Fortnite Support-A-Creator Code Scams: How Players and Creators Get Burned

Support-A-Creator is a legitimate, well-loved part of the Fortnite ecosystem — but its visibility makes it a perfect cover story for scams aimed at two different victims: players chasing "free V-Bucks," and creators whose codes, audiences, and payouts get hijacked. Here's how both sides get targeted, and how to shut each scam down.

Part of the Fortnite & UEFN Creator Safety guide.

What Support-A-Creator Actually Is

Support-A-Creator (SAC) is Epic's program that lets eligible creators earn a share of the real-money spending of players who enter their creator code in the Item Shop. A supporter types in a code, and a percentage of their eligible purchases flows to that creator. That's the whole mechanic — it's a way to back creators you like, funded by Epic's revenue share, not by you paying extra and not by anyone getting free currency.

Two facts about SAC are the foundation of every scam below: entering a code never gives the supporter free V-Bucks, and a creator's payouts are managed entirely inside Epic's official creator portal. Anything that contradicts those two facts is a scam.

Scams Aimed at Players

"Use My Code for Free V-Bucks"

The most widespread version: a video, post, or DM claims that using a specific creator code — often paired with "completing a quick step" — unlocks free V-Bucks. It never does. Best case, you've been tricked into a fake hype campaign. Worst case, the "quick step" is the hook for the next two scams.

Fake Reward and Redeem Sites (Phishing)

The "free V-Bucks" promise funnels you to a site that asks you to "log in with Epic" or "verify your account" to claim the reward. The page is a fake Epic login. You hand over your credentials, and the attacker takes your account — skins, V-Bucks, and all. There is no reward; the login form was the scam. For the full anatomy of these pages, see our guide on spotting fake Epic Games verification and phishing.

Creator Impersonation

Scammers copy a popular creator's name, avatar, and even their real creator code's look, then run "giveaways" or "use my code" campaigns to redirect that creator's audience to a phishing page. Supporters think they're backing someone they trust; they're being funneled to an attacker. Always reach a creator's code through their own verified channels, not a random DM or comment.

Scams Aimed at Creators

Code and Brand Impersonation

For creators, impersonation is both a reputation problem and a theft problem: a fake "you" tells your audience to use a different code or visit a malicious site, siphoning support and burning trust you spent years building. Monitor for accounts copying your branding, and make it easy for your community to confirm your real code and channels.

Fake Brand-Deal and Sponsorship DMs

A polished message arrives offering a paid sponsorship, a "collab," or a "partnership." The catch is in the ask: download and install our "launcher" or "game build," open this file, or sign in on our "partner portal." The download is malware (often an info-stealer that grabs your Epic session and saved logins), and the portal is phishing. Real sponsors don't require you to install random executables to get paid. Treat unsolicited deals with heavy skepticism, verify the company through independent channels, and never run files from a DM.

Creator-Portal Payout Phishing and Account Takeover

The highest-stakes target is your Epic creator/payout portal. A phishing email — "action required," "payout on hold," "verify your tax info" — links to a fake login. If an attacker gets in, they can redirect your payouts or take over the account entirely. Only ever manage payouts at official Epic domains, never from an email link, and lock the account with strong 2FA.

Collaboration and Credit Scams

In the UEFN/Creative space, "collab" offers can be a cover to get access to your project, your assets, or a credit on your island — then disappear with the work or the clout. Vet collaborators before sharing anything, agree on scope and credit in writing, and check their history before granting project access.

How to Verify a Code and a Sponsorship

• Get codes from the source. Reach a creator's SAC code through their own verified profile, channel, or stream — not a comment, DM, or third-party site.
• Remember the rule: no legitimate offer gives players free V-Bucks for using a code or "verifying" on an external site.
• Confirm sponsors independently. Look up the company through its official site and known contacts, not the address in the DM. Never install a launcher or file to "qualify."
• Manage payouts only on Epic. Bookmark the official creator portal and ignore email links that ask you to log in.
• Verify the people. Before a collab or deal, check the other party in the VerifyUGC creator directory and run them through the blacklist.

If You've Been Scammed

Players: if you entered your credentials on a fake site, secure your Epic account immediately — change your password, enable 2FA, and review sign-in devices. Our Epic phishing guide has the full lockdown checklist.

Creators: report impersonation and code abuse to Epic with evidence, warn your audience through your verified channels, and if you installed anything from a fake sponsor, treat your machine as compromised — scan it and rotate your passwords. Then add the impersonator or fake "sponsor" to the VerifyUGC blacklist so the next creator sees the flag first.

How the Program Actually Pays — and Why That Matters

A lot of scams work because supporters and new creators don't understand how SAC money actually moves. Supporters never pay extra and never receive anything in return beyond supporting the creator — the creator's share comes out of Epic's revenue, calculated on the supporter's eligible real-money spending, and is paid out by Epic on its own schedule into the creator's portal. There is no "instant payout," no "claim your earnings here" link, and nothing a supporter does that yields free currency. Once you internalize that the only legitimate money flow is Epic → creator portal, every "redeem," "claim," "verify to unlock," or "manual payout" message reveals itself as a scam, because none of those steps exist in the real program. Creators new to SAC are the most vulnerable here precisely because they're waiting on a first payout and an "action required" email feels plausible — slow down and confirm anything payout-related only inside the official portal.

Protect Your Code and Your Community

Support-A-Creator works because of trust between creators and the people who back them — which is exactly what these scams attack. Publish your real code where your community can confirm it, build a verified VerifyUGC profile so supporters and sponsors can confirm it's really you, and add the bot to your Discord to keep impersonators and known scammers out. New to the creator side? Start with our free creator safety course.