If your OnlyFans account has been hacked and you can still log in, change the password immediately, turn on Two-Step Authentication and review the Login sessions list in your Account Settings, which is what OnlyFans' help article on someone else accessing your account tells you to do. Then report it through the contact form subject “I think someone else has accessed my account” or support@onlyfans.com. If you are locked out, use the Forgot Password form on onlyfans.com, and if the attacker may also be inside the email account behind it, recover that inbox first.
This guide is for the hours after unauthorised access: a lost login, a changed email or payout method, unknown sessions, or posts and messages you didn't make. Prevention lives in our OnlyFans safety and privacy guide, and if OnlyFans has suspended the account rather than someone else taking it, start with the first 48 hours of a suspension instead.
Signs someone else has been in your account
The Australian Cyber Security Centre's account compromise guide lists general warning signs such as unexpected password resets, being logged out everywhere and a last login that looks wrong. On an OnlyFans creator account, they tend to look like this:
- A password reset email or login alert you didn't trigger.
- Your password stops working, or every device is suddenly signed out.
- A device or location in Login sessions that you can't account for.
- A new email address, phone number or payout method you didn't add.
- Posts, mass messages, prices or scheduled items you never created.
- A withdrawal in Payout Requests that you didn't ask for.
- Subscribers asking about messages or offers that didn't come from you.
Act on any one of them. OnlyFans' Terms of Use say it isn't responsible for lost, stolen or compromised accounts, or for the unauthorised payments and withdrawals that result, so the speed of your own response is what protects your earnings.
Still logged in or locked out? Decision table
Find the row closest to your situation and start with its first move. Every row links the page it is based on.
| Your situation | First move | Then | Source |
|---|---|---|---|
| Still logged in and nothing obvious has changed | Change the password and switch on Two-Step Authentication | Review Login sessions in Account Settings and email support if you need more help | Someone accessed my account |
| Still logged in, but the account email was changed | Make sure your own inbox is secure, then change the OnlyFans password | Tell OnlyFans through the form subject for someone accessing your account that the email was changed without your consent | Contact form |
| Locked out, and your email inbox is still yours | Use the Forgot Password form on the onlyfans.com home page | Once back in, work through the first row | Forgotten password |
| Locked out, and the attacker may be in your email too | Recover the email account through your email provider before anything else | Then reset OnlyFans; until the inbox is yours, every reset link reaches the attacker | ACSC email recovery |
| Your two-step codes are being rejected | Disconnect any VPN, check your device's date and time, and use the newest code | Email support@onlyfans.com if it still fails | Two-step not working |
| You no longer have the phone that receives SMS codes | Log in with one of your saved backup codes | Without backup codes, email support with your @username and the address you signed up with | Lost phone number |
| A notice says you have reached the attempts limit | Wait an hour, or use a backup code | Contact support if neither option works | Interface text |
| The payout method changed or a withdrawal appeared that you didn't request | Call your bank or e-wallet provider and tell them the account may be compromised | Use the contact subject Cancel my payout request and report the access | ACSC payment accounts |
First-hour containment checklist
Work through the four areas in this order. The email account comes first because, as the FTC's hacked account guide explains, whoever controls your inbox can request reset links for your other accounts and lock you out again.
1. The email account behind OnlyFans
- Change the email password by logging in to your provider directly. The ACSC's email recovery guide warns that fake reset links sent by email or message are common.
- Check the recovery email addresses and phone numbers on the inbox and remove any you don't recognise.
- Sign out of all other devices and turn on multi-factor authentication for the inbox.
- Delete forwarding rules and automatic replies you didn't set up; the same guide says attackers use forwarding rules to keep reading mail after a password change, and automatic replies to spread malicious content.
2. The OnlyFans account
- Change the password and set up Two-Step Authentication in Account Settings. OnlyFans' setup article supports authenticator apps such as Google Authenticator or Microsoft Authenticator, or SMS codes to your registered number.
- Consider the Strong two-step option. The interface text says it accepts only authenticator-app codes and stops email codes being sent, which matters if your inbox was exposed.
