OnlyFans now tells creators how to work with agencies and third parties. Here is the new text, and what it changes

Between September 28 and October 5, 2026, OnlyFans added a new block to the Community Guidelines page of its help center. It is not about content and it is not about AI. It is about who controls a creator’s account, her login and her earnings when an agency, a manager or any other third party is involved. We track that page weekly, so we can date the change and quote it exactly. Below: the added text, quoted in extracts; what it does and does not say; why it matters most for chatting, which in our own operation produces about 90 percent of revenue; and the contract points we would want settled, each next to the OnlyFans sentence that inspired it. For transparency: OnlyChatAI sells an AI chatting tool, so read the last two sections as the view of a vendor.

What was added, quoted in extracts

The new material sits under the heading “Community Guidelines” in the help-center index, next to the two-step authentication articles. We quote it as we recorded it on October 5, 2026; the exact publication date is unknown. Our September 28 capture of the same page does not contain it.

How can I work safely with third-parties?
“OnlyFans does not work with or endorse any agencies, managers or third parties. If you choose to work with a third party that assists you with managing or promoting your OnlyFans account please seek independent professional advice regarding the terms of any contract prior to signing it. Remember that our relationship is with you and not with any third-party. You are legally responsible for ensuring that all Content posted and all use of your account complies with the Terms of Service.”

Someone else has access to my account or earnings, what do I do?
“Your OnlyFans account belongs to you. […] Please contact us immediately by reaching out to support@onlyfans.com if: you no longer have access to your account; your password, email address, or account details have been changed without your permission; you are being pressured to hand over control of your account or earnings to a third party; you believe someone is attempting to operate your account without your knowledge or consent; you are concerned that your earnings, personal information, or account settings are being controlled by someone else.”

I am worried a third party may be accessing my account and earnings without my permission. How can I report this?
“If you report that a third party may have taken control of your account, our team will work with you to verify ownership and, where appropriate, to help you restore access. You do not need the permission of any third party to contact OnlyFans about your account and you will not be penalised for reporting an issue to OnlyFans. Reporting concerns about account control or potential exploitation will not automatically result in your account being suspended or your earnings being withheld. Our priority is to ensure legitimate creators have access to and control of their accounts.”

A fourth question, on reporting suspected modern slavery, human trafficking or exploitation, was added in the same block; we do not reproduce it here. One sentence of the second answer, about OnlyFans’ onboarding and moderation processes, is elided.

What it does not say

Three things are worth stating plainly, because the first reactions in agency groups were already overshooting.

• It does not ban agencies. The text assumes creators will work with third parties (“if you choose to work with a third party”) and tells them how to do it: get independent advice before signing, and remember who the contract with OnlyFans is with.
• It does not mention AI, chatbots, chatters or any messaging tool. The separate help-center answer on AI chatbots is unchanged since our September 13 check: “OnlyFans does not have a public facing API and Creators may not directly integrate AI chat bots into the OnlyFans platform.” We covered the history of that sentence in a separate investigation.
• It does not change the Terms of Use or the Fan/Creator contract. Both still show a last-updated date of August 2024 on October 5, 2026, and our weekly captures of both texts are identical to the previous week’s. The addition lives in the help center, which OnlyFans counts as part of its terms, and it is phrased as guidance and a reporting channel, not as a new prohibition.

What it does change: reporting a third party no longer carries an automatic penalty

The operative sentence is the second to last of the third answer: reporting a third party “will not automatically result in your account being suspended or your earnings being withheld”. One of the main reasons a creator stays with an agency that holds her login is the fear of losing the account or seeing payouts frozen if she speaks up. OnlyFans now states in writing that reporting does not trigger those consequences automatically, and that no third party’s permission is needed to contact support. It promises a review, not an outcome: the text says the team will “verify ownership and, where appropriate” help restore access.

For an agency, the practical consequence is simple. Any setup that depends on the creator not being able to walk away is now a setup OnlyFans explicitly invites her to report. That covers changed email addresses, changed passwords, payout details pointed at the agency, and “pressure to hand over control of your account or earnings”. None of this was acceptable before; what is new is that the creator has a stated reporting path that OnlyFans says will not, by itself, cost her the account or her earnings.

Why this lands on chatting

Most agency work on OnlyFans happens inside the inbox. In our own operation, chatting produces about 90 percent of revenue (how an OFM agency makes its money). Chatting is also the activity that most requires someone, or something, to be logged into the creator’s account around the clock. That is where control questions become concrete:

• Who holds the session? A team of human chatters in another time zone needs permanent access to the account, and often to the password and the two-step codes.
• Who sees the messages? Human chatters read the DMs they answer, including the ones fans believe are private with the creator.
• Who can switch it off? If the creator wants to take a conversation back, or stop the whole thing tonight, can she, without asking anyone?

The new text gives those three questions a weight they did not have before. Our interpretation, as a vendor: a software tool is still a third party in the sense of this text, so the question is what it holds. OnlyChatAI runs on the creator’s own connected account: her login stays hers, her payouts keep landing in her OnlyFans balance (we bill a subscription and a commission separately and never touch the account’s bank details), the AI can be switched off per fan or for the whole account in one click, and no human on our side answers her fans. None of this means OnlyFans allows AI chatting: the help-center answer on chatbots stands, and we discussed its history in the investigation linked above. It does mean, in our view, that the agency model that survives this change is the one where the agency brings traffic, strategy and content, and the creator keeps the keys. We wrote about the economics of that split and the unlock ratio behind it.

Our contract checklist, inspired by the text

OnlyFans says “seek independent professional advice”. This is not that advice, and these are our recommendations, not OnlyFans requirements. It is the list of points we would want to see settled in writing before a creator signs with anyone; in brackets, the OnlyFans sentence each one echoes.

• Login and two-step authentication stay with the creator. Access for the agency goes through tools or delegated sessions she can revoke, never through her password. (“Your OnlyFans account belongs to you.”)
• Email and payout details on the account are the creator’s. The agency is paid by invoice or by a documented revenue share, after the money has reached her. (“account details have been changed without your permission”, “earnings … controlled by someone else”)
• Exit in writing. Notice period, what happens to content, scripts and fan lists, and the day the agency’s access ends. (“pressured to hand over control”)
• Visibility. The creator can read every message sent in her name, at any time, and knows whether a human or an AI is answering. (“operate your account without your knowledge or consent”)
• A kill switch. She can pause all outgoing messages herself, immediately, without a ticket. In our experience it is the point contracts forget most often.
• Compliance stays her responsibility, so she gets a say. OnlyFans is explicit that the creator remains legally responsible for everything posted and sent. A contract that lets the agency send whatever it wants in her name shifts the risk to her without the control. (“You are legally responsible …”)

How we know the date

We fetch five OnlyFans documents every week: the Terms of Use, the Acceptable Use Policy, the Fan/Creator contract, the Community Guidelines index and the help-center answer on AI chatbots. Each capture is stored and diffed against the previous one, sentence by sentence. The September 28 capture of the Community Guidelines index does not contain any of the sentences quoted above; the October 5 capture does. We cannot narrow the publication date further than that window. If OnlyFans edits the text again, this article will be updated with the new wording and the date we saw it.