{"id":71177,"date":"2026-09-30T13:53:10","date_gmt":"2026-09-30T12:53:10","guid":{"rendered":"https:\/\/ekiwi-blog.de\/71177\/grammarly-creator-partnership-scam-beware-of-fake-youtube-partnerships\/"},"modified":"2026-09-30T13:59:30","modified_gmt":"2026-09-30T12:59:30","slug":"grammarly-creator-partnership-scam-beware-of-fake-youtube-partnerships","status":"publish","type":"post","link":"https:\/\/ekiwi-blog.de\/en\/71177\/grammarly-creator-partnership-scam-beware-of-fake-youtube-partnerships\/","title":{"rendered":"Grammarly Creator Partnership Scam: Beware of fake YouTube partnerships"},"content":{"rendered":"<p>A supposedly lucrative partnership with Grammarly, an invitation via the well-known service Miro, and, ultimately, a professionally designed website: at first glance, the request appears entirely credible. In reality, however, it is a phishing attempt that appears to be specifically targeting YouTube creators.<\/p>\n<p><!--more--><\/p>\n<p>The scam is well executed. The attackers use a genuine Miro invitation to build trust, and then redirect users to a fake Grammarly website. There, users are first asked to verify their YouTube channel and then to log in with their Google account. This is precisely where it gets dangerous.<\/p>\n<p>In this article, we\u2019ll show you how the phishing email is structured, how to spot the fake, and why creators in particular should be especially cautious when receiving such supposed collaboration requests.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of content<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/ekiwi-blog.de\/en\/71177\/grammarly-creator-partnership-scam-beware-of-fake-youtube-partnerships\/#Video\" >Video<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/ekiwi-blog.de\/en\/71177\/grammarly-creator-partnership-scam-beware-of-fake-youtube-partnerships\/#The_email\" >The email<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/ekiwi-blog.de\/en\/71177\/grammarly-creator-partnership-scam-beware-of-fake-youtube-partnerships\/#The_phishing_page\" >The phishing page<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/ekiwi-blog.de\/en\/71177\/grammarly-creator-partnership-scam-beware-of-fake-youtube-partnerships\/#Conclusion\" >Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Video\"><\/span>Video<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><iframe loading=\"lazy\" width=\"560\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/NtmRBGUbCDs?si=ZsVOL8u69o8gT2Ul\" title=\"YouTube video player\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_email\"><\/span>The email<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Let\u2019s start with the email \u2013 simply a standard invitation to a Miro board. It\u2019s similar to what you\u2019d see on other services such as Google or Microsoft Office. The idea behind using a familiar service is that it builds trust, so you\u2019re more likely to click on it just to have a look.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-71168\" src=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_1.webp\" alt=\"\" width=\"800\" height=\"770\" srcset=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_1.webp 800w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_1-300x289.webp 300w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_1-768x739.webp 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_phishing_page\"><\/span>The phishing page<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The link in the document leads to the actual phishing page. It\u2019s well put together and looks just like the manufacturer\u2019s original \u2013 a good replica. What stands out is the domain in the address bar; this is where you should start to be suspicious.<\/p>\n<p>Otherwise, we are now asked to enter our channel name.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-71170\" src=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_2.webp\" alt=\"\" width=\"1000\" height=\"605\" srcset=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_2.webp 1000w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_2-300x182.webp 300w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_2-768x465.webp 768w\" sizes=\"auto, (max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<p>Here we can enter whatever we like; the channel information will be displayed.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-71172\" src=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_3.webp\" alt=\"\" width=\"952\" height=\"645\" srcset=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_3.webp 952w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_3-300x203.webp 300w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_3-768x520.webp 768w\" sizes=\"auto, (max-width: 952px) 100vw, 952px\" \/><\/p>\n<p>We then move on to the actual phishing attempt. A supposed Google login window appears. However, this is not the genuine article, but a fake copy, as evidenced by its flawed design, its embedding within the website and its non-functional buttons.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-71174\" src=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_4.webp\" alt=\"\" width=\"604\" height=\"807\" srcset=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_4.webp 604w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2026\/09\/miro_phishing_4-225x300.webp 225w\" sizes=\"auto, (max-width: 604px) 100vw, 604px\" \/><\/p>\n<p>Anyone who enters their details here is effectively handing over their login credentials to the fraudsters. This would give them access to the Google account and, consequently, the YouTube channel.<\/p>\n<p>Important: anyone who has entered any details here should reset their login credentials immediately.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>This phishing scam is very cleverly constructed. Instead of an obviously fake email, it initially uses a legitimate service such as Miro. This makes the invitation appear trustworthy and increases the likelihood that you will actually click on the link it contains.<\/p>\n<p>However, the unfamiliar domain should be noticeable by the time you reach the supposed Grammarly page at the very latest. The embedded Google login is also a clear warning sign. Login details should, as a general rule, only be entered on the official websites of the respective providers.<\/p>\n<p>Particularly in the case of supposed partnerships, it is therefore worth checking senders, links and domains carefully. If in doubt, it is better to contact the company directly via its official website rather than following links from an invitation.<\/p>\n<p>Anyone who has already entered their Google login details on such a page should change their password immediately, check for active sessions and connected apps, and, if they haven\u2019t already done so, enable two-factor authentication.<\/p>","protected":false},"excerpt":{"rendered":"<p>A supposedly lucrative partnership with Grammarly, an invitation via the well-known service Miro, and, ultimately, a professionally designed website: at<\/p>\n","protected":false},"author":1,"featured_media":18731,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1552],"tags":[1656,1602],"class_list":["post-71177","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet-en","tag-phishing-en","tag-security-en"],"_links":{"self":[{"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/posts\/71177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/comments?post=71177"}],"version-history":[{"count":0,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/posts\/71177\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/media\/18731"}],"wp:attachment":[{"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/media?parent=71177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/categories?post=71177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/tags?post=71177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}