Discovering a fake website impersonating your brand can be alarming. This guide walks you through the process of getting fraudulent sites taken down as quickly as possible.
Step 1: Document Everything
Before taking any action, gather evidence:
Screenshots
- Homepage and key pages
- Contact information shown
- Any customer data collection forms
- SSL certificate details
Technical Details
- Full URL of the fake site
- WHOIS information (domain registrar, registration date)
- IP address and hosting provider
- Any email addresses associated with the site
Impact Documentation
- Customer complaints received
- Financial losses reported
- Social media mentions
Step 2: Report to the Domain Registrar
Finding the Registrar
- Use a WHOIS lookup tool
- Identify the registrar (e.g., GoDaddy, Namecheap)
- Find their abuse reporting page
Filing the Report
Most registrars require:
- Your contact information
- Proof of trademark ownership
- Evidence of the fraudulent activity
- The specific domains involved
Expected Timeline
- Initial response: 24-48 hours
- Investigation: 3-7 days
- Domain suspension: 7-14 days (if successful)
Step 3: Report to the Hosting Provider
Identifying the Host
Use tools like:
- BuiltWith
- WhatIsMyIPAddress
- SecurityTrails
Filing an Abuse Report
Include:
- IP address of the server
- URLs of infringing content
- Trademark registration details
- Evidence of fraud
Step 4: Report to Search Engines
- Use the Google Search Console
- File a legal removal request
- Report phishing through Safe Browsing
Bing
Use the Bing content removal tool
Browser Security Lists
Report to:
- Google Safe Browsing
- Microsoft SmartScreen
- PhishTank
Step 5: Report to Authorities
National Cybersecurity Agencies
- US: FBI's IC3 (ic3.gov)
- UK: National Cyber Security Centre
- EU: EUROPOL's EC3
Industry-Specific Bodies
- Anti-Phishing Working Group (APWG)
- Your industry's regulatory body
Step 6: Notify Your Customers
Communication Plan
- Send email alerts to your customer base
- Post warnings on social media
- Update your website with a notice
- Prepare customer service responses
What to Include
- How to identify the real site
- What information may be compromised
- Steps customers should take
- How to contact you for concerns
Automating the Process
Manually monitoring for fake sites and filing reports is time-consuming. Automated solutions like Brand Firewall can:
- Detect suspicious domains within hours
- Provide pre-filled takedown request templates
- Track the status of your reports
- Alert you to new threats immediately
Conclusion
Getting fake websites taken down requires persistence and proper documentation. By following this guide and keeping detailed records, you'll be better equipped to protect your brand and customers from impersonation attacks.