Finding a fake website pretending to be my business is one of those searches nobody wants to make. Maybe a customer called asking about a deal you never offered. Maybe you Googled your own company and found a site using your name, your photos, even your logo. It is unsettling, and it can do real damage to your reputation and your customers.
The good news: impersonation sites get taken down every day, and there is a clear process for making it happen. This guide walks you through it step by step, from gathering evidence to filing the right reports, plus how to protect your business so it is much harder for this to happen again.
First, confirm what you are actually dealing with
Not every lookalike site is the same problem, and the fix depends on which one you have. Take five minutes to figure out which situation fits:
- Impersonation: The site claims to be your business. It uses your business name, logo, photos, or contact details, and is trying to trick your customers into calling them or paying them. This is the most serious case, and it is what the rest of this guide focuses on.
- Content theft: Someone copied your text or design but is running their own business under their own name. Annoying and worth acting on, but a different process. See our guide on what to do when someone copies your website.
- A similar name by coincidence: A business in another state with a similar name is not necessarily impersonating you. If they are not pretending to be you, your options are narrower and usually start with a trademark conversation.
- Your old domain: If the fake site lives at a domain you used to own, someone may have picked it up after it lapsed. That situation has its own playbook, covered in what to do when your expired domain gets bought.
Step 1: Document everything before you do anything else
Takedowns move faster when you can hand over clean evidence, and fake sites sometimes vanish and reappear elsewhere. Before you file a single report, capture:
- Full-page screenshots of the fake site, including any page that uses your name, logo, photos, or address. Make sure the URL is visible in the screenshot.
- The exact URL of every offending page, saved in a document with the date you found it.
- Side-by-side comparisons showing your real content next to theirs.
- Proof you came first: your domain registration date, dated invoices from your web designer, archived copies of your site, or original photo files with their creation dates.
- Customer reports, if anyone contacted you after being confused or scammed by the fake site. Save those emails or write down the details.
Tip: Save your evidence somewhere outside the website itself, like a dated folder in your email or cloud storage. If the scammer takes the site down and puts it back up at a new address, you will not have to start from scratch.
Step 2: Find out who is behind the fake site
You do not need to identify the actual person. You need to identify two companies: the registrar (where the domain was registered) and the host (where the site's files live). Both have abuse departments, and both can pull the plug.
Run the fake domain through a WHOIS lookup tool (ICANN's official lookup at lookup.icann.org is a good place to start). The owner's name will usually be hidden behind privacy protection, and that is fine. What you want is the registrar's name and its abuse contact email, which are always listed. A separate hosting lookup tool can usually tell you which company hosts the site. If domains and hosting feel like alphabet soup, our plain-English guide to hosting and domains explains how the pieces fit together.
Step 3: Report it to the people who can take it down
File reports with several parties at once rather than one at a time. Each one attacks the problem from a different angle, and you do not know in advance which will move fastest.
| Where to report | What it does | What to say |
|---|---|---|
| The registrar's abuse contact | Can suspend the domain itself | Report impersonation and fraud, include your evidence and the exact URLs |
| The hosting company's abuse contact | Can take the site's files offline | Same evidence, plus a DMCA notice if they copied your text or photos |
| Google Safe Browsing (safebrowsing.google.com) | Flags the site with a warning screen in Chrome and other browsers | Report it as a deceptive or phishing site |
| FTC (reportfraud.ftc.gov) and IC3 (ic3.gov) | Creates an official fraud record in the US | Describe the impersonation and any customer losses |
| Social platforms and directories | Removes fake profiles pointing at the fake site | Use each platform's impersonation report form |
The DMCA notice is often your fastest lever
Impersonation sites almost always copy something you own: your photos, your service descriptions, your logo. That copying is a copyright issue, and hosting companies in the US are required to respond to a properly filed DMCA takedown notice. Most hosts have a form or a designated email for it. Identify the copied material, point to your original, state that you own it, and sign it. Hosts frequently act on these within days because ignoring them creates legal exposure for the host itself.
If they are pretending to be you on Google
Scammers sometimes pair a fake website with a fake or hijacked Google Business Profile so they show up in local search. Search your business name and check the profile that appears. If something is off, suggest an edit or report it from the profile itself. If you have not claimed your own profile yet, do that today. Our Google Business Profile setup guide walks through it, and a verified profile makes it much harder for an imposter to outrank you for your own name.
Step 4: Protect your customers while you wait
Takedowns can take anywhere from a couple of days to a few weeks. In the meantime, make it easy for customers to tell the real you from the fake:
- Post a short notice on your website and social accounts naming your only official website address and phone number.
- Tell customers you will never ask for payment through unusual channels like gift cards or wire transfers.
- Ask anyone who was scammed to report it to the FTC and their bank. Their reports strengthen yours.
- Make sure your real site clearly shows your address, phone number, and credentials so it is obviously the genuine one. Our guide on making your business look legitimate online covers the trust signals that matter.
Step 5: Consider legal help for stubborn cases
Most impersonation sites come down through abuse reports alone. If yours does not, an attorney can send a cease and desist letter to the registrar, host, and any identifiable party, which often succeeds where individual reports stalled. If the fake site uses a domain confusingly similar to your business name and you hold a trademark, you can also file a UDRP complaint, a dispute process that can transfer the domain to you without a lawsuit. It costs money and takes a couple of months, but it permanently solves the domain problem instead of playing whack-a-mole.
Make it harder for this to happen again
Once the fire is out, spend a little time on prevention:
- Register the obvious lookalike domains. Common misspellings and the .net or .co version of your name are inexpensive to hold. Our guide to choosing a domain name includes tips on which variations are worth grabbing.
- Set up a Google Alert for your business name so you hear about new mentions, real or fake, without having to search manually.
- Keep your own site secure and verified. HTTPS, claimed profiles, and consistent contact details everywhere make the real you easy to confirm. Our website security guide covers the basics.
- Watch your inbox and mailbox for scams aimed at you. Fake renewal letters and phishing emails often target owners who just dealt with an impersonation problem.
Frequently asked questions
How long does it take to get a fake website taken down?
It varies by who acts first. Hosting companies responding to a DMCA notice often move within a few days. Registrar abuse reports can take one to three weeks. Google Safe Browsing warnings can appear within days and blunt the damage even before the site comes down. Filing with everyone at once, with solid evidence attached, is the best way to shorten the wait.
Do I need a trademark to get an impersonation site removed?
No. Impersonation and fraud violate the terms of service of virtually every registrar and host, and copied photos or text support a DMCA notice regardless of trademarks. A registered trademark helps if you want to force a domain transfer through UDRP or pursue a lawsuit, but it is not required for a standard takedown.
Should I contact the scammer directly?
Usually not. Contact information on a fake site is often fake itself, and tipping them off can prompt them to move the site to a new host or domain before your reports land. Let the registrar, host, and reporting channels do the confronting. Save direct contact for cases where a real, identifiable business is involved and a lawyer is drafting the letter.