Payout Atlas

Red-flag patterns in DMs from agencies, managers and brands

This page describes patterns, not people. It names no agency, company, server or account, and there is nothing to look a name up in. Every pattern below has also appeared in offers that were real, so treat a match as a reason to run the check in the last column.

The patterns

16 patterns creators describe in public threads.
PatternWhat it looks likeWhy it worksNeutral check
Guaranteed earningsA monthly figure promised before anyone has seen your work.A number stands in for the checks you would run.Ask in writing who pays the guarantee if it is missed.
Upfront fee or verification depositA joining fee, refundable deposit, training or onboarding charge.Small beside the promised return, so it reads as paperwork.Money should move toward you. Advance fees are a named scam pattern.
Asks for a login or a codeNeeds the password to set up a dashboard, or reads you a code to confirm identity.Framed as admin; codes feel less sensitive than passwords.Never share either. The code in your hand is the thing being taken.
An assistant who needs account accessSomeone offering to run your inbox asks for the account itself.Real staffing arrangements exist, so it sounds ordinary.Use delegated roles only. No role for the job means no access.
Admin or screen-share on a callA friendly video call, then a request for admin on a business page.Live conversation removes the pause you would take over text.Grant nothing on a call. Add the lowest workable role later, yourself.
Revenue share plus exclusivity plus no exitA cut of everything, every platform, auto-renewing, no notice period.Each term looks normal alone; the combination is the trap.Read for the termination clause first. No exit, no signature.
No legal entity namedSigning happens off-platform with no company name, number or address anywhere.Leaves nothing to look up and nothing to enforce against.Ask for the registered legal name and number, then check the register.
Gift cards or crypto onlyThe fee or campaign budget arrives only as codes or a wallet transfer.Both are fast and effectively irreversible.Both are named payment red flags. Real budgets move on invoices.
Pressure and deadlinesThe slot closes tonight; reply within the hour.Urgency is there to suppress the checking step.An offer that cannot survive 24 hours was never an offer.
Buy the product to get the dealPurchase it yourself, reimbursed after you post.Sits close to normal gifting deals.If reimbursement is real, it can be paid before you spend.
Overpayment and refund the differenceMore than agreed arrives by mistake; you are asked to return the surplus.Your balance shows the funds, so the money looks real.Available is not cleared. It can reverse days later; never refund from your own balance.
A collab that needs your IDA verification step wanting a passport photo before anything is agreed.Platforms do ask for ID, so it feels routine.ID goes to a platform through its own flow, never to a person.
Promo swap that needs your passwordShout-for-shout where they will post from your account for you.Framed as a favour and a time-saver.Scheduling tools exist. A password swap has no legitimate version.
Impersonated payout or tax noticeA styled message about a tax recalculation, refund or account hold.Anything touching money gets opened.Open the platform yourself, not the link. Note which address it reached.
Fluent but generic professionalismCorrect jargon, a brief, a rate card, no reference to your actual work.Competence reads as legitimacy on an unfamiliar platform.Search a distinctive sentence from the message. Templates get reused.
Pay to join the group or courseA paid guide, mentorship or private group sold as access.Framed as investment rather than cost.The same material is usually free in public communities.

What creators describe

Paraphrased from public threads, linked, without usernames.

What this page is not

Sources