Hey friends — this week's digest is short but pointed, because our scanners caught something worth flagging directly: a cluster of fake brand sponsorship emails designed to look like exciting partnership offers from companies like Razer and Corsair. All three emails our scanners flagged this period were phishing, and they shared a strikingly similar playbook.
What the scam looks like
You get an email that looks like it's from a recognizable brand, offering a paid partnership or sponsorship. It sounds great — until you notice the pressure. One email demanded a signature within 24 hours. Another used all-caps urgency like "URGENT" and "act now." That urgency isn't an accident. It's the whole point: scammers want you moving faster than your good judgment.
The tells, if you know where to look
- The domain is almost-but-not-quite right. One email came from 'razer-brandpartners-offers.xyz' — not Razer's real domain, and that .xyz ending is a classic cheap-domain giveaway scammers love because it's easy to register in bulk.
- The reply-to doesn't match the sender. In one case, the visible sender was 'corsair-creator-offers.top' but replies were routed to a totally different domain, 'brand-payout-service.ru'. That mismatch means the person who actually reads your reply isn't who they claim to be.
- The "contract" link is a shortener. Multiple emails hid their real destination behind a bit.ly link. Legitimate brand partnership contracts almost never come to you as a mystery shortened link — they come from a known e-signature platform or the brand's actual domain.
Why this works on creators specifically
Sponsorship offers are genuinely exciting, and scammers know that excitement lowers your guard. A real brand deal takes time — legal review, back-and-forth, a real point of contact you can verify. As our data shows, legitimate sponsorships rarely announce a big payment upfront and demand a signature within hours. If an offer pressures you to sign fast, that pressure is the scam, not a bonus perk.
What to do instead
Slow down on purpose. Look up the brand's actual partnerships or PR contact through their official website — not through the email you received — and confirm the offer independently. Hover over links before clicking, and never sign anything through a shortened URL you can't verify.
Small supporting note: this is based on a handful of real flagged emails from our own scans this period — not a huge sample, but the pattern was consistent enough to be worth sharing loudly. Stay sharp out there, and we'll keep watching your inbox with you.