
Fake “FBI Agents” Target Scam Victims in DMs
The FBI’s IC3 warns that scammers are impersonating FBI/IC3 staff on social media and messaging apps, especially targeting people who have already been…
Scammers on TikTok are impersonating resin artists by reposting stolen videos and telling viewers to “DM to order.” After moving the conversation into direct messages (and sometimes off-platform), they request deposits or full payment and then disappear, or they try to extract personal/banking details from artists by pretending to want to buy or license work.
Scammers on TikTok build fake resin artist personas by reposting stolen videos from real creators. These clips show satisfying resin pouring or finishing work, which builds trust and interest quickly. The account then invites viewers to DM to order, shifting the transaction away from public comments and into private messages where there is less accountability.
Once a buyer moves into DMs, and sometimes off-platform entirely, the scammer requests a deposit, full payment, or personal details. After receiving payment, the scammer typically disappears without delivering any product. In some cases the account has no genuine process footage at all, which is a strong sign the videos were never made by the person messaging the buyer.
This scam does not only target buyers. Real creators are also contacted directly by scammers posing as buyers, brands, or promoters who claim they want to buy, feature, or license the artist's work. The actual goal is to extract fees, banking information, or other sensitive data from the creator rather than to complete any legitimate transaction.
These scams rely heavily on trust and urgency. Polished, satisfying video content creates an impression of legitimacy, and the push to move quickly into DMs or off-platform discourages buyers from pausing to verify who they are actually dealing with. Because social commerce on TikTok often lacks the accountability structures of established marketplaces, victims have fewer options to recover funds once payment is sent.
The most reliable defense is verification before payment. Buyers should confirm a seller's originality and identity rather than relying solely on polished video content, and should only pay using a method that offers buyer protection, such as a credit card or PayPal. When a linked website is involved, checking for a genuine returns policy, a physical business address, and domain age can help separate legitimate sellers from scam sites using newly registered domains. Creators should treat unsolicited buy, feature, or license offers that request fees or banking information as a warning sign rather than an opportunity.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Scammers repost stolen videos from real resin artists and tell viewers to DM to order, then move the conversation into direct messages where they request a deposit or full payment before disappearing without delivering anything.
Yes. Scammers also contact artists directly claiming they want to buy, feature, or license their work, but the real goal is to extract fees, banking information, or other sensitive data.
Watch for accounts with no original process footage, pressure to pay before verifying identity, and videos that appear stolen or reposted from other creators.
Verify the seller's identity and originality before paying, avoid moving payment off-platform, and use a payment method with buyer protection such as a credit card or PayPal.
You see a gorgeous resin art TikTok, caption says: “DM to order.” Looks legit, right? That’s the trap. Scammers steal real artists’ resin videos, repost them, then push everything into DMs. Once you pay a deposit or full amount, they vanish, or ask for more personal and banking details. Aha moment: a real resin artist’s account shows messy process clips and a history of posts. Scam accounts look too clean, just polished reposts, no behind‑the‑scenes, and they insist, “Only pay in DMs” or off‑platform. Next time you see “DM to order” or a surprise offer to “feature or license” your art, pause. Your move: before you pay or share banking info, verify the account and any linked site independently, or walk away.

The FBI’s IC3 warns that scammers are impersonating FBI/IC3 staff on social media and messaging apps, especially targeting people who have already been…

The article highlights how attackers can quickly build convincing executive “profiles” from public information and use them to manipulate employees. It cites…

North Korea-linked BlueNoroff is using fake Zoom and Microsoft Teams meeting pages shared from hijacked trusted contacts (often via Telegram) to trick victims…

Researchers described a now-patched flaw ("AgentForger") where a single benign-looking ChatGPT link could silently create and publish an attacker-controlled…

Microsoft reported that phishing tied to the Tycoon2FA phishing-as-a-service platform dropped sharply after a disruption, pushing attackers to change tactics…

This roundup describes several real-world social-engineering and human-abuse techniques, including trojanized “installer” lures (ClickFix), large-scale…