Warning for YouTube Creators: A New Scam in 2025

How the Scam Works

The scam unfolds in several carefully designed steps to make the deception convincing:

1. Spoofed Email: Scammers send an email that looks like it’s from YouTube, often with a sender address like no-reply@youtube.com . The message claims that a private video has been shared with you and includes a link to view it.
2. Fake YouTube Channel: Clicking the link takes you to a fraudulent YouTube channel that mimics the official "YouTube Creators" channel. The channel uses similar branding, logos, and artwork to appear authentic.
3. Unlisted or Private Video: The video you’re directed to is set to "unlisted" or "private," meaning you can only view it if you’re signed into your account. This prompts users to log in, potentially exposing their credentials.
4. Malicious Download: The video description contains a link to download a file, often disguised as something official like "new studio rules" or a "YouTube Partner Program update." Instead, the file is an executable (.msi) that installs malware.
5. Urgency Tactic: The email or video description may include threats, such as freezing your account or restricting it for 7 days if you don’t download the file immediately, pressuring you to act without thinking.
6. Malware Payload: Once the file is run, it installs malware, such as a Trojan, which can steal your login credentials, log keystrokes, capture screenshots, and allow scammers to take control of your YouTube channel.

Why It’s Dangerous

Losing a YouTube channel can be devastating for content creators. For those who rely on their channels as a source of income or have invested years into building an audience, this scam poses a serious threat. While larger creators may have the resources or connections to recover quickly, smaller creators often risk permanent loss of their digital identity. Additionally, the malware can compromise other sensitive data on your device, such as passwords for other accounts or personal information, making this threat even more dangerous.

 

Evidence from Analysis

Expert analysis of the malicious file, conducted using tools like VirusTotal, revealed it to be a Trojan known as vhon trojan wind32.loader.gen . This malware is capable of spying on users in multiple ways: intercepting keyboard inputs, capturing screenshots, listing active applications, and manipulating access tokens to steal login information. These findings confirm the real and serious danger this scam poses to the YouTube community.

 

How to Protect Yourself

Fortunately, with a few simple precautions, you can significantly reduce the risk of falling victim to this scam. Here are the key steps:

1. Be Skeptical of Emails: YouTube will never send emails asking you to view private videos or download files for compliance. If you receive such a message, be wary.
2. Inspect Links: Before clicking any link, hover over it to see the actual URL. If the address doesn’t lead to youtube.com , don’t click.
3. Avoid Downloads: Never download or run files from unsolicited emails or untrusted sources, especially if they are executable files like .msi or .exe.
4. Sign-In Caution: Avoid clicking on suspicious links while signed into your YouTube account. If you want to investigate a message, use incognito mode or a browser where you’re not logged in.
5. Use Antivirus Software: Keep your antivirus program updated to detect and block malware before it can cause harm.
6. Report Suspicious Activity: If you receive a suspicious email or encounter a fake channel, report it to YouTube. This helps remove the threat and protect other users.

 

The "YouTube Creators Scam" is a serious threat targeting YouTube creators, but with the right precautions, you can protect your channel and personal data. Be cautious with emails and links, never download suspicious files, and always verify the authenticity of communications. It’s important to remember that YouTube will never contact creators in this way, so stay vigilant. 

Scammers are constantly evolving their tactics, so it’s crucial to stay informed about the latest threats by following trusted cybersecurity sources. Share this article with other YouTube creators to help spread awareness and protect the entire community.