Other
The OFM Scammer Directory: Every Flagged Name, Tactic, and Red Flag in One Place
The OFM space runs on trust and information asymmetry — scammers exploit both, and this directory is the antidote.
Updated Aug 2026 · sourced from 11 YouTube creators and 9 operator groups
Key takeaways
- The uppercase-I-for-lowercase-L trick is the single most-repeated impersonation method in the entire space.
- Multiple named handles — @btzofficiai, @iiquidback, @Philip_R — are flagged across distinct operator groups.
- Real marketplace admins and trusted figures never DM first. Ever.
- Fake traffic scams can trigger thousands in OF chargebacks — the damage outlasts the initial payment.
- Every deal without a vetted middleman is a bet you will probably lose.
Someone just paid $1,600 to unban a model's account. It was rebanned in 48 hours.
The 'service provider' had already vanished.
This is the OFM economy's dirty baseline: a niche full of operators handling real money, sparse paper trails, and zero consumer protection. Scammers didn't stumble into this space — they built infrastructure for it.
Fake usernames. Fake dashboards.
Fake middlemen. A whole parallel ecosystem designed to bleed agencies before they know what hit them.
This directory names names, maps the mechanics, and gives you the verification protocol. Read it once.
Then bookmark it.
The Trick That Keeps Working: Uppercase I, Lowercase l
The most reported impersonation method across multiple distinct operator groups — consistently, across a span from late 2025 through mid-2026 — is the uppercase-I-for-lowercase-l swap. It looks identical at a glance.
It is not.
The prime example is @btzofficiai. That's a capital I at the end, mimicking the real handle @btzofm.
Multiple separate operator groups flagged this specific scam repeatedly between January and May 2026. The consistency is striking — this is not a single rumor.
The same technique has been used to spoof @liquidback with @iiquidback — confirmed across three distinct groups in early 2026.
Verification rule, no exceptions: Never trust a username based on how it looks. Copy it, paste it, compare it character by character. A username in a bio can be faked. The @ handle in the URL bar cannot.
Operators in multiple groups also flag a contactable middleman, @marshal, as a trusted go-between for BTZ-related deals — but note this is CHATTER, not vetted, and you should independently confirm any middleman's identity using the same character-by-character check.
The Named Scammers (CHATTER — Attribute and Hedge Accordingly)
What follows is aggregated from anonymous operator groups. These are allegations, not convictions.
Treat them as serious leads requiring your own due diligence — not as settled facts.
Payment-then-ghost operators: - @Philip_R / @Philip_rdg — one group (mid-2026) reports taking ~$100 in crypto for warmed NSFW accounts and marketing, delivering nothing, then gaslighting the buyer. - @curl_bryant1 / @ofm_davis — one group (early 2026) reports selling fake model contracts, posing as the model, then blocking after payment of roughly 300€. - @noah1zero — one group (mid-2026) reports the pattern of logging chatters into accounts, having them work, then ghosting and locking them out on payday. - @GunnersMA — one group (early 2026) reports $9,300 in sales generated over three weeks, followed by refusal to pay a chatter's $950 owed. - @DBALB1 — one group (mid-2026) reports ghosting chatters on payday while running an AI model called 'Nina Noir.'
Fake traffic dealers: - @tosyme / @mmtosy — one group (mid-2026) reports selling fake traffic that triggered $2,000 in OF chargebacks and fake reviews posted via secondary accounts. The damage here outlasts the fee paid — chargebacks affect your account standing, not theirs.