- Store the new backup codes offline. The same interface text notes that each code works once and that previously issued codes stop working.
- Screenshot Login sessions before anything else changes, and note any device or location you don't recognise. The ACSC notes that changing a password should sign out other devices, so recheck the list afterwards.
- Confirm the email, phone number and any third-party sign-in on the account are yours. The Terms of Use allow login through an approved third party, so if you sign in with another service, secure that account as well.
- Review recent posts, scheduled items, mass messages and prices for anything you didn't create. Our guide to scheduling posts on OnlyFans shows where queued items live.
- Recheck your privacy settings in case they were changed, including the location blocks explained in how to block countries on OnlyFans.
3. The payout method
- Open Banking and Payout Requests. If a withdrawal or method change wasn't yours, call your bank or e-wallet provider straight away, which is the first step in the ACSC's guide for compromised payment accounts.
- Cancel any pending request you didn't make through the contact form subject Cancel my payout request.
- Turn down anyone offering to recover lost money for a fee; the ACSC describes that offer as a common scam tactic.
- Once the account is secure, use our payout problems checklist to sort out any request that is still stuck.
4. Connected accounts, people and tools
- Check every platform you linked from OnlyFans' Account Settings, where the help centre says account linking happens.
- Change any password you reused elsewhere. The ACSC guide tells you to start with accounts that share the compromised password or sign in through the compromised account.
- If messages went out in your name, warn subscribers and followers through your own channels; the FTC suggests telling contacts not to click links that appear to come from you.
- Remove any agency, chatter or tool access you no longer need, using the agency account access checklist for the removal steps.
Report it, then keep an incident log
Tell OnlyFans what happened through the contact form subject for someone accessing your account, or support@onlyfans.com. Give your @username, the email address you signed up with, when you noticed, what changed, and whether any money moved, and attach the Login sessions screenshot. Our guide to contacting OnlyFans support covers what never to include, such as passwords or codes.
In Australia, the ACSC recovery guide points you to ReportCyber for reporting to the ACSC and police, to Scamwatch if a scam was involved, and to its 24/7 hotline on 1300 CYBER1 (1300 292 371). Elsewhere, check your national cybercrime or consumer protection agency.
| Log column | What to write | Example |
|---|---|---|
| Time | When you noticed or acted, with your time zone | 8.02pm AEST |
| What happened | The change or alert you saw, in plain words | Reset email I didn't request, then signed out on my phone |
| Evidence saved | Screenshots, email headers or statement lines, with where you stored them | Login sessions screenshot saved to an offline folder |
| Action taken | Each fix you made, one per line | Removed an unknown forwarding rule from the inbox |
| Contacted | Who you told and any reference you were given | OnlyFans contact form; bank fraud line, reference noted |
| Still open | What you are waiting on and when you will check | Reply from OnlyFans; bank to confirm no transfers went out |
Why the account may lock itself during recovery
OnlyFans' age and identity verification page says all creator accounts face secondary selfie checks on a rolling 30-day cycle, and that a failed check makes the account inaccessible and removes its content from view while moderators review it. A lock in the middle of an incident can therefore be a verification hold rather than the attacker's doing. Explain the takeover in your ticket and be ready to complete identity checks yourself.
The same logic is why sharing your login is risky in the first place. The Terms of Use keep you legally responsible for everything posted from your account, even when someone else helps you run it. If the person behind the takeover is threatening to release your content, treat it as extortion and follow our sextortion safety steps, which include contacting police.
Limitations
This is general security information drawn from OnlyFans' help centre, Terms of Use and interface text, plus ACSC and FTC guidance, as checked on 1 October 2026. Its limitations: only OnlyFans can restore a locked account or reverse changes on its side, setting names and menus can move between app and browser versions, and none of this is legal advice. If you believe money was stolen or you are being threatened, contact your bank and police rather than relying on this checklist alone.
SirenCY, which publishes this guide, is an OnlyFans management agency based in Melbourne; our OnlyFans management agency page explains how agency work is set up.