Streams and donations

The Twitch Streamer Donation Redirect Scam, October 2026

Updated 6 October 2026

You typed $5 into a streamer’s chat, the heart animation played, and you assumed the money was in their pocket. It was not. It was in a scammer’s wallet, and the streamer did not get a cent.

What the Twitch streamer donation redirect actually is

You are watching a livestream. The streamer is doing a subathon, or playing something tense, or reacting to something. Their overlay shows a donation ticker. A pop-up slides in from the bottom of the screen: a username you half-recognise, a message that makes you laugh, a $5 tip.

You click. A page opens in your browser, or in a Twitch panel, or in a new tab that looks identical to the platform you think you are using. You type a card number, or you sign in through what looks like Twitch, or you scan a QR code that is supposedly for crypto tips. The page says “thank you”. The streamer keeps playing. You close the tab.

Two days later, $5 is gone. Or $50. Or your card is being used in three countries. None of that money reached the streamer. The overlay you saw was a clip, a still, or a real donation event from a previous stream that has been copied into a fake page the scammer controls.

This is not a Twitch bug. It is a redirect scam, dressed in streamer branding, designed to look like a routine interaction between viewer and creator. The platform is incidental. The trick works because you trust the stream, the chat, and the donation overlay, and the scammer has copied all three.

How the redirect gets in front of you

There is no single delivery method. In October 2026 the four that turn up most often are:

Stolen clip overlays. A scammer records a real donation alert, including the username, the message, and the ticker, and edits it into a fake overlay on a copy of the streamer’s page. The URL is off by one character. The favicon is missing. You do not check.

Chat links. Someone posts a link in the Twitch chat that says “free sub giveaway, click here”. You click. The landing page is a fake donation form. The streamer never posted it. The message is from a bot account or a compromised viewer account.

DM phishing. You donated last week, so the streamer “DMs you” to say their old payment link is broken, here is a new one. The handle is one letter off. The avatar is the same. The DM is from a fake.

Search poisoning. You Google the streamer’s name plus “donate” and the top ad is a copy of their tip page. The real page is below it. You click the ad. This is the most expensive variant, because it catches people who do not even watch the stream, only the creator.

What they all share is a moment of trust. You believe the streamer is the other party. They are not. The other party is a domain registered in the last 30 days, hosted on a server farm, and fronted with a free certificate.

The tell, in plain words

Real donation pages for streamers are run by Twitch, Streamlabs, StreamElements, or a third-party tip page the streamer has linked from their own panel. Each of those has a stable URL the streamer controls. If you clicked into a donation form from inside a stream and the URL does not match that stable URL, you are on a copy.

Other tells in October 2026:

The URL has a hyphen, a number string, or a country code top level domain that does not match the streamer’s normal page. Pay extra attention to .cyou, .click, .rest, .mom, and the longer free TLDs.

The certificate was issued in the last week. Click the padlock and read the issued date. Fresh certificate plus fresh domain is a red flag, not a guarantee of one, but a real one.

You are asked to sign in with Twitch, Discord, Google, or Apple to “confirm” a tip. A tip does not need your social sign in. A scam wants it so they can reuse it.

You are asked to pay in gift cards, crypto to a wallet, or a bank transfer to an account that is not the streamer’s. Real tip processors take cards or, in some cases, PayPal. Nothing else.

The donation amount field defaults to a much higher number than you intended, and the “custom” button is hidden behind a dark tab. Resize the window on desktop, you can usually see the field collapse.

The chat is too quiet, or too loud, for a stream of that size. Scammers seed their own pages with comment screenshots to fake social proof.

If any one of these is true, close the tab. Do not argue with the page. Do not try to “test” it. Closing it now is cheaper than disputing later.

What the law says, and what it will not do for you

In the United States, the FBI treats this as a wire fraud matter under 18 U.S.C. § 1343, and the FTC collects reports through ReportFraud.ftc.gov. In the United Kingdom, Action Fraud is the reporting body and the offence is fraud by false representation under the Fraud Act 2006, section 2. In Australia, Scamwatch takes the report and the relevant criminal code is section 192G of the Criminal Code Act 1995.

None of those reports gets your money back on its own. They build a case file. The recovery is a separate process.

