A fake profile, lookalike website, or misleading message can confuse customers and damage trust. If someone is impersonating your business online, move quickly but keep the response factual. Save evidence, use the platform’s official reporting path, warn customers through channels you control, and strengthen account security while the issue is reviewed.
Document the impersonation before reporting
Capture screenshots showing the account name, profile URL, posts, messages, dates, and any payment or contact instructions. Save copies in a secure folder and note when you discovered the content. Avoid engaging aggressively with the impersonator or sharing private customer details in public. A clear record can help platforms, hosting providers, and authorities evaluate the report.
- Record URLs and account identifiers.
- Keep original messages and timestamps when possible.
- Do not click suspicious links or share credentials.
Report it through the right official channels
Use the social network’s impersonation or trademark reporting process and provide information requested about your genuine business account. For a fake domain, contact the registrar or hosting provider through its abuse process. If the scam involves money, identity theft, threats, or substantial harm, consider contacting the relevant authorities or a qualified legal professional.
- Report from a genuine account or verified business identity.
- Follow platform instructions and keep case numbers.
- Avoid unofficial “recovery” services that request payment or login codes.
Protect customers with clear updates
Post a short notice on your website and official social channels explaining which accounts or messages are not yours, how customers can verify contact, and where to report suspicious activity. Keep the language calm and specific. Do not repeat a scam link or amplify harmful content unnecessarily.
- Use a channel customers already trust.
- Give a safe verification method, such as your official website domain.
- Update the notice when the fake account is removed.
Secure your real brand accounts
Change passwords if you suspect compromise, enable multifactor authentication, review account recovery contacts, and remove unfamiliar users or connected apps. Secure the business email account first because it can reset other services. Use unique passwords and document who has administrator access.
- Enable multifactor authentication for email and social accounts.
- Review admins, recovery details, and connected applications.
- Keep a current inventory of official domains and profiles.
Create a response plan before the next incident
Assign who documents, reports, updates customers, and monitors resolution. Prepare a reusable public notice that can be adapted without making unsupported claims. Keep a list of official support and abuse-reporting links, and review it periodically because platform procedures can change.
- Name a primary and backup response owner.
- Prepare factual customer guidance.
- Review the plan after each incident.
Take the next step
Impersonation cases can take time to resolve, so communicate through verified channels and keep records of each report. Avoid promising that a platform will remove content by a particular date. A consistent response protects customers, supports the review process, and signals that your business takes online trust seriously.
