The FTC closed 139 enforcement actions tied to deceptive endorsements in the last reporting cycle, and brands footed the bill in most of them, not the creators who posted the content. Agency vicarious liability is the uncomfortable truth hiding inside every influencer contract: when a creator forgets to disclose, the money usually flows uphill to the agency and the advertiser. Who actually pays? Let’s break down the law, the precedent, and the contract language that decides it.
What Vicarious Liability Actually Means in Influencer Marketing
Vicarious liability is a legal principle that holds one party responsible for the actions of another, usually because of a supervisory or economic relationship. In employment law, it’s why a delivery company gets sued when its driver causes a crash. In influencer marketing, the same logic applies to the relationship between brands, agencies, and the creators they hire.
The FTC has been explicit about this for over a decade. Under the FTC’s endorsement guidelines, advertisers can be held liable for false or unsubstantiated statements made by influencers they’ve engaged, even if the brand never wrote the script and never saw the final post before it went live. Agencies sit in the crosshairs too, because they’re frequently the party that recruited the creator, negotiated the rate, and approved the content calendar.
This isn’t theoretical. The FTC’s own guidance states that both advertisers and the ad agencies that create or place content can be held responsible for a lack of material disclosures in native advertising and influencer posts.
If your agency books the creator, reviews the brief, and pays the invoice, you’re not a bystander in the eyes of regulators. You’re a co-defendant waiting to happen.
Why Brands and Agencies Get Named, Not Just Creators
Regulators go after the party with the deepest pockets and the clearest control over the campaign. A solo creator with 40,000 followers rarely has assets worth pursuing. A Fortune 500 brand or a mid-size agency with six-figure retainers absolutely does.
The FTC’s test for liability generally hinges on three questions:
- Did the brand or agency control the content, script, or talking points?
- Did the brand or agency know, or should it reasonably have known, that disclosures were missing or inadequate?
- Did the brand or agency benefit financially from the deceptive post?
Answer yes to any of those, and you’re exposed. That’s why “the creator didn’t follow instructions” is a weak defense in practice. Regulators expect brands to build monitoring into the campaign, not just hope creators remember the #ad tag. We’ve covered how this plays out in adjacent contexts, including the influencer liability gap that emerged after Meta’s teen safety settlement, where platform-level failures still trickled down to advertiser accountability.
The Agency’s Unique Exposure
Agencies occupy a strange middle ground. They’re not the advertiser, but they’re also not an independent third party. Courts and regulators increasingly treat agencies as an extension of the brand’s compliance function, especially when the agency:
- Drafted the creator brief or approved talking points
- Selected creators using an internal vetting process
- Reviewed or approved content before publication
- Managed the payment relationship directly with the creator
If any of those boxes get checked, “we just connected the brand with the creator” won’t hold up. The more operational control an agency exercises, the more liability it inherits. This is part of why cyber and media liability insurers now ask detailed questions about creator vetting workflows before writing policies, a shift we detailed in our look at E&O insurance coverage gaps for AI-generated and influencer content.
Where Contracts Actually Fail
Most influencer contracts have a disclosure clause buried somewhere in the boilerplate. It usually says something like “creator agrees to comply with all applicable FTC guidelines.” That sentence feels protective. It isn’t.
Here’s the problem: regulators don’t care what your contract says the creator promised. They care what actually got published. A contractual indemnification clause might let you sue the creator for breach after the fact, but it does nothing to stop the FTC complaint, the consent decree, or the reputational fallout that happens first. Indemnification is a recovery mechanism, not a shield.
Smart agencies are rewriting contracts to include:
- Pre-publication review rights, giving the agency or brand the ability to approve disclosure language before anything goes live
- Mandatory disclosure templates, so creators aren’t improvising hashtag placement
- Audit and takedown clauses, allowing immediate removal of non-compliant content without lengthy negotiation
- Insurance requirements, requiring creators above a certain follower threshold to carry their own media liability coverage
None of these eliminate vicarious liability entirely, but they build a documented compliance trail. If regulators come calling, a brand that can show proactive monitoring looks very different from one that shrugged and hoped for the best.
Scripted Content Raises the Stakes
Liability gets murkier when brands supply scripts, talking points, or pre-approved claims. A creator reading brand-supplied language about product efficacy isn’t making an independent endorsement anymore, they’re functioning as a mouthpiece. That shift matters legally. It moves the content closer to traditional advertising, which carries stricter substantiation requirements than organic-feeling endorsements.
We’ve written before about how scripted creator content creates an “implied experience gap,” where audiences assume a creator personally used and tested a product even when the content was written entirely by the brand’s marketing team. That gap is exactly where regulators look first, because it suggests intentional deception rather than a creator’s sloppy disclosure habits.
If your agency is supplying scripts, you own more of the liability, not less. The more editorial control you exercise, the weaker the “independent contractor” defense becomes.
AI-Generated Endorsements Complicate the Math
Add AI-generated testimonials and synthetic creator content into the mix, and the liability question gets even thornier. Who’s responsible when an AI tool generates a product claim that a human creator never actually verified? Right now, the FTC’s answer leans toward treating the brand and agency as accountable, since they selected and deployed the tool.
Our coverage of the FTC disclosure gap around AI-generated testimonials goes deeper into this, but the short version: AI doesn’t dilute liability, it concentrates it. There’s no individual creator to point to as the responsible party, which means the brand and agency absorb the full weight of any enforcement action.
How Agencies Are Limiting Exposure Right Now
A handful of operational changes are becoming standard practice among agencies that have been burned before, or that simply read the FTC’s enforcement patterns closely.
