Sites promising "legit" OnlyFans leaks are notorious for hidden "click-to-play" overlays that trigger malware downloads or redirect you to phishing pages designed to steal your credit card info.