Payment card disputes, the chargeback, are handled by your card issuer under Regulation E in the US for debit cards and under the card network rules for both debit and credit. Visa and Mastercard have updated their dispute rules for “consumer-redirected scams” where a cardholder is tricked into authorising a payment to a fraudster, and these claims are now treated more favourably than they were two years ago, but the burden is still on you to show the merchant was not who they said they were. Screenshots of the fake page, the URL, the certificate issue date, and the real streamer’s actual donation URL are the evidence that wins.

Bank transfers, including Zelle, are covered in the US by the Electronic Fund Transfer Act, but the Consumer Financial Protection Bureau’s 2025 rule on instant payment fraud is in a legal freeze as of October 2026, so reimbursement is not automatic. Document the fraud, file a written complaint, and ask for a reversal under EFTA regardless. The worst the bank can do is say no in writing.

Crypto is not reversible. The wallet is pseudonymous. The exchange that fronts the wallet may freeze funds on a police report, but only if you move in hours, not days.

Gift cards are covered by the FTC’s 2024 gift card rule, which lets you report the card number to the issuer the moment you realise, and the issuer is required to hold the funds. This is the one area where speed actually pays.

What to do in the next hour

Step one. Open your banking app and look at the actual charge. Note the merchant descriptor, the amount, the time, and the card last four. Screenshot it. If you paid by bank transfer, screenshot the transfer confirmation, including the receiving account number and sort code if you have them.

Step two. Go back to the page you paid on. Screenshot the full URL bar with the certificate information expanded. Screenshot the page itself. Screenshot the source of the redirect, whether that is a chat message, a DM, or a Google ad. Use a desktop if you can, mobile screenshots crop too aggressively to be useful in evidence.

Step three. Open the real streamer’s channel and find their real donation link. Screenshot that, with the URL bar visible. This is the comparison that proves the page you paid on was a fake.

Step four. Contact your card issuer or bank. Use the number on the back of the card, not a number the page gave you. Say “I authorised a payment to a merchant that was not who they said they were, I want to dispute it as a consumer-redirected scam, here is my evidence.” Send the screenshots through whatever secure message portal the bank uses, and keep a copy.

Step five. Report the fake page. To Twitch through the streamer’s channel page, and to the domain registrar you can find at whois.com. To Google if the page came in as an ad, through the “report ad” link under the ad. To the FTC, Action Fraud, or Scamwatch depending on your country. None of these is a substitute for the other.

Step six. Reset the password on any account you signed in with on the fake page, even if you only typed it once. Turn on two-factor authentication. Check the security log for the next 30 days. If you typed a card number, request a replacement from your issuer regardless of the dispute outcome, the card is now in a database and it will be tried again.

Why the second stage is the expensive one

The first $5 is the loss most people are willing to write off. It is the second contact that costs them.

Within 48 hours of a fake donation, the scammer calls, emails, or DMs pretending to be the streamer, the streamer’s manager, Twitch support, or a “fraud recovery” service. They have your name, your card last four, and the amount. They use it.

The fake streamer says they have reported the page and need your help “identifying the rest of the victims”. They ask you to fill in a form, which is a credential harvest. The fake manager says they can get the money back if you pay a small processing fee. The fake support says your account has been suspended for fraud and you need to verify with a code that just arrived by SMS, which is your real two-factor code, which you have now handed over.

Do not engage with any of these. Close them. If you genuinely want to help the streamer recover their channel, go to the streamer’s verified social account and use the contact form there. Never use a contact that arrived in a message that followed a scam.

The version that targets small creators directly

The other half of this scam hits the streamers, not the viewers. A creator with under 5,000 followers gets a DM that looks like a brand partnership. The brand wants to sponsor a stream and will send $200 as a deposit, plus a little extra for “equipment”, which the creator should forward to the “freelance videographer” once the stream is done.

The $200 is real, and it is a stolen card. The extra is the creator’s own money, sent to a fraudster’s account. When the original cardholder disputes, the creator is on the hook for the $200 plus the forwarded amount plus fees. This is the classic overpayment scam, dressed in streamer language.

The tell is the same as it has been for 20 years. No brand pays a creator to do work and asks the creator to pay a third party. Brands pay creators, full stop. If money has to move out of your account to release a payment, you are the product, not the partner.

Report the brand account to the platform, do not reply, and if you have already sent money, file a police report and contact your bank in the same hour.

This is general safety information, not legal advice. Scams change. If you need an official desk: FTC ReportFraud or IC3.