Lookalike Domains: When Scammers Impersonate Your Business

Your website can be perfectly secure and your customers can still get burned in your name. Brand impersonation — lookalike domains, cloned pages, fake social accounts — targets the trust you've built rather than the infrastructure you run.

How the scam works

An attacker registers a domain one keystroke away from yours: a swapped letter, a different ending, a hyphen where none exists. They clone your homepage — your logo, your copy, your product photos — and then drive traffic to it: phishing emails to your customers, ads on your brand name, even SEO on your product terms. Victims 'log in' or 'buy' on the fake site, handing over credentials and card numbers. Then the angry emails arrive — addressed to you.

Why small brands are attractive targets

Big brands have legal teams and monitoring services hunting clones daily. Attackers know a small business probably isn't watching, won't notice for months, and the trust customers place in a small brand is just as harvestable.

Early-warning signs

• Customers mention emails or offers you never sent.
• Login failures spike — people are typing real passwords into the fake site, then failing on yours.
• Your support inbox gets questions about orders that don't exist in your system.
• Search results for your brand show a domain you don't own.

What to do when you find one

1. Document everything — screenshots, URLs, dates.
2. Report to the registrar and host — impersonation violates nearly every provider's terms, and takedowns are often fast.
3. Report to Google Safe Browsing and anti-phishing services — getting the clone flagged with the red warning screen neutralizes it even before takedown.
4. Warn your customers — a short, calm email telling people the only real domains you use turns a threat into a trust-building moment.

Make the real site unmistakable

Clones can copy your design, but they can't copy verification. A clickable security seal that resolves to a third-party verification page for your exact domain is something a fake site cannot fake — one more reason verified trust marks beat decorative padlock icons.

Trust Guard's verifiable seal ties your domain to a live scan record customers can check themselves. Make your real site provably real.