How to tell a real OnlyFans management agency from a scam

A real management agency is commission-only, puts its terms in a contract you can take to a lawyer, never asks for your account password, never guarantees an income figure, and lets you leave on notice. A scam fails at least two of those, usually within the first conversation. The screening below takes about ten minutes and costs nothing, which is a good trade against an industry where the reported downside includes losing access to your own account.

Signal one: how did they reach you?

The single most common opening move in this category is an unsolicited direct message. That alone does not prove bad intent, but it inverts the burden of proof, and it should. Scam operations need volume, and volume means outbound. Legitimate representation is usually something you go looking for, from a business with a public surface you can inspect before anyone talks to you.

The pattern is old and well documented outside this industry. Consumer regulators have warned about it in modeling and talent representation for decades: the approach comes to you, it flatters, it moves fast, and the money flows in the wrong direction.[4]

So the first question is not “are they real?” It is “what exists that I can check without their help?” A company registration. A site that predates the DM. A public listing on a third-party marketplace. Creators currently on the roster who will speak to you without the agency arranging it. If the entire footprint is one account and a Telegram link, you already have your answer.

Signal two: they want your password

This is the cleanest disqualifier in the entire category, because it does not require you to judge intent. It requires you to read one line of your own contract. OnlyFans’ Terms of Use, section 7(e), state that you will keep your account and login details “confidential and secure, including your user details, passwords and any other piece of information that forms part of our security procedures, and you will not disclose these to anyone else.”[1]

An agency that asks for your password on day one is asking you to breach your agreement with the platform on day one, and to do it in a way that gives them, not you, operational control of your income. Reporting on a 2026 investigation into UK management agencies documented exactly where that leads: managers taking access to accounts and payment tools, and account takeovers used as leverage when creators pushed back.[7]

The correct structure exists and is not complicated. Access is granted during onboarding, not at pitch stage. It is scoped, documented, shared through a password manager rather than a chat thread, and revocable by you in minutes. If an agency cannot describe how you would revoke their access, they have told you what happens when you try.

Signal three: money moving toward them

Any fee before you have earned anything is a scam marker, full stop. The FTC’s guidance on modeling and talent representation states the principle in one line: legitimate agencies get paid when you get paid. They find work, and they take their share after the client pays. Agencies that charge for test shoots, photos, training, or to “secure your spot” are earning their revenue from applicants rather than from clients.[4]

This applies to every disguise the fee wears: an onboarding fee, a “content production package,” a paid trial period, a coaching program you must complete before representation, a deposit to reserve one of the last spots. If the agency’s business model works whether or not you ever earn, your earnings are not the product.

Signal four: a number they cannot possibly know

“We’ll get you to $10K a month in 90 days” is not optimism. In the United States it sits inside a category of claim regulators have formally put businesses on notice about. In October 2021 the FTC sent a Notice of Penalty Offenses to more than 1,100 companies marketing money-making opportunities, warning that misrepresenting the profits or earnings a participant can anticipate can trigger civil penalties.[5] The underlying list of penalty offenses covers exactly this: false or misleading representations about anticipated earnings, and claims that participants are likely to be profitable.[6]

The tell is not that the number is high. It is that it is specific and unconditional. A serious operator will talk about what they will do, on what cadence, measured how, and will decline to promise the outcome. If someone hands you a guarantee, ask for it in the contract with a refund attached. Watch the guarantee evaporate.

Signal five: nothing is written down

No contract is not informality. It is deniability. Everything that matters lives in the document: the commission rate, the basis it is charged on, the term, the notice period, who owns the accounts and the content, what happens to your subscribers when the relationship ends, and what the agency is actually obligated to do each week.

Three clauses deserve specific attention.

The exit clause

A contract without a clean exit is the mechanism every bad outcome runs through. The 2026 reporting included a creator told she would have to pay £10,000 to terminate her agreement.[7] Look for a fixed term with no automatic renewal, a written notice period either side can use, and no termination fee. If the term is measured in years, ask why the agency needs that long to prove itself.

Ownership

Vague ownership language is how accounts, content libraries, and social handles quietly change hands. The contract should say plainly that the OnlyFans account, the social accounts, and the content are yours, that any agency-created assets transfer to you on termination, and that the agency has no claim on revenue after the notice period ends.

Who carries the risk

This one is not negotiable and the agency does not control it. OnlyFans’ Terms of Use for Creators state that only individuals can be Creators, and that having “an agent, agency, management company or other third party which assists you with the operation of your Creator account (or operates it on your behalf), this does not affect your personal legal responsibility.”[2]

Read that alongside the Acceptable Use Policy, which prohibits misleading or deceptive conduct toward other users and prohibits impersonating another person.[3] If an agency runs your inbox, how it behaves there is your exposure, not theirs. That is a reason to care intensely about who is typing, how they are trained, and what they are permitted to say, and to refuse any agency that treats the question as paranoid.

The questions to ask before you sign

Send these in writing. A real agency answers them in a single reply without hedging. Note what gets skipped.

• Is your commission charged on gross fan payments or on net earnings after the platform fee?
• What exactly does that percentage cover, listed as deliverables?
• How long is the term, and does it auto-renew?
• What is the notice period to leave, and is there any fee to leave?
• Can the rate be changed without my signature?
• Does the commission apply to subscribers and revenue that existed before we signed?
• What access do you need, when do you get it, and how do I revoke it?
• Will you ever ask for my password, or do you work through delegated access?
• Is there any fee, deposit, or paid package before I earn anything?
• Who owns the content, the accounts, and the fan list during and after the contract?
• Who is in my inbox, how many people, and how are they trained?
• Which creators do you currently manage, and can I contact one without you arranging it?
• Can I have the contract for a week to review with someone else?

That last one is the most diagnostic question on the list. Every scam in this category runs on urgency: limited spots, an offer that expires, a roster closing Friday. A legitimate agency will not just tolerate you taking a contract to a lawyer, it will expect it, because the contract was written to survive that reading.

What none of this guarantees

Passing these checks does not mean an agency is good. It means it is probably not a fraud, which is a lower bar than most of the industry clears and a much lower bar than the one you should be setting. Competence is a separate assessment: current results, a real traffic function, staffed inbox hours, reporting you can actually see.

The screening exists to get you to that second conversation with your account, your money, and your leverage intact. Everything above is checkable before you sign a thing, which is exactly when checking is worth something.