Brand protection
How to Respond to Business Impersonation
By PixelPrivate Security Team · Published · Updated · 6 min read
Short answer: When someone impersonates your business, capture evidence without interacting, report the site to its hosting provider and domain registrar, warn customers through your own channels, report to relevant authorities and platforms, and strengthen your email authentication and monitoring.
1. Collect evidence
Capture the URL, date, time, screenshots, and any page content. Do not enter credentials or interact with forms.
2. Identify who can act
- The hosting provider (look up the IP’s network owner).
- The domain registrar (WHOIS/RDAP).
- The platform, if on social media or a marketplace.
3. Send abuse reports
Use the provider’s abuse contact. Include your brand details, why the site is deceptive, and your evidence. Be factual; avoid legal claims you cannot support.
4. Warn customers
Post a short notice on your real website and social channels with your official domain, so people know where the genuine one is.
5. Report to authorities
If money was lost, report to your local police or national fraud reporting service. Browser-security reporting services such as Google Safe Browsing can flag phishing pages.
6. Reduce repeat risk
Enforce DMARC, monitor lookalikes, and consider trademark advice if impersonation is persistent.
Checklist
- ☐ Evidence saved
- ☐ Registrar and host identified
- ☐ Reports sent
- ☐ Customers informed
- ☐ Authorities notified if loss
- ☐ DMARC enforcing
- ☐ Monitoring on
Methodology
Steps follow common abuse-reporting practice. Outcomes depend on registrars and hosts; no service can force a takedown.