Someone Is Impersonating My Company Online
Discovering that someone is using your company name to mislead or scam customers feels like a violation, and it can move fast. The good news is that impersonation comes in a few recognizable forms, and once you know which one you are facing, the response is straightforward. This page is the map; it points you to the right detailed guide for your situation.
The forms impersonation usually takes
Most impersonation of a small business falls into one of these buckets:
- A lookalike web address. A domain that is almost yours, with an extra word, a swapped letter, or a different ending such as .net or .shop.
- Spoofed email. Messages that appear to come from your company, sent to your customers or staff to trick them into paying or sharing data.
- A cloned website. A copy of your actual site, often pixel for pixel, set up to take orders or logins.
- Fake ads or social accounts. Sponsored search ads or social profiles using your name and logo.
A quick, honest note on scope: VigilDNS focuses on the first three (domains, email, and cloned websites), because those are where lookalike-domain scams live and where evidence can be gathered systematically. Fake social accounts and ads are usually handled through each platform's own impersonation report form, and we point you there when that is the issue.
How to tell which one you are facing
| What you noticed | Likely form | Where to go |
|---|---|---|
| A web address almost like yours | Lookalike domain | What is typosquatting |
| A site that looks exactly like yours | Cloned website | Fake website using my name |
| Customers got emails you did not send | Spoofed email | Email spoofing |
| Your name plus a word like login or support | Combosquatting | Combosquatting |
It is common to face more than one at once. A single lookalike domain can host a cloned site and send spoofed email at the same time, which is why catching the domain early matters so much.
Your immediate steps
Whichever form it takes, the first moves are the same:
- Save dated screenshots and the exact web addresses before anything disappears.
- Do not interact: no test payments, no entering real credentials, no threats to the operator.
- Warn your customers with a short, calm notice on your real channels.
- Report it to the host, the registrar, and Google Safe Browsing. Start with how to report a copycat website.
If a fake address is close to yours, assume it can send email as you and read is someone spoofing my email domain as well. To check the lookalike variations of your domain in seconds, use our free typosquat checker.
Getting ahead of it
Reacting to each incident is exhausting, and it always leaves you a step behind. Most lookalike domains are registered quietly and sit unused for days or weeks before a scam goes live. That gap is your opportunity. Continuous monitoring watches for new lookalike and copycat domains the moment they appear, flags the ones that can send email as you, and captures screenshots of cloned sites, so you find trouble before your customers do. VigilDNS provides exactly this, with plans starting at $79 per month on the pricing page. There is no free trial of monitoring your own domain, but the free checker and sample domains let you see how it works first.
When to escalate
If a copycat is actively taking money from your customers, or it survives a clear, well-documented report, that is the point to consider legal help or a formal domain dispute. We cover the realistic costs and timing in how domain takedowns work, so you can decide whether it is worth it.
Frequently asked questions
How do I know if it is one scam or several?
Check the web address, the website itself, and whether customers received emails. One lookalike domain often powers a cloned site and spoofed email together, so treat them as connected.
Can I stop impersonation completely?
You cannot prevent a stranger from registering a domain, but you can catch new ones early and remove them quickly, which makes your business a frustrating target and protects customers.
Does VigilDNS handle fake social media accounts?
No. We focus on domains, email, and cloned websites. Fake social profiles are reported through each platform's own impersonation form.
See the lookalike versions of your own domain right now with our free typosquat checker, then explore continuous monitoring on the pricing page.