Two OnlyFans agencies, two countries, one control pattern

Two criminal cases from opposite sides of the world reached the charging stage this summer, and both involve people who described themselves as OnlyFans managers. One is in King County, Washington. The other is in Czechia. Nothing has been proven in either.

What makes them worth reading together is not the outcome, which is months or years away. It is that prosecutors and investigative journalists on two continents, working from separate evidence, describe almost identical machinery. Read side by side, the two files amount to a short list of arrangements a creator can refuse at the contract stage.

The Washington case

King County prosecutors charged Nikita Tyukalo, 21, with four counts of human trafficking, one count of money laundering, and one count of leading organized crime. He was arrested on 4 June 2026, is held on $5 million bail, and pleaded not guilty at his arraignment later that month ABC News 4.

Charging documents describe an operation branded Nova Talent Management, run from a rented mansion in Bellevue, that recruited young women on social media with promises of large earnings on platforms including OnlyFans. Prosecutors allege the accounts were created in the women’s names and then taken over: passwords changed, access denied, content production and finances directed by others. Four women are named in the charges over a period running from July 2024 to June 2026 KOMO News.

One number in the filings does more work than any argument we could make here. Prosecutors say a single account generated close to $230,000 in a year and the woman whose name was on it received nothing.

The Czech case

In June 2026, Czech police charged four people connected to a management agency called REACH OUT with human trafficking and pimping committed as part of an organised crime group. The charges carry five to twelve years on conviction, and one defendant is in pre-trial detention. The case followed a 2025 investigation by the Balkan Investigative Reporting Network and Page Not Found into agency practices in the region Balkan Insight.

The reporting behind it is unusually specific about paperwork, which is what makes it useful. Journalists reviewed contracts that gave the agency access to the women’s social and pay-per-view accounts, set the agency’s own bank details as the destination for content sales, imposed confidentiality clauses, and set weekly production quotas. One agreement required twenty photographs, four videos, and four Instagram stories every week, with penalties attached. Some contracts asserted a claim on income after the working relationship had ended Journalismfund Europe.

Police put the proven proceeds at a minimum of 3.6 million Czech crowns and seized roughly 9 million crowns in assets. One woman told the reporters that after she regained control of her own account she could see what it had earned during her year with the agency, roughly $178,000, against about $10,000 that had reached her.

The three levers, in both files

Strip away the jurisdictions and the two records converge on the same three arrangements. None of them require a criminal conspiracy to hurt you. Each of them is a term you can decline in a first meeting.

The account was never in the creator’s hands. In Washington the accounts were allegedly created in the women’s names and the credentials kept elsewhere. In Czechia the contracts handed over account access by agreement. Different routes, identical destination: the person whose face and legal identity are on the account cannot log into it. This is a different failure from the password handover we cover in the red flags guide, because there is no moment where you hand anything over. You simply never had it, which makes it far harder to notice and far harder to reverse.

The money moved through the agency first. OnlyFans pays out to whatever banking details are saved on the account. If those details belong to the agency, then every dollar you earn arrives as a favor rather than a payment, and you have no independent view of what was earned in the first place. The Czech contracts reportedly made this explicit. The $178,000 against $10,000 gap only became visible to that creator once she could see her own dashboard. How payouts, holds, and account banking actually work is set out in our explainer on payout mechanics.

The contract made leaving expensive. Confidentiality clauses, penalty-backed quotas, and claims on income after the relationship ends all do the same job: they raise the cost of walking away past the point where a creator will risk it. Term length, notice windows, and exit mechanics are the clauses that decide how trapped you can become, and they are covered clause by clause in our contracts and commissions guide.

The safe version of all three

The useful thing about this pattern is that the legitimate alternative already exists and costs nothing.

OnlyFans supports manager permissions, a native feature that lets a team work inside your account with scoped access while you keep the login, the two-factor method, and the payout settings OnlyFans Help. An agency that uses manager permissions can chat, schedule, and run campaigns without ever being able to lock you out. An agency that needs more than that is asking for something it does not need to do the work. The step-by-step version lives in our account security guide.

The payout side is simpler still. The bank details on the account should be yours, and your agency should be paid out of what you receive rather than the other way around. Commission arrives after your money does. That single ordering removes the dependency that both of these cases turn on.

And on the contract, three written answers are enough to expose most of the risk: how long is the term, what notice do I give to leave, and what happens to my account and my earnings on the day I do. Any agency that cannot answer those plainly, in the document itself, has told you something.

What a checkable operator looks like

None of this means management is the problem. It means the checkable parts are the ones worth checking.

The agencies that score highest in our public-evidence directory do so on things a stranger can verify from outside: named leadership, a real company identity, a press footprint that exists independently of their own marketing. The top entry, Creators Inc., holds the highest accountability and identity score in the set because its leadership is public and its activity is covered by outlets that are not selling anything, including a national news cycle in July 2026. That is not a claim about its contracts, which we cannot see, and our methodology says so directly. It is a claim about traceability, and traceability is precisely what was missing in both of the cases above.

The distinction matters because a public score and a safe contract are different things. Use the first to build a shortlist. Use the three questions in this article to decide.

What is still unknown

Both cases are unproven. The Washington defendant has entered a not guilty plea, the Czech defendants have been charged rather than convicted, and criminal charges describe an allegation, not a finding.

There is also no public data on how common these arrangements are across the industry. The BBC documentary in June 2026 and the UK anti-slavery commissioner’s subsequent call for a public inquiry both made the same point: nobody currently knows the scale The Independent. We covered that investigation and what it did establish in our report on the BBC findings. Until an inquiry produces numbers, two charged cases on two continents are a pattern worth recognizing rather than a measurement of the market.

What creators can act on today does not depend on any of that resolving. Keep the login. Keep the bank details. Read the exit clause before the welcome call.