Copycat Sites Can Use Your Business Name This Holiday Season. 4 Things to Do Now
Fake websites and ads that copy a real business's name rise around the holidays, and customers often blame the real company. Four simple steps to protect customer trust before the rush.
The holiday rush is when customers are most likely to search for you, click an ad with your name on it, and pay quickly. It is also when scammers are most likely to pretend to be you.
When a customer pays a fake version of your business, they usually blame the real one. That makes copycat sites a customer trust problem, not just a security problem.
What is being reported this season
- The Better Business Bureau's list of 12 scams targeting businesses during the holidays includes "stolen identity": fake websites that copy a company's name, address, logo and website content. BBB notes that AI tools make these copycat sites faster to build and harder to spot, and that scammers run social media ads with a real company's name or logo pointing to an impostor site offering holiday deals.
- In Canada, CBC News reported on November 8 that scammers impersonated local holiday markets and emailed vendors asking for payment to "secure a spot". Some vendors lost more than $1,000. One organizer's advice: check that the email address is the one the market really uses.
- In the UK, consumer group Which? traced a fake Marks & Spencer shopping site and found the same business name and address used on 22 other similar sites.
These are separate reports, not one measured statistic. Together they point the same way: copying a familiar name is cheap, and the holiday season gives it more chances to work.
Four things to do before the holiday rush
1. Publish one clear list of your official channels. Put your real website address, email addresses and social media accounts on your site, for example on your contact page. BBB recommends this so customers can check. Say plainly how you take payment, so a request that looks different stands out.
2. Check which look-alikes of your web address already exist. A look-alike domain is a web address made to resemble yours: a typo, a swapped letter, an added word such as "pay" or "shop", or a different ending like .shop instead of .com. Knowing which ones are registered helps you recognise a fake link when a customer forwards it.
3. Watch for mentions of your name and report impostors. BBB suggests setting up alerts for your company name and reporting impostor ads and accounts to the platform they appear on. Website takedowns go through the domain's registrar or web host.
4. Tell your team what to do when a customer reports a fake. Decide now who collects the details (the link, a screenshot, the email address used), who reports it, and what you will say to the customer. A calm, quick answer protects trust even when the fake is not your fault.
Where CertPing fits
CertPing's free look-alike domain checker shows which of the 36 most common imitations of your domain are already registered. It is free and needs no account.
If you want to keep watching, CertPing's phishing watch checks new registrations daily for look-alikes of your domain and alerts you with the domain, the reason it matched and a risk level. Your first Domain Security bundle is free.
To be clear about the limits: a registered look-alike is not always malicious; it may be parked or owned by someone unrelated, so look at it before you act. CertPing detects look-alikes and alerts you. It does not block them or take them down, and it does not monitor social media ads.
The short version
This holiday season, make it easy for customers to find the real you, know which look-alikes of your name exist, and have a plan for reports of fakes. Start with a free look-alike check.