Incident response
Someone Is Impersonating the Business
Quick answer
Protect the real accounts and warn affected people through a trusted channel. Preserve the impersonation evidence before requesting takedowns.
Who this is for: Businesses seeing fake domains, social profiles, invoices, or messages sent in their name.
What to do
- 01Capture URLs, headers, messages, payment details, and timestamps.
- 02Secure email, domain, social, and payment accounts with MFA.
- 03Warn customers and suppliers using a known-good contact route.
- 04Report the impersonation to the provider, payment service, and relevant authorities.
What this does not cover
Takedown speed and reporting obligations vary by provider and location; do not engage with the impersonator or attempt retaliation.
This page is educational information, not legal advice or a professional security audit. Check the official requirements and get qualified help when your circumstances require it.
Continue exploring