Fake identity checks and fake marketplaces: - @DropzyWorld / @DropzyWorldOF — one group (early 2026) reports this handle posing as a CupidBot moderator running fake 'identity checks.' Real platform moderators do not conduct ID checks via cold DM. - Oura marketplace — flagged by two separate groups (early 2026) as a scam network. One operator reports a partner getting burned twice there. A third group echoes the warning. - OnlyFinder — one group (early 2026) clarifies that OnlyFinder only sells ranking and ad placement on their own site; anyone DMing you to sell OF accounts through OnlyFinder is a scammer using the brand as cover. (SWCEO, Apr 2025)
Miscellaneous flagged handles: - igmassdms / Henry (also igmassdm, floan) — one group (mid-2026), scammer, proof reportedly in DMs. - @Btcusdkuwait and @dirhamOfmm — one group (early 2026), reported as scammers in account/deal contexts. - @leng23334 (display name 'pitri') — flagged by one group across two separate posts (early 2026). - @Snap1Empire / @jedaiv2s — flagged as suspicious by one group (early 2026). - @Littesttelly — one group (mid-2026) reports an exit scam of ~$350 and alleges placement of illegal content on a model's account. That second allegation, if true, is criminal — not just a refund dispute. - StardustNexus (+39 347 371 4333), Chrisodyssey/Chrisofm24 (+44 7493 285456) — one group (mid-2026) flags both, alongside the Oura marketplace. - CHRIS_ACCTS — one group (early 2026) flags this handle as a TikTok account scammer; demand proof before paying anything.
The Mechanics: How OFM Scams Actually Work
The fake middleman flip. You want to buy a Reddit account or an aged Telegram. Someone offers to act as middleman.
Except they nominated themselves, the middleman account was created last week, and the transaction group was set up by the seller. One operator community had a buyer scammed this way in late 2025 — paid before receiving logins, then got blocked.
Rule: create the middleman group yourself and pull in both parties. Never let the seller introduce the middleman.
The Telegram impersonator. A group operator in early 2026 flagged a simple but effective technique: scammers add themselves to your contacts, and because Telegram shows the name they set, not your saved label, the DM looks legitimate. The counter: save every important contact with a custom label and verify that any incoming message matches your saved label exactly.
The fake dashboard / fake account sale. Someone sells you a monetized OF account or a 'verified' traffic dashboard. You get credentials.
The numbers look real. Then either the seller reclaims the account, or the 'traffic' proves to be bots that generate chargebacks.
The chargeback scenario is particularly brutal — you absorb the financial penalty, not the scammer.
The crypto pump pitch. This one targets creators more than agencies, but it bleeds into the operator space when scammers pitch 'sex-worker-friendly' payment coins. (SWCEO, Jul 2025) Low trading volume on a project specifically targeting adult creators is a textbook pump-and-dump signal.
Check CoinGecko or CoinMarketCap — trading volume, all-time high, all-time low — before touching it. (SWCEO, Jul 2025)
PayPal and Venmo traps. Venmo, Cash App, and PayPal all prohibit payments for adult content. (SWCEO, Jul 2025) Using them creates double exposure: the platform can terminate your account AND the 'buyer' can simply file a chargeback and win, because OF content isn't a protected transaction category.
If operators in your network are still routing real money through these apps, that's a structural vulnerability, not just a policy violation. (SWCEO, Jul 2025)
The Impersonation-by-Emoji Angle (Platforms, Not People)
Impersonation isn't limited to fake handles. Dating apps and social platforms get gamed the same way — and the detection arms race has real lessons for OFM operators managing funnels.
Replacing the @ symbol with a random emoji before a handle reduces automated detection while keeping the signal readable to humans. (Bjorn Olsen, Jun 2024) The camera emoji and @ symbol are the first characters flagged. (Bjorn Olsen, Jun 2024)
The ghost emoji for Snapchat and camera emoji for Instagram are actively banned signals on dating app bios. (Bjorn Olsen, Nov 2023)
This matters because compromised funnels — dating app accounts that get banned mid-campaign — are a vector scammers exploit. They offer 'safe' account setups, charge upfront, and deliver accounts that last 48 hours.
Where Operators Disagree
The evidence isn't uniformly clean. Here are the genuine conflicts:
On middleman identity: Multiple groups point to @marshal as a trusted MM for BTZ-related deals. But one of those same groups also lists @laugh, @bluemm, and @henri77 as trusted options.
