Two OnlyFans agencies, two countries, one control pattern

Two criminal cases from opposite sides of the world reached the charging stage this summer, and both involve people who described themselves as OnlyFans managers. One is in King County, Washington. The other is in Czechia. Nothing has been proven in either.

What makes them worth reading together is not the outcome, which is months or years away. It is that prosecutors and investigative journalists on two continents, working from separate evidence, describe almost identical machinery. Read side by side, the two files amount to a short list of arrangements a creator can refuse at the contract stage.

The Washington case

King County prosecutors charged Nikita Tyukalo, 21, with four counts of human trafficking, one count of money laundering, and one count of leading organized crime. He was arrested on 4 June 2026, is held on $5 million bail, and pleaded not guilty at his arraignment later that month ABC News 4.

Charging documents describe an operation branded Nova Talent Management, run from a rented mansion in Bellevue, that recruited young women on social media with promises of large earnings on platforms including OnlyFans. Prosecutors allege the accounts were created in the women’s names and then taken over: passwords changed, access denied, content production and finances directed by others. Four women are named in the charges over a period running from July 2024 to June 2026 KOMO News.

One number in the filings does more work than any argument we could make here. Prosecutors say a single account generated close to $230,000 in a year and the woman whose name was on it received nothing.

The Czech case

In June 2026, Czech police charged four people connected to a management agency called REACH OUT with human trafficking and pimping committed as part of an organised crime group. The charges carry five to twelve years on conviction, and one defendant is in pre-trial detention. The case followed a 2025 investigation by the Balkan Investigative Reporting Network and Page Not Found into agency practices in the region Balkan Insight.

The reporting behind it is unusually specific about paperwork, which is what makes it useful. Journalists reviewed contracts that gave the agency access to the women’s social and pay-per-view accounts, set the agency’s own bank details as the destination for content sales, imposed confidentiality clauses, and set weekly production quotas. One agreement required twenty photographs, four videos, and four Instagram stories every week, with penalties attached. Some contracts asserted a claim on income after the working relationship had ended Journalismfund Europe.

Police put the proven proceeds at a minimum of 3.6 million Czech crowns and seized roughly 9 million crowns in assets. One woman told the reporters that after she regained control of her own account she could see what it had earned during her year with the agency, roughly $178,000, against about $10,000 that had reached her.

The three levers, in both files

Strip away the jurisdictions and the two records converge on the same three arrangements. None of them require a criminal conspiracy to hurt you. Each of them is a term you can decline in a first meeting.

The account was never in the creator’s hands. In Washington the accounts were allegedly created in the women’s names and the credentials kept elsewhere. In Czechia the contracts handed over account access by agreement. Different routes, identical destination: the person whose face and legal identity are on the account cannot log into it. This is a different failure from the password handover we cover in the red flags guide, because there is no moment where you hand anything over. You simply never had it, which makes it far harder to notice and far harder to reverse.

The money moved through the agency first. OnlyFans pays out to whatever banking details are saved on the account. If those details belong to the agency, then every dollar you earn arrives as a favor rather than a payment, and you have no independent view of what was earned in the first place. The Czech contracts reportedly made this explicit. The $178,000 against $10,000 gap only became visible to that creator once she could see her own dashboard. How payouts, holds, and account banking actually work is set out in our explainer on payout mechanics.

The contract made leaving expensive. Confidentiality clauses, penalty-backed quotas, and claims on income after the relationship ends all do the same job: they raise the cost of walking away past the point where a creator will risk it. Term length, notice windows, and exit mechanics are the clauses that decide how trapped you can become, and they are covered clause by clause in our contracts and commissions guide.

The safe version of all three

The useful thing about this pattern is that the legitimate alternative is simple and costs nothing.

OnlyFans has no separate manager login. Its terms describe an account accessed with an email address, a username and a password, and say that a third party helping run a creator’s account “does not affect your legal responsibility” OnlyFans ToS. If an agency needs inbox access, it usually comes through third-party software signed in as you, so the safe version is the one where you open the account yourself and keep the email, the two-factor method, and the payout settings. Ask which tool the team will use, where it stores your credentials, and how many people hold a seat. Any role limits inside that tool are set by the vendor and the agency, not by OnlyFans, and your way out stays the same: change the password, change the email password, and re-enrol two-factor on a device you hold. We explain how agency software actually connects separately, and the step-by-step version lives in our account security guide.

The payout side is simpler still. The bank details on the account should be yours, and your agency should be paid out of what you receive rather than the other way around. Commission arrives after your money does. That single ordering removes the dependency that both of these cases turn on.

And on the contract, three written answers are enough to expose most of the risk: how long is the term, what notice do I give to leave, and what happens to my account and my earnings on the day I do. Any agency that cannot answer those plainly, in the document itself, has told you something.

What a checkable operator looks like

None of this means management is the problem. It means the checkable parts are the ones worth checking.

The agencies that score highest in our public-evidence directory do so on things a stranger can verify from outside: named leadership, a real company identity, a press footprint that exists independently of their own marketing. The top entry, Creators Inc., holds the highest accountability and identity score in the set because its leadership is public and its activity is covered by outlets that are not selling anything, including a national news cycle in July 2026. That is not a claim about its contracts, which we cannot see, and our methodology says so directly. It is a claim about traceability, and traceability is precisely what was missing in both of the cases above.

The distinction matters because a public score and a safe contract are different things. Use the first to build a shortlist. Use the three questions in this article to decide.

What is still unknown

Both cases are unproven. The Washington defendant has entered a not guilty plea, the Czech defendants have been charged rather than convicted, and criminal charges describe an allegation, not a finding.

There is also no public data on how common these arrangements are across the industry. The BBC documentary in June 2026 and the UK anti-slavery commissioner’s subsequent call for a public inquiry both made the same point: nobody currently knows the scale The Independent. We covered that investigation and what it did establish in our report on the BBC findings. Until an inquiry produces numbers, two charged cases on two continents are a pattern worth recognizing rather than a measurement of the market.

What creators can act on today does not depend on any of that resolving. Keep the login. Keep the bank details. Read the exit clause before the welcome call.

Correction, 9 November 2026: an earlier version of this article said OnlyFans offers a native manager-permissions feature that gives a team scoped access without the account password. The current OnlyFans terms describe no such feature, and this article has been updated.