847 active alerts monitored as of July 6, 2026 — Updated daily

The Charge You Didn't Make

A $12.99 subscription charge. The merchant line reads "ONLYFANS.COM" or "FENIX INTERNATIONAL LTD." You don't have an account. You've never had one. And yet the charge is there, on your Visa, sitting between your streaming renewal and a gas station stop from last Tuesday.

This is not a system error or an accidental rebill from a forgotten trial. It is a deliberate technique used by organized fraud networks to verify stolen payment card data, launder money through a creator payout system, and exploit one of the most reliable psychological shields in modern payment fraud: the reasonable expectation that you won't call your bank and explain which subscription you're disputing.

Key Finding

OnlyFans is not uniquely insecure as a platform. It is useful to fraudsters primarily because of what happens after victims see the charge. Most don't report it. That silence is the product the scheme is actually selling.

$12.5B Global card fraud losses in 2024 (Nilson Report)
~72% Victims who don't report charges on adult platforms (Javelin, 2023)
48–72h Typical window before a stolen card number is blacklisted

Three Techniques, One Platform

Fraud analysts have documented at least three distinct methods currently being applied to OnlyFans' payment infrastructure. They are not mutually exclusive; more sophisticated operations run all three in sequence against the same batch of stolen card data.

  • 01

    Card Testing

    When stolen card numbers are acquired, they cannot be used at scale until verified as live and unblocked. Fraudsters run small test charges across platforms unlikely to trigger immediate flags. OnlyFans subscriptions, typically $5 to $25, are small enough to avoid automatic fraud alerts on most bank systems, and the merchant category code blends into the noise of routine digital spending. A confirmed live card is then either sold at a premium on dark web carding markets or used directly for larger purchases within the 48-to-72-hour window before banks blacklist it.

  • 02

    Creator Account Laundering

    A fraud operation creates one or more OnlyFans creator accounts, then uses stolen card numbers to purchase subscriptions to those accounts. OnlyFans remits 80% of subscription revenue to creators via bank transfer or wire. Stolen money, now cycled through OnlyFans' legitimate payment processor, arrives in a controlled bank account looking like creator earnings. The underlying processor sees a valid subscription transaction; the payout looks like standard creator income.

    In more sophisticated operations, the stolen card funds are layered through prepaid debit cards purchased at retail locations before the original card is blocked. Prepaid Visa and Mastercard gift cards sold at CVS, Walgreens, and Walmart—brands including Vanilla Visa, Green Dot, and OneVanilla—are used as intermediaries that obscure the trail from the original stolen card to the creator payout. Once the OnlyFans payout lands, it is frequently transferred again via CashApp, Venmo, or Zelle to further fragment the chain before any cash withdrawal.

  • 03

    Chargeback Suppression

    Fraudulent charges can be reversed when cardholders file disputes. But chargebacks require a phone call, a written explanation, and in many cases a conversation about what you are disputing. The social weight of an OnlyFans charge reliably suppresses this. People who would call their bank immediately about a fraudulent airline ticket will sit on an adult platform charge for weeks, or permanently, out of embarrassment. Some fraud networks deliberately choose platforms with high embarrassment coefficients to minimize dispute rates and extend the usable life of each stolen card number. Small charges on socially loaded merchants carry the lowest dispute risk in any stolen card batch.

Why Discretion Is the Vulnerability

Payment fraud researchers distinguish between actual fraud and reported fraud with a term borrowed from criminology: the dark figure. For most merchant categories, this gap is relatively small. People dispute fraudulent hotel charges and airline tickets without hesitation because there is no social cost to calling your bank and saying "I didn't book that."

For charges on adult content platforms, the dark figure is measurably larger. A 2023 study by Javelin Strategy and Research found consumers were nearly five times less likely to report a disputed charge on an adult platform compared to a comparable e-commerce site, even when they were confident the charge was unauthorized. Fraud operations have clearly read the same data.

OnlyFans processes several billion dollars in annual payments and has invested in fraud detection infrastructure; its chargeback rates are managed within processor thresholds. But managed chargeback rates and actual fraud rates are two different numbers. When cardholders absorb losses quietly, the fraud simply does not appear in dispute data.

What the Charge Looks Like on Your Statement

On a Visa or Mastercard statement, an unauthorized OnlyFans charge typically appears under one of several merchant names: "ONLYFANS.COM," "OF MEDIA INC," "FENIX INTERNATIONAL LTD" (the platform's UK-based parent company), or occasionally a third-party processor name depending on payment routing. The charge is usually a round or near-round figure matching a standard subscription tier: $5.99, $9.99, $14.99, or $24.99.

Unlike some fraudulent charges, these do not originate from obviously suspicious merchant names or unfamiliar foreign currencies. They look exactly like a legitimate subscription because, from the platform's perspective, they are one. The fraud lives upstream of OnlyFans entirely, in the stolen card data used to fund the subscription.

Statement Recognition

If you see "FENIX INTERNATIONAL LTD" on a UK-origin charge, "ONLYFANS.COM" in USD, or "OF MEDIA" on your statement and don't recognize it: these are the same platform under its parent company name and various payment processor labels. All are disputable with your card issuer if not authorized by you.

What to Do

The single most important thing to understand: your bank does not judge you for disputed charges. Fraud analysts and customer service staff handle these disputes continuously and have no interest in the nature of the charge, only whether you authorized it. The dispute record is financial, not personal. "I did not authorize this charge" is the entirety of what needs to be communicated.

Immediate Steps
  1. Call the number on the back of your card immediately. The faster you report, the sooner the card number is flagged as compromised and replaced before further charges accumulate.
  2. Request a dispute on the specific charge and ask for a new card number. You do not need to explain the nature of the merchant in detail.
  3. Scan the rest of your recent statement for other small, unfamiliar charges. Card testing frequently involves multiple sub-$25 amounts across different merchants within a short window.
  4. File a report at reportfraud.ftc.gov. Individual reports feed into national enforcement data and help investigators identify fraud networks operating at scale.
  5. If you receive follow-up contact offering to "resolve" the charge for a fee payable via CashApp, Venmo, Zelle, or prepaid gift cards (Google Play, iTunes, Amazon, Vanilla Visa), do not engage. No legitimate bank, government agency, or fraud recovery service accepts gift cards or peer-to-peer app payments as a resolution method. This is a secondary scam layered on top of the first.
  6. If you believe your card number was part of a broader data breach rather than isolated skimming, consider a credit freeze while the matter is investigated.
Sources: FTC Consumer Sentinel Network 2024; FBI IC3 2024 Annual Report; Javelin Strategy & Research, Identity Fraud Study 2023; Nilson Report Card Fraud Forecast 2024; ACFE Report to the Nations 2024. Statistics reflect reported figures only; actual incidence rates are higher due to non-reporting in affected merchant categories.