Is Candy AI legit or a scam?

I vet a site the way I would vet a stranger who asks to borrow my card: who are you, where do you live, can I get a receipt, and how do I leave. Candy answers all four, which is more than I can say for several people I have dated. So, is Candy AI legit? Yes, and the more useful question is what legit does and does not cover.

Here is what I checked, what I couldn’t, and where the real scams hang out. I looked at Candy’s public pages as a logged-out visitor, with its terms of service and help center open beside me. I have not looked inside a paid account, so nothing below is a claim about how any single payment behaves for you.

Is Candy AI legit? Start with who runs it

Candy’s terms of service say the services are owned and operated by EverAI Limited, incorporated in Malta and registered with the Malta Business Registry under number C107181, with a street address in Santa Venera. The help center lives under the same EverAI name, and the terms of Candy Shorts’ standalone site name the same company. That answers “who owns Candy AI”: a named, registered business rather than an anonymous app. Candy publishes its legal documents at candy.ai/legal-information, so you can read the terms yourself before you pay.

One honest limit. I read those details in Candy’s own documents and haven’t looked the number up in the Malta registry myself. It takes a minute, and I would rather admit I skipped it than imply I did.

Is Candy AI a scam? Following the money

A scam hides the price, hides the renewal and makes leaving hard. Candy’s plan cards show the monthly price, the billed total and the line “Renews automatically for the same price and term,” with a note that local taxes may apply and cancellation available in settings.

Payment methods vary by location. Candy’s help center lists credit and debit cards, crypto, Apple Pay, Google Pay and bank transfer (Volt, Pix). I found no official mention of PayPal or gift cards, so an offer to pay a third party for “Candy credits” is a reason to stop and close the tab.

What Candy does do is renew automatically, and its terms say subscription prices can rise from time to time at Candy’s discretion. That is ordinary subscription billing, not a trick, but it is the clause I would put in a calendar reminder. What Candy AI costs has the plan maths.

The one genuine surprise is the statement line. Candy’s FAQ says there is no direct reference to Candy AI on your statement; it reads “EverAI.” That is discreet on purpose, and it is why people type “is this a scam” into a search bar at midnight. The EverAI charge page decodes the amounts and the cancel steps.

The exit door: refunds and cancellation

You cancel in your account under Settings, then Unsubscribe. Candy’s terms say the subscription stays active until the end of the current billing period and you aren’t charged for the next one. Candy also says you can’t pause a subscription.

Refunds are stricter, and they are written down:

• You have 24 hours after paying to ask.
• It is denied if you have used more than 20 tokens, however fast you ask.
• Only card payments can be refunded.
• Canceling is not a refund request. You contact support separately inside the window.
• If you live in the EU or UK, you can withdraw from the initial purchase within 14 days, with a prorated amount for what you used. That right does not cover renewals.

Strictness is not a scam signal. Hidden strictness is, and this one is on the page where you can read it. If you spend tokens, the refund door closes, so test the free episodes before you pay. Per Candy’s terms, a refunded subscription is treated as canceled immediately, and the same happens if a chargeback is filed, with remaining tokens revoked either way. This is not legal advice; read section 10 of the terms.

Is Candy Shorts legit too?

Yes, and for the same reasons. Shorts are a feature of the same platform and operator. Candy’s help center describes them as AI-generated, scripted videos that last under two minutes per episode. The early episodes are free and later ones cost 12 tokens, or 30 on Candy Creators series.

Those Creator series feature licensed AI twins of adult stars. Candy states that every digital twin on its platform is made in partnership with, and with the full consent of, the creator. I take that as Candy’s claim, and it is the right framing: a licensed twin, not the person on a film set.

The fakes here are the “full episode” uploads and downloads that circulate on other sites. More on those next.

Where the real scams are: fake apps, leaks and clone logins

The risk is rarely Candy. It is the things wearing its name.

• Fake apps. Candy’s help center says it has no native iOS or Android app; the site works in a mobile browser and can be added to your home screen. A store listing that claims to be the Candy app contradicts Candy’s own statement, so I wouldn’t install it.
• Leaks and “full episode” downloads. Re-uploads, “unlocked” files and chat-app channels that promise paid episodes for free are fakes or malware bait. I won’t link any. The legitimate free route is the free episodes, which cost nothing.
• Free tokens and shared logins. Candy’s terms say your account is non-transferable and can’t be shared, and that tokens can’t be transferred or exchanged. The tokens Candy documents come from your plan allowance, top-ups on its own site and its referral program. Anything else is a pitch.
• Clone login pages. The real sign-in sits on candy.ai and asks for an email and password, or Google or Discord. If a page asks for card details to “verify” you, close it. The steps are in the Candy AI login guide.

Candy’s own terms add one more rule: don’t share passwords, financial details, addresses or contact information in a chat with a character. If anything in a chat asks for them, treat that as a red flag, not a feature.

What legit does not mean

Legit is not the same as cheap, permanent or private. A few things the terms are open about:

• Candy can change things. It may de-list characters and modify or delete features at any time, and it does not refund for changes of that kind that leave the core service intact.
• It is entertainment. The terms say exchanges are fictional, the characters have no real feelings, and offers of real-life meetings are fake. I like a terms page that talks me out of dating my own chat window.
• Your input is licensed to Candy. The terms grant Candy a broad license to use what you type, including to improve and train its AI models. If that matters to you, read section 4 before you pay.
• Tokens are unclear after you leave. The terms say leftover tokens expire when a subscription ends; a help-center article says they stay. As of October 15, 2026 the two still disagree. Spend them.

How I would start without risking a dollar

Make a free account. Watch the free episodes of one series. Try the free chat messages on one character. All of it costs nothing, none of it needs a card, and it tells you more about whether Candy is for you than any page about legitimacy can.

If you still want episode 3, is Candy Shorts worth it does the token maths, and the 12-month plan is the cheapest route I found. Set a reminder before it renews, keep the refund window in mind, and enjoy it with your eyes open.