No single vetted source (Tier A) confirms any of these individuals. This is CHATTER.
The consensus on using a middleman is ironclad; the consensus on which middleman is not. Verify independently.
On Telegram security: One group in early 2026 recommends aged accounts (5+ years) to reduce bans. Another group from the same period flagged a rumored exploit targeting groups with profile pictures, with some operators removing profile photos as a precaution.
These are not necessarily contradictory, but they reflect genuine uncertainty about the current threat surface. Neither claim is confirmed by a vetted source.
On the Oura marketplace: Two groups call the entire network a scam. No group in our evidence set defends it.
That's notable consensus — but it's still CHATTER. Proceed with caution and seek independent verification before concluding anything.
The Verification Protocol: Non-Negotiable Steps
This is the checklist. Print it, pin it, whatever — just use it.
Before any transaction: - Copy the @username character by character. Open a text editor. Compare. Don't eyeball it. - Check whether the account has ever DMed you proactively. If yes, treat as red flag. Real BTZ, real admins, real trusted sellers — they don't cold-DM. [g3, multiple confirmations Jan–May 2026] - Create the middleman group yourself. Both parties join. You verify both @usernames before any funds move. - For Reddit account deals, check the username against the bot bouncer subreddit. [g3, early 2026] - For Telegram usernames, buy direct from fragment.com — not from resellers. [g1, early 2026] Phishing sites mirror the Fragment UI. - For crypto payments, check trading volume on CoinGecko or CoinMarketCap before touching any 'adult-friendly' coin. (SWCEO, Jul 2025)
Red flags that should stop a deal cold: - The seller rushed you. Real opportunities don't. [g7, mid-2026] - The middleman was introduced by the seller. - The username is in a bio or location field — not the actual @ handle. - The account has no shared OFM groups and appeared recently. [g6, early 2026] - They want PayPal, Venmo, or Cash App for content-related work. (SWCEO, Jul 2025) - They're offering a verified OnlyFinder account sale via DM. [g3, early 2026]
For harassment and scam documentation:
Log everything. Date, time, platform, username, what happened, actions taken. (SWCEO, May 2025)
A documented pattern is what lawyers and police can act on. An anecdote is not. (SWCEO, May 2025)
The Bottom Line
The OFM scam economy is not a collection of isolated bad actors. It's a system — with consistent techniques (the I-for-l swap), consistent roles (fake middleman, fake moderator, fake marketplace), and consistent timing (pay first, deliver never).
The single most corroborated protection in this entire dataset — confirmed across multiple distinct operator groups over a six-month window — is this: admins and legitimate sellers never DM you first, and every deal needs a middleman you vetted, not one they introduced.
Everything else is detail. Important detail, but detail.
Start there.
Sources
On the record (YouTube creators):
- Bjorn Olsen — Onlyfans Traffic: Secrets To Funnelling with Dating Apps MUST WATCH**, Jun 2024. Watch ↗
- Bjorn Olsen — Get LONGER Lifespan on Your Dating App Profiles with these SIMPLE Funnel Hacks (OnlyFans Marketing), Nov 2023. Watch ↗
- SWCEO — EP 130: Dominate Fansly/OnlyFans Without Daily Grind — Let the 80/20 Rule Do the Heavy Lifting, Apr 2025. Watch ↗
- SWCEO — How to Deal with Online Harassment, Stalking & Trolls as an Adult Content Creator | OnlyFans Advice, May 2025. Watch ↗
- SWCEO — Payment Processing/Crypto and Sex Work BONUS, Jul 2025. Watch ↗
Community intelligence: 62 operator claims aggregated from 9 separate private OFM groups (Dec 2025–Jun 2026), corroboration counted across groups. Group identities are withheld to protect sources; browse the underlying intel in the Community Intel Wiki.