Brand Deal Scams: How to Spot a Fake Collaboration Offer

A brand deal scam is a fake collaboration offer built to take money, personal details or account access from you. To spot one, check that the sender's email domain matches the brand's website, refuse to pay anything up front, skip any file or login link in the offer, and confirm the deal with the brand directly before you share anything.

Creators are a target because the bait looks like the job. In the FTC's April 2026 data spotlight, nearly 30% of people who reported losing money to a scam in 2025 said it started on social media, and 1 in 3 who lost money to a job or business opportunity scam said the same. The FTC puts reported losses from scams that started on social media at $2.1 billion for 2025.

What do brand deal scams look like?

Fake offers tend to follow 5 patterns, and each one wants something different from you. Knowing the pattern tells you what to protect.

Fake recruiters

The FTC has warned about this one by name. Its October 2023 alert describes a recruiter who "contacts you out of the blue, claiming to be affiliated with a brand you recognize," promises free products and pay for posts, then asks for your personal and banking information so they can pay you.

The FTC's business blog adds that these scammers may drop the names of the brand's marketing staff or executives and send links that look like they belong to the brand or its ad agency. Impersonating companies pays: people reported losing nearly $1 billion to business impersonators in 2025, according to FTC data released in June 2026.

Fake checks and pay-to-join programs

A check that shows up before any work is a warning sign. The FTC's 2024 alert for influencers says "no honest potential employer will ever send you a check to deposit and then tell you to send on part of the money, or buy gift cards with it and send them the card numbers." The check will bounce, it adds, "and the bank will want you to repay that money."

Programs that charge you to take part deserve the same suspicion. The FTC's job scams guide puts it plainly: "Honest employers, including the federal government, will never ask you to pay to get a job."

Malware briefs and login traps

Google's Threat Analysis Group reported in October 2021 on a campaign that lured YouTube creators with fake collaboration offers, often for software like VPNs, antivirus tools or games. Creators who agreed were sent to fake download pages, and the malware stole browser cookies, which can let an attacker into an account without the password. Google said it blocked 1.6 million messages to targets, and that hijacked channels sold for $3 to $4,000 depending on subscriber count.

Login traps skip the download. Instagram's scam guidance says it "will never send you direct messages about your account in the Instagram app," and it flags messages that ask you to log in to read something important, people claiming to be from Instagram security, and people who want to move the conversation off Instagram. YouTube's channel security tips say YouTube will never ask for your password, email address or other account information in an email, message or phone call.

What are the red flags in a collaboration offer?

Pressure, payment requests and anything that touches your login or your device. One flag is a reason to slow down, and 2 or more is a reason to stop.

• A sender address that doesn't match the brand's website domain, or a free email account.
• Lookalike domains with an extra letter, a hyphen or a different ending.
• Pressure to sign up or reply today, before you've had time to ask questions.
• Requests for bank details, ID or a Social Security number before any contract exists.
• Any fee to take part: a starter kit, shipping, "registration" or a first order.
• A check that arrives before the work, or for more than the agreed amount.
• Payment demands by gift card, crypto, a payment app or wire transfer.
• Software to install, an app to test or a password-protected file posing as the brief.
• Pushes to move the chat to a messaging app or text.
• High pay with a vague scope: no deliverables, dates, usage terms or contract.

The FTC lists several of these in its influencer alerts, including a recruiter "using a personal account, email, or number not affiliated with the company they claim to represent," and payment only by gift card, cryptocurrency, a payment app or a wire transfer service.

How do you verify a brand deal is legitimate?

Confirm it through a channel the sender can't control. Find the brand's contact details yourself, check the people involved and get the terms in writing on the brand's domain before you share anything.

1. Open the brand's website yourself and compare its domain with the sender's address, letter by letter.
2. Contact the brand through that website or a publicly listed number, and ask whether the person and campaign are legitimate. YouTube's security guidance gives the same advice for sponsorship emails.
3. Search the company or agency name with words like "scam," "review" or "complaint," as the FTC suggests.
4. Check the contact's professional profile, and whether the brand's own accounts mention the campaign.
5. Ask for a written brief and a contract that names the deliverables, usage, payment terms and the company paying you. Stalling or fresh urgency at this step is your answer.
6. Open documents in a browser preview, and install nothing a sponsor sends.
7. Turn on 2-step verification, and use a passkey where the platform offers one.

Our reply template for inbound offers asks for the brief, deliverables, usage and budget, which doubles as a quick test. A legitimate brand answers those questions, and a scammer tends to steer back to payment details.

Legitimate offers also tend to follow some vetting from the brand's side, such as questions about your audience, past partners and analytics. Our guide to what brands look for in influencers covers those checks, so you'll know what a normal process looks like.

Reviewing inbound offers is part of our Brand Partnerships work, 1 of our 10 services. 1DS Management represents 107 creators, athletes and entrepreneurs, and if you'd like a team checking offers before they reach you, apply for representation.

What should you do if you clicked, paid or shared details?

Move fast: secure your accounts, call your bank, then report it. Speed matters most with stolen logins and money transfers.

• Change the password on any account you entered, sign out of all other sessions and turn on 2-step verification. Signing out matters because stolen session cookies can outlast a password change.
• Scan the device you used for malware before you log back in.
• Call your bank or payment app if you sent money or shared account details, and ask whether the payment can be stopped.
• If you deposited a check, tell your bank before you spend or forward any of it.
• Report it at ReportFraud.ftc.gov and to the FBI's Internet Crime Complaint Center, which calls itself the central hub for reporting cyber-enabled crime.
• Report the account or message on the platform, and tell the brand that was impersonated. The FTC asks companies whose names scammers misuse to report it too.

Report even if you didn't lose money, which the FTC encourages. Then watch for follow-up "recovery" offers promising to get your money back. The IC3 site warns that it never contacts people directly for information or money.