, account credentials or identification documents to an unverified person in a casual message. Use the platform’s official verification process where required and assess any separate agency request on its own purpose and handling.
Ask what records are retained when staff change or the contract ends. A good access arrangement should make it possible to stop working together without losing control of the business you built.
Read the parts of the agreement that matter on a bad day
A contract is useful when something is unclear or goes wrong, not just when everyone is enthusiastic. Get professional advice if the meaning or consequences of a clause are uncertain.
- Services: the work included, exclusions and your responsibilities.
- Fees: the percentage base, other costs, deductions and payment timing.
- Content: ownership, permission to edit or generate material, and publication approval.
- Access: who can act on the account and how authorization is withdrawn.
- Reporting: what records you can see and how discrepancies are handled.
- Exit: notice, outstanding fees, content handover and dispute arrangements.
Poor service, a dispute and a scam are different problems
Growth below expectations can happen without deception. A disagreement about scope may be a contract problem. Fabricated identity, unauthorized transfers, deliberate false claims or attempts to prevent you from recovering your account raise different concerns. Describe the actual behavior rather than relying only on a label.
Keep a dated record of promises, agreements, payments, account changes and missing deliverables. Where work is simply late, ask for a concrete explanation and recovery plan. Where access or funds may be compromised, prioritize containment through the relevant official platform and financial provider.
Be cautious of a second person who offers guaranteed recovery for another upfront fee. A problem with one provider can create an opening for somebody else to exploit the urgency.
What to do when something feels wrong
Stop granting new access while you establish the facts. Secure your email and accounts, review authorized access through official channels and preserve the records you may need. Contact the relevant platform or payment provider promptly about unauthorized activity. The right next step depends on what happened and your location.
For contractual or financial disputes, speak to an appropriate professional or local reporting service. Avoid public accusations you cannot substantiate and never publish somebody else’s private documents or messages in an attempt to prove your case.
XO welcomes questions about scope, fees and how the working relationship is organized. You should be able to compare us using the same checks you would apply to any agency. Trust is stronger when the practical details can be examined.
Common questions
How can I check if an OnlyFans agency is legitimate?
Verify its identity and contact details independently, review the agreement, examine evidence with consent and clarify access, payments and exit terms. No single badge proves legitimacy.
Should I give an agency my account recovery codes?
Do not give recovery codes to an unverified contact. Agree an appropriate, platform-permitted access process and keep recovery arrangements secure.
What if an agency delivered work but my income did not grow?
An unsuccessful result is not automatically fraud. Compare the work and claims against the agreement, document discrepancies and seek advice where needed.
Sources & further reading
XO THE AGENCY
Make your next move with XO.
Tell us about your page and the support you want. We’ll discuss a plan that fits.
Talk to XO