Agency locked you out of your OnlyFans? What to do in the first hour

What should you do in the first hour?

Work from your own phone or computer, keep the order, and screenshot anything that looks changed before you fix it. If you can't get in at all, go to the next section.

1. Secure the email behind your account

   Change its password, then check its recovery phone, recovery email and 2FA, and change anything you didn't set. Remove forwarding rules or filters you didn't create, and sign out devices you don't recognize. Whoever controls this inbox can reset everything else.

   CheckYou can log in, and the recovery phone and 2FA on the inbox are yours.

2. Set a new OnlyFans password

   Use one you haven't used anywhere else. The old password stops working for new logins, the agency's included; the next step closes sessions that are already open. If the agency already changed it and the email is yours, request a password reset to that email.

3. Sign out of every other session

   In your OnlyFans security settings, sign out of all other sessions. This closes the sessions other people are working in, on every device. Do it as well as the new password, not instead of it.

   CheckNo session is left that you can't explain.

4. Check payouts, account email and phone number

   The payout method should be in your name and go to your bank, and the account email and phone number should be yours. If anything changed, screenshot it with the date, then change it back where you can. If you can't, contact OnlyFans support as the account holder. If payouts went to the agency and it hasn't paid you, move the payout method back to your own bank first, save your statements as a record of what was paid out, and talk to a lawyer; this isn't legal advice.

5. Move 2FA to a phone only you hold

   Set 2FA up on your own phone or authenticator app, and remove any phone number or authenticator the agency set up. From then on, any new login needs a code only you can see.

What if you can't get into your email or OnlyFans at all?

Then you go to each platform yourself, as the account holder. OnlyFans verifies each creator's identity, so the account is tied to you as a person, and it has no manager or agency role. You're the one the platform deals with, which also means the agency can't claim the account as its own.

OnlyFans decides what happens next and how fast, so nobody can promise you either. Keep a copy of everything you send and receive, with dates.

What if your marketing pages run on the agency's emails?

In practice, whoever controls the email and phone number a page is registered to controls the page. If your Instagram or TikTok pages sit on the agency's details, it can hold on to them however things go with your OnlyFans account. Ask for them once, in writing, with a list and a date.

Keep it in proportion: your subscribers, chat history and earnings sit on your OnlyFans account, not on the marketing pages. Losing a page costs you a traffic source and the work built into it, not the subscribers you have.

Hi [agency contact],

Please move each marketing page you run for me to my own details by [date]:

[handle] on [platform]
[handle] on [platform]

For each page, please:
1. Change the login email and phone number to [my email] and [my phone].
2. Hand 2FA over to me, so login codes reach only my phone.
3. Remove every other admin or linked account.
4. Confirm in writing when each page is done.

Until then, please don't delete, rename or post to these pages.

Thank you,
[Your stage name]
[Date]

• Send it on the channel your contract names, keep a dated copy, and send one reminder if the date passes.
• If a page still uses your photos after the end date and isn't transferred, Instagram and TikTok both have reporting forms for impersonation and copyright. Check your contract's content clause first; this isn't legal advice.
• Need a page now? Start one on your own email and phone. The old page's followers don't move with you; your subscribers stay where they are.

Should you agree to a bigger cut to get your account back?

Not like this. One version to watch for: the password changes around payout day, and access comes back only if you accept a higher percentage. Whatever the number, a rate set while someone holds your account isn't a negotiation.

What to do instead

1. Secure what you can first, using the first-hour steps.
2. Reply once, in writing, and keep it short. For example: “I don't agree to any change to our agreement. Please make no changes to my account's password, email, 2FA or payout details. I'm not agreeing to any new terms while access to my account is in dispute.”
3. Don't negotiate on a call. If they call, follow up in writing, and save every message with its date.
4. Talk to a lawyer before you pay or sign anything new. Whether this breaks your contract or the law depends on what you signed and where you live. This isn't legal advice.

Already agreed to a higher rate to get back in? Keep a copy of what you agreed to, secure the account right away, and ask a lawyer whether it binds you before you sign anything else.

Wondering whether the new number is high? Compare it with what agencies publish: of the 30 other agencies in our ranking, whose websites we checked between 2026-10-20 and 2026-10-23, 12 publish a commission figure, 11 of them within 25% to 60%. The method is in our ranking by published terms. But the rate isn't the problem here; the pressure is.

What if they threaten to leak content or message your fans?

Don't negotiate, and don't argue. Save every message, talk to a lawyer, and file takedown notices for anything posted without your consent. In many places, sharing intimate content without consent is a crime you can report to the police.

Document everything

• Screenshots with the date and the sender visibleThe handle, number or address, and the whole conversation, not one message.
• What changed on your account, and when you noticedSettings, sessions, payout details, prices, recent mass messages.
• Every link to a copy of your contentWith the date you found it.
• A short log, kept where the agency can't reach itDate, time, what happened, who was involved.

Find and remove copies

The free leak check builds ready-made Google searches for your usernames and stage names, run in your own browser. For each copy you find, the DMCA notice generator builds a takedown notice and shows where to send it.

Messages to your fans

If someone is writing to fans from inside your account, the first-hour steps end that session. If they write to fans or post about you from other accounts, report those accounts on the platform where they appear.

This isn't legal advice. A lawyer licensed where you live can tell you what applies to the threats, your contract and any takedown dispute; bring your log and screenshots.

What do you do once you're back in?

Check what happened while you were out, then end the contract on paper, the way it asks to be ended.

• Look through your accountSessions, email, phone, 2FA, payouts, prices, recent mass messages and the vault. Note anything you didn't do.
• Save your statementsEvery month the agency managed, including this one. The final invoice gets checked against them.
• Send written noticeOn the channel the contract names; the notice date calculator works out your dates. Locking an agency out mid-contract can look like ending it early, so say what you saw and when you secured the account. A notice email template is free to copy.
• Check the final invoiceWork up to your last day, on the basis the contract names, matched to your statements.
• Look for a tail clauseSearch for “survive”, “trailing” and “residual”. Commission after you leave is owed only if a clause says so: how tail clauses work.
• Ask for your content and their copiesRaw files and edits back to you, their copies deleted, confirmed in writing.

If the agency says you ended the contract early and owe something for it, get a lawyer's read before you pay. The full exit order is in how to leave an OnlyFans agency. Switching straight to a new agency? Use the switching plan.

How do you set up the next agency so it can't hold your account hostage?

A lockout like this needs the agency to hold something it never needed: your email, your 2FA, your payouts or pages on its own details. Rule each one out before you sign, with any agency. A session on your account is the one thing it does need, for chat and for work on your page, so check your payout and email settings monthly.

Why each one matters, asset by asset: does an OnlyFans agency own your account? What to send any agency before you sign: questions to ask before signing.

Quick answers