How to Report a Copycat Website

Reporting a fake website that copies your business is more doable than it sounds. You do not need a lawyer to start, and most of the work is filling out a few forms with good evidence. Here is the plain, practical version. For the deeper technical walkthrough, see how domain takedowns work.

Step 1: Gather your evidence

Reports without proof get ignored. Before you contact anyone, collect:

• Dated screenshots of the fake home page, any payment or login pages, and the contact details.
• The exact web address (the full part starting with https), copied as text.
• A one-line description of what is fake: it copies our logo and layout and takes payments as if it were our store.
• Your own real address and a link to your site, so the reviewer can see the original.

Step 2: Find the host and the registrar

Two companies sit behind every site, and you will report to both:

• The registrar is the company that sold the web address.
• The host is the company whose servers actually serve the pages.

To find them, use a free public WHOIS lookup (search for who is lookup and enter the fake address). It usually names the registrar directly. To find the host, a free hosting checker tool will tell you which provider serves the site. Write down both, along with their abuse contact addresses, which are often listed on the same lookup or on the provider's website.

Step 3: Submit abuse reports

Most providers have a form labeled abuse, report fraud, or report a phishing site. Send a short, factual report to both the registrar and the host. Include:

• The fake address and your real address.
• Your dated screenshots (attach or link them).
• One or two clear sentences explaining the impersonation and the harm to customers.

Stay calm and factual. Avoid threats and emotional language; reviewers respond to clear evidence, not anger.

Step 4: Submit to the browsers

Search engines and browsers can warn visitors away from a dangerous site quickly, sometimes faster than the host responds:

• Google Safe Browsing. Search for Google report phishing page and submit the fake address. A successful report puts a red warning in front of Chrome and many other browsers.
• Microsoft. Search for Microsoft report unsafe site and submit it there too, which covers Edge and SmartScreen.

These two reports protect your customers even while the takedown is in progress, so do them early.

Step 5: Warn your customers

A short, calm notice on your real website and social channels (this is our only official address; beware of copies at other addresses) limits the damage immediately and builds trust.

When to involve a lawyer or a domain dispute

Most copycat sites come down through the steps above. Consider escalating if the site is actively stealing money, ignores well-documented reports, or clearly trades on a trademark you own. Two realistic options:

• A lawyer's cease-and-desist letter. Costs vary widely by attorney and region; ask for a flat fee for a single letter before committing.
• A UDRP complaint (a formal domain dispute for trademark owners). It is a paid filing with a specialist provider and typically runs into four figures plus any legal help, so it is best reserved for serious, ongoing cases.

We cover both options and what to expect in how domain takedowns work. For a complete incident checklist, see someone registered a lookalike of my domain.

Reporting one site is not the end

Removing a copycat is a win, but scammers often register a fresh lookalike soon after. The way to avoid playing this game forever is to watch for new lookalike and copycat domains continuously, so you catch the next one as it appears instead of after a customer is harmed. VigilDNS monitors for these around the clock, flags lookalikes that can send email as you, and captures screenshots of cloned sites so your evidence is ready before you even start a report. Plans start at $79 per month on the pricing page.

Frequently asked questions

Who should I report a fake website to first?

Report to the registrar (the company that sold the address) and the host (the company serving the pages), then to Google Safe Browsing and Microsoft so browsers warn visitors quickly.

Do I need a lawyer to report a copycat site?

Usually no. Reporting with clear, dated evidence to hosts, registrars, and browsers often works on its own. A lawyer or UDRP is for serious or ongoing cases.

How do I find out who hosts a fake site?

Use a free WHOIS lookup to find the registrar and a free hosting checker to find the host. Both usually list an abuse contact you can report to.

Before you report, see the lookalike versions of your own domain with our free typosquat checker, then explore continuous monitoring on the pricing page.