TikTok Influencer Brand Collaboration Phishing Scam
Scammers pose as brand managers reaching out via TikTok DM or email with attractive collaboration proposals, directing creators to fake TikTok 'business verification' portals that harvest login credentials and personal data.
Part of: Influencer Brand Collaboration Phishing
Last reviewed: 8 June 2026
TikTok's creator economy has made influencer brand collaborations a normal part of creator income. As the market has matured, creators expect to receive genuine outreach from brands and agencies. This expectation is the exact hook that influencer collaboration phishing exploits.
A scammer posing as a marketing manager from a well-known consumer brand sends a TikTok DM or a professional-sounding email. The message explains that the brand has been following the creator's content and would like to discuss a paid partnership. The tone is flattering but measured — deliberately avoiding the over-the-top promises that more obvious scams use.
The creator is directed to complete a 'TikTok Business Verification' step before the contract can proceed. This step leads to a fake portal that collects TikTok credentials, bank account details for 'payment setup', and sometimes personal identification documents.
How this scam works on the TikTok brand
Legitimate brand collaborations are negotiated directly in DMs or email and managed through TikTok Creator Marketplace. No collaboration process requires you to sign into a 'TikTok Business Verification' portal on an external website using your TikTok password.
The scam portal is often hosted on a convincing domain such as 'tiktok-business-verify.com' or 'tiktok-creator-contracts.net'. The design closely replicates TikTok's app interface. After credential submission, the creator is shown a 'verification pending' screen while the attacker changes the account password and recovery details.
Some variants are more patient: they conduct multiple rounds of email exchange, send a 'contract PDF' (which may itself be malicious), and build credibility before requesting credentials. The social proof of a seemingly professional negotiation makes victims less likely to scrutinise the final portal link.
Common red flags
- A brand collaboration proposal directs you to an external 'TikTok Business Verification' step on a non-tiktok.com domain.
- The collaboration email address does not match the brand's official domain.
- The portal asks for your TikTok password to 'verify your creator account'.
- You are asked for bank account details or personal ID documents before any contract has been formally agreed.
- The proposal comes via a DM from an account with no posts, a new creation date, or a username that does not match the brand.
- Pressure to act quickly: 'We have a campaign slot available this week — we need your confirmation today.'
How to protect yourself
- Verify brand outreach by independently looking up the brand's official contact details and confirming the inquiry with their real marketing team.
- Handle all TikTok creator partnerships only through the official TikTok Creator Marketplace at creator.tiktok.com.
- Never log in to your TikTok account via a link sent in a collaboration email or DM.
- Do not provide bank account details, copies of ID, or tax documents before signing a verified, legal contract.
- Enable TikTok two-step verification at Profile > Settings > Security > Two-Step Verification.
- Be especially suspicious if a 'brand' bypasses TikTok Creator Marketplace entirely and insists on an external portal.
How to report it
- Report the scam DM to TikTok by tapping the message > More options > Report.
- Report the phishing domain to Google Safe Browsing at safebrowsing.google.com/safebrowsing/report_phish/.
- If your account was compromised, contact TikTok Support through the app's Help Center.
- Report to the FTC at ReportFraud.ftc.gov (US) or Action Fraud at actionfraud.police.uk (UK).
Frequently asked questions
What should a legitimate brand collaboration proposal include?
A genuine brand proposal will come from a verifiable company email address, will not require you to log into external portals with your TikTok credentials, and will proceed to formal negotiation and a proper contract before any personal financial details are exchanged.
Should I ask brands to go through TikTok Creator Marketplace?
You can negotiate terms by email, but using TikTok Creator Marketplace provides an additional layer of verification that the brand is legitimate. If a brand is unwilling to engage with the official platform and insists on external portals only, treat that as a red flag.
I submitted my TikTok credentials via the fake portal. What should I do?
Change your TikTok password immediately at tiktok.com/forgot-password, revoke access for third-party apps at Settings > Security > Apps and Websites, and check that your account email and linked phone number have not been altered.