How to spot a fake brand deal

Fake brand deals copy the shape of real ones: a friendly email, a famous brand name, a fee that sounds right for your follower count. What gives them away is the ask. A real brand wants your content and pays you for it. A scammer wants your money, your login, or access to your computer.

What does a fake brand deal look like?

A fake brand deal is an unsolicited offer that, sooner or later, asks you to send money, share bank details, sign in through a link, download a file, or deposit a check. The FTC's warning about bogus brand ambassador managers says these pitches flatter your style or following, name-drop real company staff, and link to sites that look tied to the brand.

Pattern	What they ask for	What you lose
Brand impersonation email	Bank or personal details "to start making payments"	Your identity and bank account
Fake collaboration platform	A Google account sign-in	Your channel or account
Pay for shipping or a starter kit	Card payment or a product purchase	The money you paid
Fake check overpayment	Deposit a check, send part back	The full check amount
Malware "brief"	Download and open a file	Your saved logins and sessions
Task or crypto "promotion" job	A deposit to release your earnings	Every deposit

How do brand impersonation emails work?

Brand impersonation emails pretend to come from a well-known company or its agency and offer free products plus payment to promote them. The FTC says the "tell-tale sign" is a request for personal or bank details so the sender can "start making payments." Once they have that information, the FTC says, the scammers typically disappear.

A newer version targets your account instead of your bank. ESET's October 2026 report describes personalized sponsorship emails that mention the creator's own videos, negotiate rates, and then send the creator to a polished fake "collaboration platform." The site asks the creator to sign in with Google to verify the channel. The sign-in page is fake, and it captures the password and one-time code.

ESET says these campaigns used the names of Hollyland, Nike, and Spotify, and that the platform names and domains change often. In one case the attackers swapped in their own recovery phone and email so the creator could not get back in.

Why would a brand ask you to pay for shipping or buy the product?

A brand that asks you to pay for shipping, buy a starter kit, or purchase products with a "special discount code" is selling to you, not paying you. The FTC's job scams page says honest employers "will never ask you to pay to get a job." Treat a paid brand deal the same way.

The Better Business Bureau described one version in which Instagram users were invited to be "models" or "brand ambassadors" for a charity campaign. They got a discount code for overpriced t-shirts that often never arrived, and the charity either did not exist or never saw the money.

Affiliate programs are different, because they pay you a commission on sales you drive. If you want commission work, look at established programs such as LTK, ShopMy, or the Amazon Influencer Program, and read their terms before you join.

How does the fake check overpayment scam work?

A fake check scam sends you a check for more than you are owed and asks you to send part of it back or on to someone else. The FTC's fake check page says banks must make deposited funds available quickly. It can take weeks for the bank to discover the check is fake, and by then you are stuck paying the money back.

The story around the extra money changes. The FTC lists versions where it covers job supplies, car wrap installers, or fees on a prize. In a brand deal, it might be framed as money for a videographer, props, or a "shipping agent." A brand that sends you more than the agreed fee, then asks you to send the difference back or on to a third party, fits this scam exactly.

Real brands pay the agreed fee by bank transfer, platform payout, or a payment service. A legitimate refund request points to a clause in a contract you signed, such as a clawback if you delete the post early. Never send money back to cover an overpayment, even when the funds look available in your account, because a fake check can show as cleared for weeks. Ask the brand to deduct it from its next payment instead, so no money leaves your account. Our invoicing guide covers what normal payment looks like.

Can a brand brief contain malware?

A brand brief can carry malware, and attackers have used fake sponsorship offers to infect creators' computers. Google's Threat Analysis Group reported in 2021 that attackers sent YouTube creators fake ad collaboration offers for software such as antivirus tools, VPNs, music players, photo editors, and games. The "product" to review was malware.

That malware stole browser cookies, which let the attackers take over logged-in sessions without the password. Google says the attackers moved chats to WhatsApp, Telegram, or Discord to avoid Gmail's link scanning, and used encrypted archives. They then rebranded hijacked channels to run crypto scam livestreams, or sold them for between $3 and $4,000 depending on subscriber count.

Protect yourself with a few habits:

• Read briefs in your browser or email preview. Do not download and run anything.
• Never open a program file, such as .exe or .scr, sent as a "brief" or "demo."
• Treat password-protected archives as a warning sign, because they hide the contents from scanners.
• Keep the conversation in email. Google says the attackers moved creators to chat apps to get around Gmail's protections.

What are task scams and crypto promotion jobs?

Task scams pay you small amounts to like videos or rate products, then demand deposits, often in cryptocurrency, before you can withdraw your "earnings." The FTC's data spotlight says these offers usually start with an unexpected text or WhatsApp message and use phrases like "product boosting." The earnings shown in the app are fake, and the deposits do not come back.

The FTC counted about 5,000 task scam reports in all of 2023 and about 20,000 in the first half of 2024. Reported cryptocurrency losses to job scams were about $41 million in the first half of 2024, against about $21 million in all of 2023. The FTC's rule is short: "Never pay anyone to get paid."

How do you verify that a brand contact is real?

You verify a brand contact by reaching the brand through details you find yourself, never through the phone number, link, or address in the message. YouTube's creator safety page advises calling the company or contacting the person you usually work with before replying to a brand deal email. The FTC gives the same advice.

1. Compare the sender's email domain with the brand's real website. A free email address or a near-miss domain is a reason to check harder.
2. Find the brand's contact page or press contact on its official website, and ask whether the offer is real.
3. If the offer names a platform such as TikTok One or YouTube Creator Partnerships, log in to that platform directly and look for the offer there.
4. Search the brand name, the sender's name, and the word "scam."
5. Ask for a written contract and a payment schedule before you agree to anything. Our contract checklist lists what a real contract covers.
6. Before you sign in anywhere, check that the page is on the provider's real domain, such as accounts.google.com, and refuse any permission to manage your channel.

A real brand will wait while you check. Pressure to decide within the hour is a reason to slow down.

What should you do if you are targeted by a fake brand deal?

If you are targeted by a fake brand deal, stop replying, protect your accounts, try to recover any money, and report it. Do these in order, because account access is the fastest thing to lose.

1. Stop all contact and do not send money, codes, or files.
2. If you entered a password on a fake page, change it now. ESET advises running Google's Security Checkup, removing unknown devices and apps, and undoing any changes to your recovery phone, recovery email, or backup codes.
3. Turn on 2-Step Verification. YouTube recommends choosing a passkey as the second step.
4. If you sent money, contact the payment company at once. The FTC says to ask a gift card issuer for a refund, file a complaint with a wire transfer company, and ask the crypto company you used to reverse the transaction.
5. Report the scam to the FTC at reportfraud.ftc.gov. The FTC wants these reports even if you lost nothing.
6. Report the message or account on the platform where it reached you, using the report option on the message or profile.
7. Tell the real brand. The FTC says it wants to hear from companies whose names are misused, and the brand can warn other creators.

If you would rather not vet cold emails at all, look for deals on creator platforms instead. Our guide to getting brand deals compares the platforms where brands find creators, and our reviews of marketplaces such as Collabstr and Aspire explain how each one pays creators.