Copyright Strike & Takedown Phishing
Fake copyright or community-standards notices that panic creators into handing over account credentials or paying to 'resolve' the strike.
Last reviewed: 1 June 2026
What this scam is
Copyright strike and takedown phishing scams impersonate the automated enforcement systems of major social media platforms to generate fear and urgency. A creator or account owner receives a message claiming their content has been reported for copyright infringement, community standards violations, or intellectual-property theft. The message warns that their account will be permanently disabled — or their content removed — unless they take immediate action through a provided link.
For creators who depend on their platform presence for income, community, or professional reputation, the threat of account loss is acutely distressing. Scammers rely on this emotional response to short-circuit the careful scrutiny the creator would otherwise apply. The message is designed to look exactly like a genuine platform notice: correct logo, appropriate formatting, and legal-sounding language that mirrors real DMCA and Terms of Service communications.
The provided link leads to a fake platform login page, a 'dispute resolution form' that captures credentials, or occasionally a payment portal where a 'fine' can be paid to resolve the strike. In some variants, the fake notice includes a phone number that connects to a scammer posing as platform legal support.
Creators are especially vulnerable because real copyright strikes do have serious consequences on platforms such as YouTube and Instagram, meaning the underlying threat is credible. The scam exploits familiarity with a genuine system to make a fraudulent message feel routine.
How it works
The scam message arrives by email, direct message, or sometimes as a pop-up on a third-party site. It mimics a genuine platform notification: the platform's logo appears in the header, the subject line contains phrases like 'Copyright Infringement Notice' or 'Content Removal Warning', and the body cites specific-sounding legal frameworks such as the DMCA or EUCD.
The message may even name or describe content from the creator's account — scraped from public posts — to make the notice feel targeted and legitimate. A deadline is stated: the account will be suspended in 24 or 48 hours unless the recipient appeals through a link.
The link takes them to a counterfeit platform login page. Any credentials entered are captured by the scammer, who attempts immediate access. In real-time relay variants, the fake form also captures the OTP code sent by the genuine platform when the scammer initiates login there simultaneously.
Variants that use a payment portal ask for a modest fee described as a 'content licensing resolution charge' or 'administrative penalty'. Paying it simply confirms the victim's card details and willingness to comply, often triggering escalating follow-up demands.
Why this scam works
The threat of losing an account — particularly one tied to income, audience, and years of creative output — produces a strong fear response that overrides normal caution. Creators are intimately familiar with real copyright and community standards systems, so the premise of a strike notice feels entirely plausible.
Scammers also benefit from the fact that genuine platform enforcement communications can be poorly designed and legally dense. When creators have previously struggled to distinguish authentic notices from noise, a convincing fake does not face a high bar. The mimicry of legal language lends an air of official weight.
Finally, the window for action is compressed. A real 24-hour deadline in a genuine strike context would require prompt engagement, so the same artificial deadline in a fraudulent notice prompts urgency without the creator pausing to verify the source.
Common red flags
- Email sender domain does not exactly match the platform's official domain
- Strike notice arrives by DM rather than through the platform's in-app notification system
- Link provided in the message leads to a non-official domain
- Request to log in to an external page to 'dispute' the notice
- Payment required to lift a strike or penalty
- Unusually short deadline — hours rather than days — to respond
- Legal language that is slightly off or references the wrong jurisdiction
- Phone number provided connects to a person rather than an automated system
- Sender email address includes misspellings or extra characters
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Your account has received a copyright strike for content posted on [date]. To appeal and avoid suspension, complete the dispute form at [fake link] within 24 hours.
URGENT: A DMCA complaint has been filed against your account. Failure to respond within 48 hours will result in permanent termination. Resolve at [fake link].
Your recent upload infringes copyright. To prevent account deletion, pay the [amount] content licensing fee at [fake link].
We have received a report that your account violates our Community Standards. Log in at [fake link] to review the notice and submit your appeal.
This is [Platform] Legal. Your content has been flagged. Call [phone number] to speak with a compliance officer and prevent further action.
Common variations
- Community standards variant — claims unrelated-to-copyright policy violation
- Trademark infringement variant — targets businesses using a brand name
- Musicians targeted with fake music rights notices citing specific song titles
- Mass-campaign variant — bulk messages to thousands of creators regardless of content
- Phone-support escalation — notice includes a number connecting to a fake legal team
How to verify before you act
Every legitimate copyright or community standards action taken against your account is logged in that account's own dashboard. Before taking any action prompted by an external message, open your platform's app or website directly and check your notifications, Creator Studio, or Account Health section. If no notice appears there, the external message is fraudulent.
Check the sender's email address character by character. Fraudulent addresses commonly swap letters, add extra words such as 'support' or 'legal', or use a domain that looks similar to the real platform but differs by one character.
Real platforms almost never ask you to log in through an external link to dispute a notice. Appeals are handled inside your account. If a message directs you to an external site for any account action, close it.
For YouTube specifically, all copyright claims and Community Guidelines strikes are visible in YouTube Studio under 'Manage Videos'. No external login is ever required.
Payment methods used
- Credit or debit card
- Payment apps
Who is usually targeted
- YouTube creators
- Instagram and TikTok creators
- Musicians and artists
- Small businesses with branded content
What to do immediately
- Do not click any links — navigate to your account's notification centre directly through the official app or website
- Check your platform's Creator Studio, Account Settings, or Content Manager for any real strikes — genuine notices appear there
- If you clicked a link and entered credentials, change your password immediately and revoke active sessions
- Enable two-factor authentication if not already active
- Report the phishing message to the platform using its built-in reporting tool
- If you made a payment, contact your bank to dispute the charge
How to prevent it
- Always check for strikes in-app first before responding to any external notice
- Use a separate, dedicated email for platform accounts and monitor it carefully
- Enable two-factor authentication on all creator and business accounts
- Familiarise yourself with what genuine copyright notices look like in your platform's notification system
- Never pay any fee to resolve a content strike — platforms do not charge for appeals
- Set up login alerts so you are notified immediately of any access from a new device
Evidence to preserve
- The original email including full headers, or a screenshot of the DM with the sender's handle
- The URL in any links provided (recorded without clicking)
- Screenshot of your actual in-app notification centre showing no real strike
- Payment receipts if you were charged
- Screenshots of any follow-up demands
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
How do I know if a copyright strike is real?
Genuine strikes are always visible in your account's own dashboard — YouTube Studio, Instagram's Account Status page, or the equivalent on your platform. If you check there and see nothing, any external notice you received is fraudulent. You do not need to click any link to verify this.
My account shows a real strike — could it still be a scam?
Yes, scammers sometimes send fake 'dispute assistance' messages to accounts that do have real strikes, offering to resolve the situation for a fee. Disputes are always handled through the platform's own appeal tools at no cost. Any third party charging to resolve a genuine strike is also running a scam.