- Centralized disclosure checklists built into campaign management platforms, so creators can’t submit content for approval without confirming disclosure placement.
- Third-party compliance audits, run quarterly, to spot-check live content against FTC and state-level disclosure rules. Our breakdown of disclosure rules across regulators is a useful reference point for building these checklists since requirements vary by jurisdiction.
- Tiered creator vetting, where higher-risk categories (health claims, financial products, children’s content) trigger mandatory legal review before content goes live.
- Documented training, requiring creators to complete a short compliance module before onboarding, with the completion record kept on file as evidence of good-faith effort.
None of this is glamorous work. It’s also exactly what separates agencies that survive an FTC inquiry from ones that end up as the cautionary case study in next year’s industry report.
A consent decree doesn’t just cost money. It costs client trust, and clients remember which agency put them in that position.
What This Means for Budget and Risk Planning
Compliance infrastructure costs money, but it’s cheaper than litigation, cheaper than a consent decree, and dramatically cheaper than losing a retainer client after a public enforcement action. According to eMarketer, influencer marketing spend continues climbing year over year, which means regulatory scrutiny is climbing right alongside it. The FTC has made clear it intends to keep pace, and state attorneys general are increasingly active in this space too.
Agencies that build disclosure compliance into their standard operating procedure, rather than treating it as a one-off legal review, are the ones that will keep landing the enterprise accounts that can’t afford reputational risk. Platforms like Sprout Social and workflow tools referenced by HubSpot now include compliance-adjacent features for exactly this reason: brands are demanding it.
FAQs
Frequently Asked Questions
Can an agency be held liable for a creator’s FTC violation even without a direct contract?
Yes. Liability typically hinges on control and benefit, not just contractual relationships. If an agency recruited the creator, approved content, or profited from the campaign, regulators can pursue the agency regardless of how the contract is structured.
Does an indemnification clause protect an agency from FTC enforcement?
Not directly. Indemnification clauses let an agency recover costs from the creator after the fact, but they don’t prevent the FTC from pursuing enforcement action against the agency in the first place.
What’s the difference between brand liability and agency liability?
Brand liability usually stems from being the party that benefits from the sale. Agency liability stems from operational control, meaning who selected the creator, approved the content, and managed compliance oversight during the campaign.
Are micro-influencers less risky from a compliance standpoint?
Not necessarily. Smaller creators often have less compliance training and less legal support, which can actually increase the risk of missed disclosures, even though individual campaign reach is lower.
How often should agencies audit creator content for compliance?
Quarterly audits are a common baseline, though high-risk categories like health, finance, or children’s products warrant more frequent review, often on a per-campaign basis.
Does AI-generated creator content change who’s liable?
It tends to concentrate liability on the brand and agency, since there’s no independent human creator to treat as a separate responsible party in the endorsement.
The takeaway: stop treating disclosure compliance as a creator problem and start treating it as an agency operations problem. Build the audit trail before you need it, because the FTC isn’t going to wait for your contract renegotiation.
Top Influencer Marketing Agencies
The leading agencies shaping influencer marketing in 2026
Agencies ranked by campaign performance, client diversity, platform expertise, proven ROI, industry recognition, and client satisfaction. Assessed through verified case studies, reviews, and industry consultations.
Moburst
-
2
The Shelf
Boutique Beauty & Lifestyle Influencer AgencyA data-driven boutique agency specializing exclusively in beauty, wellness, and lifestyle influencer campaigns on Instagram and TikTok. Best for brands already focused on the beauty/personal care space that need curated, aesthetic-driven content.Clients: Pepsi, The Honest Company, Hims, Elf Cosmetics, Pure LeafVisit The Shelf → -
3
Audiencly
Niche Gaming & Esports Influencer AgencyA specialized agency focused exclusively on gaming and esports creators on YouTube, Twitch, and TikTok. Ideal if your campaign is 100% gaming-focused — from game launches to hardware and esports events.Clients: Epic Games, NordVPN, Ubisoft, Wargaming, Tencent GamesVisit Audiencly → -
4
Viral Nation
Global Influencer Marketing & Talent AgencyA dual talent management and marketing agency with proprietary brand safety tools and a global creator network spanning nano-influencers to celebrities across all major platforms.Clients: Meta, Activision Blizzard, Energizer, Aston Martin, WalmartVisit Viral Nation → -
5
The Influencer Marketing Factory
TikTok, Instagram & YouTube CampaignsA full-service agency with strong TikTok expertise, offering end-to-end campaign management from influencer discovery through performance reporting with a focus on platform-native content.Clients: Google, Snapchat, Universal Music, Bumble, YelpVisit TIMF → -
6
NeoReach
Enterprise Analytics & Influencer CampaignsAn enterprise-focused agency combining managed campaigns with a powerful self-service data platform for influencer search, audience analytics, and attribution modeling.Clients: Amazon, Airbnb, Netflix, Honda, The New York TimesVisit NeoReach → -
7
Ubiquitous
Creator-First Marketing PlatformA tech-driven platform combining self-service tools with managed campaign options, emphasizing speed and scalability for brands managing multiple influencer relationships.Clients: Lyft, Disney, Target, American Eagle, NetflixVisit Ubiquitous → -
8
Obviously
Scalable Enterprise Influencer CampaignsA tech-enabled agency built for high-volume campaigns, coordinating hundreds of creators simultaneously with end-to-end logistics, content rights management, and product seeding.Clients: Google, Ulta Beauty, Converse, AmazonVisit Obviously →