Take the sponsorship. Keep the channel.

Maybe not, and if Bitdefender Security for Creators is working for you, keep it. Antivirus and email screening are useful, but they don’t make your Google account phishing-resistant. The 2026 campaign works by getting you to type your password and code into a fake page. What beats it is how your account is set up: a passkey or security key as the only way in, with the password-and-code route closed, no stray sessions, and editors on the right roles. The Pack is that setup, done once, for a one-time price, with no software and no renewal.

Because afterwards is slow, stressful and out of your hands. One creator couple, while their channel was still lost, asked: “how do we start from scratch?” Before a hack, the fix is an afternoon of settings plus a folder of evidence. The Pack costs about the same as one security key, and if you can’t finish it in an afternoon you get your money back.

No. Real recovery runs through Google and YouTube, and the best routes are free: YouTube’s hacked-channel help, Google account recovery, and @TeamYouTube on X. Creators have publicly called out paid “restoration” services as scams, and we won’t sell anything that looks like one. What we do is make sure that if it ever happens, your Ownership Evidence Kit is already filled in, so the official form gets real answers instead of guesses. We don’t promise faster recovery.

Never, and that’s on purpose. A well-made fake can look perfect, so anyone who certifies an email as “real” is guessing with your channel. The X-Ray and the Sponsor Check only ever report red flags or a match against a known campaign. The best possible answer is “no red flags found in what you sent”, always followed by the verification step: write to the brand through the partnerships contact on its own website before you sign in anywhere. There’s no green in our tools, ever.

Most of the facts are, and we link to the official pages. What you pay for is the order, the screenshots, the decision trees, the templates and the Evidence Kit, put together by someone who does this professionally, so it takes one afternoon instead of a weekend of tabs. If it doesn’t feel worth it, reply to the receipt within 30 days for a full refund.

You can, and it will often catch the obvious ones. It also tends to give you a confident verdict either way, and it doesn’t know which campaign names and domains are live this month. Use whatever helps. Our rule is the same whatever tool you use: verify through the brand’s own website before any sign-in.

Not against this attack. Codes sent by SMS or shown in an authenticator app can be typed into a fake page and relayed in real time, which is exactly what the October 2026 campaign does. Passkeys and security keys are tied to the real Google site, so a lookalike page can’t use them. But adding a passkey doesn’t remove your password or your codes: Google’s own passkey help page says you “still have the option to use your password”. One creator whose account had passkeys still lost it; the attackers then “deleted my passkeys”. A passkey only helps once the older routes are closed. Module 01 walks you through both steps, including when Google’s Advanced Protection is the answer.

No. Never. Everything in the Pack you do yourself, on your own devices. The Sponsor Check form takes pasted text only, with no file uploads. If you ever send credentials or backup codes by mistake, we delete them unused and tell you to change them.

Sponsor Check: your email is used only for your report and deleted after 30 days. We don’t accept attachments, and we never open your links or files. We read the text and headers, check domain registration dates in public registries, and may look link addresses up against Google’s list of known dangerous sites (Google Web Risk). Nothing is processed on employer hardware or networks.

X-Ray: the checklist on this page runs entirely in your browser and sends nothing. The paste-the-email version, when it ships, will read the email (including .eml files) on your device and upload nothing. Only domain names go to public registration databases, and link addresses go to Google Web Risk only if you choose to check them.

You get your money back automatically. The Pack ships within 32 days of pre-orders opening (target 15 Dec 2026). If it isn’t delivered by then, every pre-order is refunded in full without you asking. You can also cancel for a full refund any time before delivery.

Yes, for the Pack. In lower-income countries (India, Pakistan, Bangladesh, Sri Lanka, Philippines, Indonesia and others) a discount code takes 40% off list, so the founding €29 becomes €17 (VAT on top only for EU/UK buyers). The code for your country is shown on this page. If you don’t see one, email hello@creatorlockdown.com and we’ll send it.

This edition is YouTube-only (it’s Google-account based). Twitch and TikTok editions will come if there’s demand. The Pack works at any size. We say 1k–100k because that’s when sponsor emails start arriving and there’s usually no manager to filter them.