YouTube Hackers Tried to Steal My Channel! Here's How I Caught Them

[00:00] all across the globe, and they almost got me. and it's just a devastating experience and you just don't have all of your YouTube stuff anymore,

[00:15] through the channels that they hack, So by the time you're finished with this video, when it comes to people reaching out to you for anything

[00:29] And you're gonna know about some really sneaky things So grab your notepad if you have one (static crackling)

[00:42] that tried to get me through Twitter, or X, DMs. is because brands typically don't reach out via DMs So, for example, if I tweet at somebody,

[00:58] then, in that case, they might reach back out, but 99.99999% of the time, which is why we have those business inquiry email addresses

[01:13] I'm reaching out on behalf of MSI Would you be interested in discussing this further: Two is that they're reaching out from a company

[01:27] And that contact was through a creator friend of mine, if they wanted to reach out for something. But just in case, and to entertain this conversation,

[01:40] but since I live in Thailand, it made it challenging. and a Thai distributor ghosted me. and I am sharing that with them

[01:52] But then they said, "Nice to meet you. Therefore, we will be able to easily deliver I'd like to introduce you to a collaboration offer with MSI

[02:07] "Through this partnership, you will receive the laptop for your promotional services. at one of your upcoming YouTube videos."

[02:21] is grammatical errors when you are reading through emails But they continued to say, "The advertising integration

[02:33] You will have three months from the date So typically when it comes to things like this, and then it'll usually be within a 30-day window or less.

[02:49] if they're doing some type of campaign, when it comes to this sort of thing. But they gave me a list of the deliverables, which are:

[03:02] highlighting its key specifications. Now I'm gonna pause right here, of nothing else is gonna happen

[03:15] In terms of they're not letting me know anything else or something like that, then it's like, okay, well, maybe. to where they're not gonna give me

[03:29] But they continue to say that "The laptop during the integration to ensure its features Beyond these core requirements,

[03:42] in a way that feels authentic to your content style. regarding the compensation, timeline, or requirements, Please let me know if you're interested in the offer,

[03:56] in terms of "Here's what we have going on. that they're not gonna let me know anything about the laptop I could make a video about editing

[04:09] How does that sound?" that you take the time to review the details you can proceed with signing the contract."

[04:22] I'll arrange the shipment of the laptop to you In this chat, we will be available to assist you I will now send a request to our legal department

[04:37] regarding the promotional integration." I didn't really give a proposal at all. (laughs) And then, you know, I can do it in this way."

[04:51] coming from me in any way, shape, or form. They followed up with, "Hello, And then I did reply, and I said, "That sounds good to me."

[05:04] and the red flags just start falling from the sky. in the corporate Docusign fast application. not put that link here because I don't want anybody

[05:20] I'm gonna blur it out. to gain access to the contract, as a partner of our company."

[05:32] Then they say, "Once on the site, After clicking "Edit Offline," of the contract in the Docusign application.

[05:46] that I didn't want you to see, it's not from Docusign; And I'm gonna tell you how all of that came together and let me know if you are ready to sign the contract."

[06:02] and it was crystal clear to me So I decided, for the sake of making this video, and just see how far we can go with this.

[06:15] I don't click on links out of DMs. If you don't have a Docusign account, Their reply: "Of course, I understand.

[06:29] to prepare the contract for you in a PDF format. So there's two main ways One is getting people to click on links,

[06:43] Two is by sending you PDFs. then they also put something into your computer, So for fun, I replied with,

[06:58] Then we can do a Docusign; no need for a PDF. and send it over once we agree on the terms. And from there, I haven't heard back since.

[07:10] but no reply, of course. is, in addition to not replying back to me, before making this video, and now their posts are protected.

[07:23] now the posts are protected to where, for whatever reason, you can't see their posts anymore. and how easy it can be to fall for this sort of thing.

[07:37] it has a LinkedIn page on it. it looks like it might be legitimate. which they don't.

[07:49] So they bought a bunch of followers for their X account. that almost makes them look legitimate. But there's one place where this clearly falls apart.

[08:01] when one of those hackers watches this video, so you're gonna have to be extra vigilant about this. and you go to their LinkedIn account,

[08:13] is I'm looking at the hover. and I see here that it does say that it is LinkedIn.

[08:25] and it looks like it might be legitimate, because if we go to the account creation, then we see that in over a year, but they joined back in January of 2020.

