Inside a brand deal scam targeting YouTube creators

A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account

For a YouTuber, the approach may look like routine business: a personalized sponsorship email from a global brand and a brief negotiation over rates, followed by an invitation to visit a slick collaboration platform. In some cases, however, the sequence can mask a scam that could part social media content creators from their Google accounts.

One such recent campaign impersonates Hollyland, a legitimate manufacturer of wireless transmission and audiovisual equipment. We’ve traced the scheme from the first contact and the negotiations of a supposed partnership through to the login request. We’ve also spotted several variants where fraudsters repackage the campaign using different brand identities and domains.

Here’s how the ploy works and what to watch for.

The emails

As is so often the case, the scheme begins with a personalized email containing an offer for collaboration. In one case, a journalist in Peru received a “Paid collaboration opportunity” from a sender who introduced herself simply as “Brandi” and claimed to work for Hollyland’s Creator Partnerships team.

Protecting Your Online Presence

It’s important to be cautious when considering sponsorship offers, as a compromised account can be used to spread malicious content and scams. Here are some tips to keep your accounts secure:

  • Verify Offers: Always confirm sponsorship offers through official channels to ensure their authenticity.
  • Check Domains: Pay attention to the sender’s email address and the domain of any website you are directed to, as professional design does not guarantee legitimacy.
  • Be Cautious with Sign-Ins: Before signing in with Google, Apple, or Facebook, make sure you are on the provider’s official domain. Only grant access to applications or services you recognize.
  • Use Strong Passwords: Utilize strong and unique passwords, along with two-factor authentication, to enhance security.

Steps to Take If Your Account is Compromised

If you suspect your account has been compromised, act quickly to regain control:

  • Check recent security events and signed-in devices through Google’s Security Checkup. Remove any unfamiliar devices or connections, change your password, and enable two-factor authentication.
  • If you cannot log in or notice unauthorized changes, use Google’s official account recovery page to regain access. Avoid entering credentials on suspicious sites.

As a YouTube creator, your reputation is key to your success. Protect your Google account, which holds vital information for your business. Stay vigilant against potential threats and carefully scrutinize sponsorship offers to safeguard your online presence and maintain trust with your audience.

Leave a Reply

Your email address will not be published. Required fields are marked *