Fake threats and scams aimed at SMM panel owners

Panel owners are attractive targets. You handle money, you have admin access to customer balances, and you often run the business alone from your phone. Scammers know this, so they send fake threats, fake notices and fake support messages designed to make you panic and act fast. The defence is simple to describe: slow down, verify through a channel you already trust, and never hand over logins, keys or codes.

Below are the scams owners meet most often, how to recognise each one and what to do instead.

Fake "hacker" emails

The message says your panel has been hacked, your database copied, and that everything will be published or deleted unless you pay, usually in crypto, within a day or two. Sometimes it includes an old password from an unrelated data leak to look convincing.

How to recognise it: no proof that is specific to your panel, a short deadline, a crypto wallet address, and often poor detail about how your system works.

What to do:

• Do not reply and do not pay. Paying marks you as someone who pays.
• Sign in normally and check your activity log and recent staff actions for anything unusual.
• If the message includes a real password you use anywhere, change it everywhere it is used, and make sure two-factor sign-in is switched on.
• If you are worried, open a ticket in the PanelHubs owner portal and ask.

Fake provider and payment notices

These look like messages from your provider or payment gateway: "Your API key has expired, log in here to renew", "Your payout is on hold, confirm your account", or "We detected unusual activity, verify now". The link goes to a copy of the real site, built to capture your login.

What to do:

• Never use the link in the message. Type the provider's or gateway's address yourself, or use your bookmark, and check your dashboard there.
• Look for real changes. If your provider balance or gateway account shows nothing unusual, the message was likely fake.
• Check the sender address carefully. One wrong letter in a domain is a classic trick.

Fake support

Someone contacts you on WhatsApp, Telegram or email claiming to be from support, from your payment gateway, or from PanelHubs. They are friendly and helpful, and at some point they ask for your password, your two-factor code or your Admin API key "to fix the issue".

What to do: treat any request for a password, a sign-in code or an API key as a scam. Genuine support does not need them. For PanelHubs specifically, support for owners happens through tickets in your owner portal, and PanelHubs staff can't edit admin balances or impersonate accounts. If someone says otherwise, they are not who they claim to be.

Fake chargeback and legal threats

A message claims a customer has filed a chargeback or a legal complaint and that you must pay, refund to a new account, or click a link to "respond to the case" immediately.

How to recognise it: real disputes come through your payment gateway's own dashboard, with a reference you can look up. They do not arrive as a WhatsApp message asking you to send money to a new account.

What to do: log in to the gateway directly and check for an open dispute. If there is none, ignore the message. If a real customer is unhappy, handle it through your tickets and your normal refund rules.

Phishing for admin logins

This is the goal behind most of the scams above: getting your admin login. Phishing pages copy your panel's sign-in page, or a gateway's, and wait for you to type your details. Once inside, an attacker can change settings, edit balances or steal customer data.

Habits that protect you:

• Turn on two-factor sign-in for yourself and every staff account. PanelHubs supports it for owners, staff and customers.
• Use a password manager and a different password for your panel, your email, your providers and each gateway.
• Give staff only the roles they need, and review the activity log regularly.
• Read new sign-in alerts. If you get one you don't recognise, change your password and check what was done.
• Protect your email account. Whoever controls your email can often reset everything else.

A simple rule for verifying anything

Whenever a message asks you to act urgently, run through three questions:

1. Did I expect this? Unexpected messages deserve more doubt.
2. Can I check it another way? Go to the real website yourself, or contact the company through a channel you already use.
3. Is it asking for a login, a code, a key or money? If yes, stop. That is what scammers want.

It also helps to warn your customers. Scammers sometimes copy your brand to target them with fake top-up pages or fake support accounts. A short broadcast telling customers which channels are really yours protects them and your reputation.

Getting started

No platform can stop every scam message reaching your inbox, but the right tools make the damage much harder to do. PanelHubs gives you two-factor sign-in, staff roles with an activity log, new sign-in alerts and Cloudflare protection. If you want a panel built with those safeguards, you can create yours here.