[08:39] and I'm not sure if they actually hacked this particular account or if they buy them somewhere online,

[08:51] But when you looked at it initially, and it seemed like it was legitimate. And we see that eight months ago, you know,

[09:04] So this side of it looked legitimate, they worked with and that sort of thing. the URL from the supposed Docusign

[09:18] and then I hit search. you can see information about the website. for when they got this domain name

[09:32] is March 18th of 2025. Now, they reached out to me on March 25th of 2025. So this right here is the biggest red flag

[09:45] but this particular one is the "I gotcha" moment this particular person as a scammer. is right here, if you look at the registrar URL,

[10:02] So if we go here, then we can see that this is a place However, if we look this up, that some of them are in Russia.

[10:16] So because of that, that's just another red flag, at least it was for me, because there are a lot of hackers, that are operating out of Russia.

[10:28] then we can also see here that they say that internet service provider. But then if we come down here which point to servers hosting in high-risk services,

[10:45] we can see that Russia is dominating, and then Latvia, and then 1% in the United States. you know, company itself is shady or anything like that,

[11:01] it can really start to paint a nice picture for you is when you do get shady things like that, if this is legit or not."

[11:16] and then you can paste the actual link You don't wanna put it up in the address bar and then you put the website name there,

[11:29] with the one that they reached out to me with, also put out a warning about this particular company. saying, "Hey, there's like this phishing scam going on here

[11:46] And you start to see all of these things Same exact thing here where we have Pirate PR, or pr_pirate, And they have the same person that reached out to me

[12:02] of the same exact thing and essentially the same information to look for these types of things as well,

[12:14] about those companies, to where it might show you a scam with AI and everything; But this is just a lead on things that you can do

[12:29] Now, let's talk about another scam because it's coming directly from YouTube. however, it's not.

[12:42] in your subject line of your email, what you're gonna see Now, in this particular case, you can see that 13 hours ago, and then they sent me another one two hours ago as well.

[12:56] this is gonna be different for everyone that they're doing, but basically what happens is this comes from YouTube. that this is directly from YouTube, so it looks legit.

[13:11] "Like, I wonder what's going on there." because all of those quick checks that you do so it seems like it's real.

[13:24] But what happens is when you click on this particular video, which is YouTube's CEO, and the channel is YouTube Creators,

[13:37] so you know it's not legitimate there. what they're doing is they're trying to get you So here it's saying, "Before proceeding,

[13:52] So the reason they want you to do this that you are logged into your Creator Studio So because of that,

[14:04] And then as they are going through this, please open the document," so on and so forth, And they want you to click on this document.

[14:16] then that gives them everything that they need. in order to take full control of your YouTube channel. it happens so quickly

[14:32] they've already changed your password, and they've already got a live stream that is either running where they are gonna start scamming people.

[14:46] and it's the CEO of YouTube here, YouTube does not send these out. that a private video is shared with you,

[15:00] Unless, let's say that you have and they send you videos for feedback that it's coming from that particular channel.

[15:13] And you can do that by looking in this area right here Now, again, in this particular case, and they know that it seems trustworthy for people.

[15:28] But in your case, if you ever get one of these emails, unless you're expecting somebody to send you something. these are still gonna be coming your way.

[15:42] that it is from a channel that you already know you wanna make sure, in that case, They're not doing this yet,

[15:55] is you see what this looks like here? So as they're sending these out, you know, you look up here so it must be legit."

[16:08] to start sending out emails as well to where it looks like this, but it's not from YouTube. to where they're gonna try to trick people that way.

[16:21] just remotely even looks like this, So make sure that you never click on links. but they're getting savvy there,

[16:34] So you just gotta be super careful there. Docusign is legitimate. If they reach out to you tell them, "Hey, just drop the text here

[16:47] and just put all the texts in the email." Never accept a PDF unless it is from a person as a legitimate person

[17:02] make sure that you are looking into that person and that you just try to run everything, either Docusign or Adobe's signing tool that they have

[17:19] don't want to do that, then make an account yourself and tell them to send you the text, put it in a Docusign, Then that way you're creating these walls and these barriers

[17:33] and get access to your YouTube channel. because they are coming for you. and you're trying to take things to the next level,

[17:45] I'm gonna put a link it right here; go and watch that video. how you can get people watching longer, and I will see you over there.

[18:01] I'll see you next time.