Brand impersonation is the unauthorized use of a company's name, logo or design to deceive people through fake websites, ads, social accounts or emails.
Brand impersonation happens when criminals present themselves as a known company so that people will trust them. It covers fake websites and shops, fake login pages, fake customer support accounts, fake apps, fraudulent ads and emails that use the brand's name and visuals. The harm falls on customers, who lose money or data, and on the brand, which absorbs complaints, chargebacks and lost trust.
How it works
Attackers copy the brand's website or parts of it, register a lookalike domain, and drive traffic to it through phishing emails, text messages, search and social media ads, and fake profiles. Some impersonation targets customers: fake shops, fake refund pages, fake investment offers that borrow a well-known name. Some targets staff and partners: fake HR portals, fake supplier invoices, fake recruitment offers. The content often includes the real logo and product photos, and sometimes a full clone of the site made with scraping tools. On social platforms, the same campaign may run through fake accounts that reply to real customers.
Example
An illustrative case: a fictional retailer finds exampleshop-outlet[.]com selling its products at large discounts. The site uses the retailer's product photos and logo, takes card payments and never ships anything. Ads for the site run on social media, linked from a page that also uses the retailer's name.
How to spot it
- Your name, logo or product images appear on domains you do not own.
- Customers mention orders, accounts or support conversations you have no record of.
- Ads or social profiles use your brand with unusual offers or phone numbers.
- New sites rank in search for your brand plus words like outlet, login or support.
What brands can do
- Monitor domains, certificates, ads, app stores and social platforms for your brand name and logo.
- Keep trademark registrations and a signed letter of authorization ready, since many providers ask for them.
- Report each site to its host, registrar, Cloudflare where relevant and browser blocklists, and use DMCA notices where content has been copied.
- Tell customers where your official channels are, and give them a way to report fakes.
Phishvoid's analysts verify impersonation sites and run the takedown process across hosts, registrars and blocklists; contact the team to discuss your brand. For a practical checklist, read Brand impersonation site: the first 24 hours.
Read more: Found a Site Impersonating Your Brand? The First 24 Hours
Seeing this against your brand?
We find and take down phishing and impersonation sites. Tell us what you are seeing.