OnlyFans Agency Scams: 12 Red Flags and What to Do

What counts as an OnlyFans agency scam?

An OnlyFans agency scam is any operation that uses the language of management (chatters, marketing funnels, "account growth") to take money, credentials or content from a creator instead of earning a share of the revenue that creator generates. Legitimate management is paid out of income that already exists. Almost every scam below has to break that one structural fact, which is why most are catchable in the first conversation.

If you are still deciding whether to work with anyone at all, start with whether a trans OnlyFans agency is worth it. This page is the catalogue and the recovery guide; for the full vetting process (registry checks, references, the questions to ask before signing), use how to choose an OnlyFans agency, which is not repeated here.

The 12 red flags

Each row is a real pattern. Most scams combine two or three of them.

Do real agencies ever charge upfront fees?

No. Revenue-share management has no legitimate upfront fee, and the FTC's guidance on job scams is blunt: "Honest employers, including the federal government, will never ask you to pay to get a job." An agency that genuinely expects to grow your earnings is paid when it does.

The charge is rarely called a fee. It appears as a registration charge, a verification deposit, a refundable "commitment", a chatter-training package, a mandatory equipment purchase, a paid directory listing or a portal subscription. If money leaves your account before work has been done for you, the label does not matter.

Why "we'll create the account for you" is the most expensive red flag

Because everything else follows from it. Whoever controls the email address on an account controls password resets; whoever controls password resets controls the account; whoever controls the account controls the payout settings. An agency offering to set it all up is not saving you twenty minutes, it is taking the keys at the one moment you would hand them over without thinking.

The credential request is usually a phishing pattern in business clothing: an "agency dashboard" link that collects your real login. The FTC's advice applies exactly: contact the company using a phone number or website you know is real, never the details in the message (recognising phishing). And OnlyFans' Terms of Service keep the account holder responsible for the account even when someone else helps operate it, so rule-breaking done through your login lands on your name.

The rule: you create the account, you hold the password, two-factor codes arrive on your device, the payout details are yours, and any agency access is delegated and revocable by you.

What about contracts that "guarantee" income?

A guarantee is only worth the remedy attached to it. Ask one question (what specifically happens if the number is missed?) and note whether the answer is a refund, a reduced commission, a right to terminate immediately, or nothing at all. In most guaranteed-income contracts it is nothing, because the guarantee is a closing device rather than an obligation. Guarantees also travel with the other two contract red flags, a long exclusive term and a commission that survives termination, so read the term, the notice period and the termination clause before anything else.

When "recruitment" is actually labour trafficking

At the far end of the scale, the agency framing is a cover for forced labour. The pattern is recognisable: an offer that involves relocating or moving into a "content house", travel and accommodation arranged and paid for you, then those costs reconstituted as a debt you work off. Identity documents are held "for verification". Accounts, messages and money are controlled by someone else. Contact with people outside the operation is discouraged, then restricted.

There is no reliable public data on how often this happens specifically in adult content creation, and anyone quoting a percentage is guessing. What matters is that these cases go to specialists, not to consumer-fraud channels. In the US, the National Human Trafficking Hotline takes calls, texts and chats confidentially; in the UK, the Modern Slavery & Exploitation Helpline does the same. Neither requires you to be certain first.

How do you read agency reviews?

Read them for specifics, not sentiment. A review naming a clause, a date, a percentage or a sequence of events can be checked. "Amazing team, changed my life" cannot be checked by anyone, which is why it is the cheapest kind to fabricate.

The signs of a manufactured review set are the same everywhere: accounts created within days of each other, reviews bunched into a narrow date range, identical phrasing across different "people", praise with no operational detail, a burst of five stars right after a critical review, and no negatives at all across hundreds of entries.

This is not a commercial grey area. The FTC's 2024 final rule prohibits creating, buying or selling fake or false reviews and testimonials, paying for reviews expressing a particular sentiment, undisclosed insider reviews, company-controlled sites posing as independent, suppressing negative reviews through threats, and buying or selling fake indicators of social media influence such as bot followers. Violations can carry civil penalties.

Apply the test to every agency, including this one. Bunny Agency's reviews and case studies deserve the same scrutiny as anyone else's: are the claims specific, is the company a registered entity you can look up, and do the terms you are offered match what the site says?

If you have already been scammed: a recovery plan

Work in this order. The first four steps are time-sensitive.

1. Secure the email account first. Change its password, turn on two-factor authentication, remove unfamiliar recovery addresses and delete forwarding rules you did not create. Email controls every other reset, so fixing the OnlyFans password first is wasted work.
2. Change the OnlyFans password and reset two-factor authentication so codes arrive on a device only you hold.
3. Revoke active sessions and connected access. Sign out of all devices, and remove any third-party tool you did not personally authorise, on every social account too.
4. Check the payout details. Confirm the account on file is yours. If it was edited, change it back and screenshot the history.
5. Preserve evidence before it disappears. Screenshot the conversation, profiles, handles, contract, invoices and transaction references with dates visible. Scammers delete accounts quickly.
6. Contact platform support through the official route if you are locked out, from the email address you originally registered, stating that the account was compromised.
7. Dispute the money. Ask your bank or card issuer about a chargeback or reversal. The FTC's what to do if you were scammed sets out the options by payment method, and the odds differ sharply between cards, bank transfers, gift cards and crypto. Speed matters most.
8. Report it. In the US, file with the FTC at reportfraud.ftc.gov and the FBI's Internet Crime Complaint Center at ic3.gov. In the UK, report to Action Fraud, and report phishing pages through the GOV.UK routes. Reports rarely recover money alone, but they connect patterns across victims.
9. File takedowns for stolen content straight away; the OnlyFans DMCA takedown guide covers what to send and where.
10. Write down what happened while it is fresh: names, handles, dates, amounts. If this becomes a police report or a legal matter, you will want the timeline you wrote in week one.

Why are trans creators targeted?

Fewer vetted options. There are fewer agencies with real experience working with trans creators, so the search takes longer and ends in less familiar places, precisely where impersonators and fee-takers wait. Best trans OnlyFans agencies covers evaluating the field on evidence rather than marketing.

Isolation. Creators who cannot discuss the work with family, colleagues or a local community have nobody to sanity-check an offer against. A scam that would collapse in ten minutes of conversation with another creator survives in a private DM thread.

Outing as leverage. This one does not apply to most other creators. Someone holding your legal name, identity documents or location has something to threaten you with beyond money, and scammers use it to keep victims quiet and paying. The countermeasure is structural: separate identities, controlled documents, and promotion that does not leak your real name. Ask any agency in writing who can see identity documents and where they are stored, and build the rest with how to stay anonymous on OnlyFans as a trans creator before you talk to anyone.

Where Bunny Agency fits

Bunny Agency LLC is an OnlyFans management agency registered in Wyoming and headquartered in Florida, with a dedicated team for trans and non-binary creators. It works on revenue share with no upfront or setup fees and no long-term contracts; creators keep ownership of and access to their accounts, and OnlyFans pays out to the creator's own account. The published commission is 25%–50%, scaling with how much of the operation you hand over, with the exact rate in writing before signing; how pricing works sets out the model, and is Bunny Agency legit answers the verification questions directly.

Which is the point of this page: run the checks on every agency, including this one. The vetting checklist is the tool; the table above is the shortlist of things that should end a conversation immediately.