Every creator wants faster growth, and that urge has fed a booming shadow market for TikTok followers, likes, and views. New research from cybersecurity firm Malwarebytes shows that this “engagement for sale” industry is riskier than most buyers realize. Behind the polished storefronts sit bots, click farms, and — in a growing number of cases — hijacked accounts. This post breaks down how the scam works, why it puts your account and identity at risk, and what to do instead if you actually want to grow on TikTok.

Table of Contents

1. How the Fake Engagement Market Works
2. The Credential Trap: When “Growth” Means Handing Over Your Account
3. Fake TikTok Ads Accounts: A Second Layer of Risk
4. Lead-Generation Traps Disguised as Money-Making Guides
5. Why TikTok’s Own Numbers Tell the Real Story
6. The Bigger Picture: Funding Cybercrime, Not Careers
7. How to Grow on TikTok Without Getting Burned
8. Frequently Asked Questions
9. Conclusion

How the Fake Engagement Market Works

Websites selling “TikTok growth” rarely look shady at first glance. They present themselves as ordinary marketing agencies, complete with pricing tiers, testimonials, and package deals for likes, comments, followers, or bulk direct messages. Many of these operators do not specialize in one platform — the same storefront often sells identical packages for YouTube, Instagram, and TikTok side by side, which is itself a signal that the “engagement” is manufactured rather than platform-specific.

According to Malwarebytes, the engagement behind these offers typically comes from one of three sources: automated bot networks, human-operated click farms, or accounts that were hijacked from real people. Sellers rarely admit which method they use, and buyers have no practical way to verify the claim either way.

Even when the numbers go up temporarily, the gains are fragile. TikTok’s fraud-detection systems are built to identify and strip out inauthentic activity, and accounts that repeatedly rely on these services risk being flagged, restricted, or banned outright.

The Credential Trap: When “Growth” Means Handing Over Your Account

The most dangerous version of this scam goes beyond simply taking a payment. Some providers ask customers for more than a username — they request the account’s login credentials directly, or push users to authorize third-party app access in exchange for followers or views.

Handing over a password, or granting a shady third party standing access to your account, is effectively giving that provider full control. If the service turns out to be fraudulent, or if its own systems are later breached, your account, your direct messages, and any linked payment details become exposed. This is precisely the mechanism behind many of the account-takeover complaints tied to “growth service” scams — the damage doesn’t happen because TikTok was hacked, it happens because a user voluntarily handed the keys to a stranger.

Fake TikTok Ads Accounts: A Second Layer of Risk

A parallel offering in this underground market is the sale of pre-made TikTok Ads accounts, marketed as “established” and “verified.” Sellers claim buyers can launch ad campaigns immediately, skipping TikTok’s identity checks and verification steps entirely. Many even promise a free replacement account if the original gets suspended.

That guarantee should be a red flag on its own. Buyers have no way to confirm how these accounts were originally created — common methods include stolen identities, fabricated personal details, and payment cards obtained through fraud. When TikTok’s systems catch and suspend one of these accounts, any live ad campaign, ad spend, and business data tied to it disappears with it. A “free replacement” does not recover lost budget or restore a disrupted marketing campaign; it just resets the buyer back to square one, often with the same underlying risk.

Lead-Generation Traps Disguised as Money-Making Guides

A subtler version of the scam targets people looking to earn income through TikTok rather than simply grow a following. These sites advertise a “proven system” for building an account or boosting sales, backed by success stories that can’t be independently checked.

Before revealing what’s actually for sale, the page usually asks for an email address or phone number first. Only after that hand-off does the real offer appear — sometimes a paid course, sometimes an “account management” service, and sometimes a request for direct access to the visitor’s TikTok Shop or TikTok Ads account. Each of these outcomes asks the user to place a significant amount of trust in a company whose legitimacy is nearly impossible to verify from the outside.

Why TikTok’s Own Numbers Tell the Real Story

The scale of TikTok’s enforcement against fake engagement is one of the clearest signs of how large this problem has become. In the first half of 2024 alone, TikTok said it prevented more than 700 million fake accounts from being created and removed over 940 million videos from fake accounts, while also blocking more than 36 billion fake likes and removing a further 379 million-plus fake likes. On the follower side specifically, the platform has previously reported blocking well over 15 billion fake follow requests and removing hundreds of millions of fake followers within the same period.

Those figures matter for two reasons. First, they confirm that fake engagement is not a fringe activity — it is attempted at a scale of billions of actions per year. Second, they show that TikTok’s detection systems are actively hunting for exactly the kind of activity these paid services generate, which is why purchased followers and views so often evaporate, or worse, trigger account restrictions, weeks after the sale.

The Bigger Picture: Funding Cybercrime, Not Careers

Malwarebytes frames this as more than an individual risk. Money spent on fake engagement services flows into an underground economy that also supports account theft operations, botnet infrastructure, and broader cybercrime activity. A creator who pays for 10,000 fake followers isn’t just wasting a marketing budget — they’re contributing revenue to the same networks capable of running large-scale phishing campaigns, credential-stuffing attacks, and coordinated bot operations against ordinary users.

This connects to a wider pattern researchers have tracked across TikTok in the past year, including credential-stealing malware disguised as “free software activation” tutorials and large-scale phishing campaigns built around fake TikTok Shop storefronts. Fake engagement services are simply one more revenue stream feeding the same criminal ecosystem.

How to Grow on TikTok Without Getting Burned

• Never share your password or grant third-party account access in exchange for followers, likes, or views — no legitimate growth service needs your credentials.
• Treat “verified” or pre-made ad accounts as a red flag, not a shortcut. If it skips TikTok’s own verification process, assume it was built fraudulently.
• Be skeptical of unverifiable success stories on landing pages that ask for your email or phone number before explaining what’s actually being sold.
• Focus on watch time and completion rate, which TikTok’s algorithm weighs far more heavily than raw follower counts.
• Enable two-factor authentication on your TikTok account so a leaked password alone isn’t enough for someone to take it over.
• Report suspicious growth-service accounts and sites directly to TikTok, and to your local cybercrime or consumer-protection authority if you’ve already lost money.

FAQ

Does buying TikTok followers actually get accounts banned? It can. Accounts that repeatedly show artificial engagement patterns risk being flagged, restricted, or suspended once TikTok’s fraud-detection systems identify the inauthentic activity.

Is it ever safe to pay for TikTok growth? Malwarebytes’ guidance, and TikTok’s own policies, treat all paid engagement — bots, click farms, or hijacked accounts — as a violation. There is no verified “safe” version of buying followers or likes.

What should I do if I already gave a growth service my login details? Change your TikTok password immediately, revoke any connected third-party app permissions in your account settings, enable two-factor authentication, and check your account activity for unfamiliar logins or posts.

Conclusion

The promise of instant followers, likes, or views is built on a foundation that rarely holds up: bots and click farms produce hollow numbers, hijacked accounts expose buyers to fraud they never agreed to, and “verified” ad accounts sold online are often built on stolen identities. TikTok’s enforcement data shows the platform is actively dismantling this activity at a massive scale, which means paid engagement is not just risky — it’s increasingly short-lived. Real growth on TikTok still comes down to content that holds attention, not manufactured metrics that can vanish, or worse, cost you your account, overnight.