The Scam Email That Has Read Your Book

By James Heppe-Smith · 9 min read

The email arrives on a Tuesday. Someone has read your book. Not skimmed the blurb, read it: they mention the sister, the bit in the third act you were never sure worked, the line you nearly cut. They loved it. They represent a literary agency you can look up, and the agency is real, and so is the person whose name is at the bottom. They would like to know whether you are currently represented.

You know how this ends, because you are reading an article about scams. On a Tuesday, with a book you have been quietly worried about, you might not.

I get several of these a week. Most authors I know get more. Author scam emails are not new. What has changed over the last year is that they have stopped announcing themselves, and the old habit of spotting one by its bad English no longer works.

What changed: the writing, not the fraud

The shape of the fraud is old. Unsolicited flattery, then a referral, then a fee for a service you did not ask for. Vanity presses were doing it before the internet. Fake agents were doing it in the 1990s. Writer Beware has been chronicling the pattern for two decades.

What generative AI added is specificity, at no cost, at volume. The Authors Guild put it plainly in its scam alert of 20 August 2026: “The scammers can now use AI to write their approaches and can sound like they’ve actually read your work. We are far from the days when poor use of English and improper capitalization were easy indications of a scam.”

That is the whole change. Every author I know ran the same internal filter: wrong grammar, random capitals, bin it. It did a lot of work for a lot of years, and it has quietly stopped functioning. The emails are now well written, correctly punctuated, and appear to know your plot.

Victoria Strauss, who runs Writer Beware and has been tracking this wave since the summer of 2025, calls it “the most prolific and aggressive I’ve ever chronicled”. She updates her list of impersonated names “daily, sometimes multiple times a day”.

The three shapes doing the rounds in 2026

Strauss published an update on 28 August 2026 covering what has appeared in the last few weeks. Three variants are worth knowing by sight.

1. The literary agent who is real, and the email that is not

This is the one that worries me most, because the first check most authors run is the one it defeats. A literary agent emails you out of the blue. You google them. They exist, at a real agency, with a real client list. Everything checks out.

Strauss describes the mechanics: the impersonator asks whether you are represented, asks you to send your query letter and manuscript, and then “after an improbably short period of just a few days, refers you to an ‘editor’ who can fix whatever is wrong with your query letter or manuscript, for, of course, a sizeable fee.” Her line on who you are dealing with is the one to remember: “The scammer inhabits both personas.”

The agency did nothing wrong. The agent is a victim too, and several named agents have had their identities used this way. The tell is not the person, it is the address: a Gmail account with the agent’s name mashed together with their agency, rather than the agency’s own domain.

2. The production company that found you

New in the last few weeks. Someone claiming to be a founder or producer at a film or television production company writes to say they have read the book and can see it on screen.

Strauss’s two-part test for this one is the most quotable thing in her post, and I would pin it above the desk: “a) a production company reaching out to you directly is one of the least likely things ever to happen to you as a writer, and b) in the incredibly rare event that it does, the email will come from a company domain, not a Gmail or other non-professional address.”

The Authors Guild is seeing the same thing from the celebrity end. One writer, it reports, “received emails from someone pretending to be Reese Witherspoon.”

3. The same pitch, now in German

Until recently this wave was English only. Strauss has now had several reports of the identical marketing solicitation arriving in German: the same offer of Amazon visibility and Goodreads presence, the same Gmail address, the same praise, the same marketers who cannot be found online anywhere.

If you write in more than one language, or your books are translated, the assumption that you are safe outside English does not hold any more.

One detail from the German examples explains the whole business model. Both emails end by inviting a reply. One asks a friendly open question about how you find your readers. The other makes it even easier: reply with the single word “Interested”. That is the point of the exercise, as Strauss says: the reply “is intended to incentivize response, so that the scammer can draw the writer in over an often-lengthy series of email exchanges designed to make it harder to say ‘no’ when the money ask finally arrives.”

Spotting author scam emails: the tells that still work

Since the writing quality no longer tells you anything, here is what does. Most of these take a few seconds.

• The address, before anything else. A Gmail address from someone whose organisation would obviously have its own domain is the single most reliable signal in the whole set.
• A salutation nobody uses. “Dear Jane Smith” rather than “Dear Jane” or “Dear Ms Smith”. Or “Dear Author”. Or none at all.
• Accurate plot detail plus heavy praise, together. Either alone is fine. Both at once, from a stranger, is the signature of this wave.
• A name that does not match itself. The signature says one spelling, the email address says another. Strauss flags this as a common marker, and it is the sort of thing you only catch if you look.
• Nudging. “Just following up on my last email”, sometimes within hours of the first one.
• A fee where a fee does not belong. Real book clubs, radio shows and conferences do not charge invited guests. Optioning film rights should never involve you paying anyone.
• Payment methods you cannot reverse. Wire transfer, PayPal Friends and Family, Zelle, CashApp, or an invoice through Upwork or Fiverr.
• An invoice missing the boring details. No company address, no phone number, no registered name. Scammers avoid anything that creates accountability.
• A team with no online footprint. A marketing agency whose staff cannot be found anywhere is not a marketing agency.

