They Change the Email. They Don't Need the Nudes.

Models still worry an agency will leak nudes. In five years of matching, I see a duller theft more often: they do not take the photos. They take the login.

In June 2026 the BBC published an investigation into OnlyFans managers in the UK. Journalists spoke to 60 creators and sat inside OFM Empire, a private Telegram of about 24,000 agents. The advice is not coy. One line is worth memorising: “Create an email and password for their OnlyFans. They can’t log in.”

The next step in the same chat: a payout account under the agent’s email, “full control of everything.” Creators who talked to the BBC described exactly that — a changed password, changed bank details, a lie about earnings. Contracts the newsroom saw gave the manager up to 70% after the platform cut, a fine for leaving early, and the right to change the email.

That is not bad customer service. That is a design in which the page stops being yours.

Three keys, not one password

An agency needs chat access. That part is true, and a serious team can do it without theatre. What is not true is that they need recovery of the account.

Keep three things on your side, always:

1. The recovery email. If they can change the OnlyFans mail, they can lock you out in an evening.
2. 2FA on your phone. Not on their “work” number, not inside the agency’s Telegram bot.
3. Payout details. Money should hit your account. If OnlyFans pays the agency and the agency “pays you later,” you are already a creditor of a company you may not find in any register.

When onboarding says “we’ll hop in first, contract after” — that is not speed. That is the order in which leverage arrives before paper.

What I strike off the list without haggling

In five years QueenScout’s shortlist got shorter, not longer. I cut an agency that:

• wants the only login “just to set things up”;
• cannot name a legal entity and a country before the call;
• writes the split as “we’ll see” or “standard”;
• fines an exit against a number that was never real earnings;
• wants payouts on their account “because accounting is easier.”

The BBC also recorded what never appears in the sales DM: threats, a £10,000 “fee” for cutting commission, stories about deleted pages. I will not retell other women’s assaults. I will say where they start. At the email.

What has to be on paper before any access

A written contract you keep. In it: who owns the page, who holds 2FA, where payouts go, the split after OnlyFans’ 20%, who pays for ads, how you leave, and what happens to content. Without that, QueenScout does not introduce. Not because we are virtuous. Because after the email changes, you are no longer negotiating a commission.

If someone already wrote “drop the login, we launch tomorrow” — do not drop it. Write to us. The login is still yours. That is the entire value of this job.