One more, and it applies to the phone as well as the inbox. The Authors Guild has had reports of these approaches coming by telephone, and its advice there is specific: do not agree to anything on the call, because “even using the word ‘Yes’ can be recorded and used later.”

Two minutes on the email address

Strauss wrote a companion piece on 30 June 2026 devoted entirely to sender addresses, and it is the most practical thing I have read on this. Three patterns beyond the plain Gmail account:

• Lookalike domains. A domain that is almost right. She gives real examples: an address at “thepenguinrandomhouse.com” when the real domain has no “the”, or a “hachettebookgroup.ink” when the real one ends differently.
• Single-character switches. A number standing in for a letter, two letters transposed, one letter added or dropped. “Pengu1n”. “HarpreCollins”. “Hachett”. Strauss notes this technique was used by the manuscript thief Filippo Bernardini, and it is hard to spot at a glance.
• A domain with nothing behind it. Paste the bit after the @ into a browser. Often there is no website at all, or a placeholder.

That last check takes about ten seconds and it is the one I would build the habit around. A real publisher has a website at the address its staff email from.

The rule that covers everything above

As a general rule of thumb, if they contact you (rather than the other way around), the odds are very high that it’s a scam. Reputable publishers, agents, etc. don’t acquire authors by cold-calling them. You’re safest if you assume that ANY out of the blue publishing- or movie rights-related phone call or email is a scam, unless you can directly tie it to a query or contact that you yourself made.

Victoria Strauss, Writer Beware

It is a blunt rule and it will occasionally be wrong. It is still the right default, because the cost of being wrong in that direction is a slightly delayed reply to a genuine approach, and the cost of being wrong in the other direction is several hundred pounds and a bad month.

If you have already paid

Two things, in order.

First, and this one is genuinely nasty: expect a second approach. The Alliance of Independent Authors flags what its Watchdog Desk calls victim retargeting. A scammer takes money from an author until the author works it out and cuts contact. Then the same operation comes back “under a different name, posing as a law firm or law enforcement, claiming they can recover the stolen money, for a fee.” An offer to get your money back is the second half of the same scam.

Second, report it. It feels pointless and it is not: these lists are how the warnings get written.

• Writer Beware takes reports at beware@sfwa.org, and is the reason most of this article exists.
• ALLi’s Watchdog Desk will give a second opinion on a service you are considering, before you pay.
• In the UK, report fraud at reportfraud.police.uk, which is where Action Fraud now points.
• In the US, the FTC takes reports at reportfraud.ftc.gov and the FBI’s Internet Crime Complaint Center at ic3.gov.

The Society of Authors and the Writers’ Guild of Great Britain published joint anti-scammer guidance in August 2026, and if you are a member, the SoA will look at a suspicious approach for you. One member quoted in that coverage had believed she was dealing with the publishing arm of a well-known bookshop chain, and said afterwards: “I got wary before any commitments were made and had the sense to ask SoA’s opinion. They saved me from making an expensive mistake.”

On the numbers, honestly

You will see figures attached to this. Be careful with them. There is no reliable count of how many authors are targeted or how much money is lost, and I would rather say so than repeat something confident and unsourced.

What can be said: every organisation tracking this describes it as widespread and rising. Authors commenting under Strauss’s post report anything from four to over a hundred solicitations a day. That is self-reported, not surveyed, and it plainly depends on how public your author profile is. The one hard figure I found is ALLi’s, which says its Watchdog Desk handles between 2,000 and 3,000 messages a year from authors wanting help or a second opinion. That measures people asking questions rather than people defrauded, which is a different and more hopeful thing.

What we do at Heppe-Smith Publishing

We treat every unsolicited approach as fake until something independent says otherwise, and we check the domain before we read the message. That sounds cynical for a small press. It is not, really: it just moves the burden of proof to where it belongs. If an offer is real, it survives a ten-second check comfortably.

The habit worth building is not suspicion, it is a pause. The whole business model depends on an author reading a flattering email at the end of a long day and replying before thinking. ALLi’s John Doppler puts it best: “They know the pain points that authors face. They know what authors want to hear, what reassures them, what lowers their defenses.”

Nothing you actually want will disappear because you slept on it.

Not sure about one you have received?

Forward it to someone before you reply. Writer Beware, ALLi’s Watchdog Desk and the Society of Authors all do this for free, and would rather see one more email than one more author out of pocket. If you would like a second pair of eyes from us instead, our services page has the contact details, and telling you an email is a scam does not cost anything.