The Fake Shop Takedown Guide Someone is selling your brand. Here's how to shut it down.

How big the problem is

For a brand the cost goes beyond lost sales. Customers who never got their order often contact you, the company whose name they trusted.

STEP 01

How to spot a fake shop imitating your brand

Today's fake shops, also called fake online stores or scam websites, look professional. Germany's cybersecurity agency warns that they use real product photos, brand imagery and correct German, and copy real companies' legal notices (in German, the Impressum)^[3].

Lookalike domains: what typosquatting looks like

Typosquatting and cybersquatting mean registering an address close to a brand name to profit from it. Common patterns for a brand called "yourbrand"^[7]:

Where to look

• Customer complaints. "I ordered from you and nothing came" is often the first signal. Ask for the address and the payment details.
• Search your brand plus words like outlet, sale or discount, and check the ads.
• Monitor new domains containing your brand name^[8].
• Check the ad libraries for your brand name^[8]. This is often the quickest check, so here is how.

Check the Meta and Google ad libraries (EU)

Fake shops often buy ads, as the figure above shows, and that leaves a trail. EU In the EU, very large platforms must keep a public, searchable record of their ads until a year after they last ran^[9]. You can look up who is advertising with your brand name, for free.

	Meta Ad Library	Google Ads Transparency Center
Where	facebook.com/ads/library, no account needed	adstransparency.google.com, no account needed
Search for a shop	Your brand or the shop's name, or its web address in quotes as an exact phrase. There is no dedicated domain field	Advertiser name or website, so you can enter the shop's address directly[10]
Set first	Country, ad category "all ads", active and inactive	Region, then date and format
Extra detail on EU ads	Under "EU transparency": run dates, targeting, estimated EU reach, advertiser and payer	Dates shown, targeting categories, reach per location[10], advertiser name and location, payer[10]
How long ads stay	EU ads: one year after the last impression. Elsewhere, most ads only while active[11]	One year after the ad last ran. New ads can take 48 to 72 hours to appear[12]
Shows where the ad leads	Yes, the ad's link and displayed domain	No clickable links[12]

TikTok has a similar library covering the European Economic Area, Switzerland and the UK^[13].

STEP 02

Save your proof first

Do this before you report, because the shop may vanish once it's noticed. ICANN's own guide asks for this in abuse reports^[16]:

• Screenshots that show the full web address.
• A short, clear explanation of the abuse.
• Proof of your authority if you act for someone else, and proof of your trademark.
• A log of all correspondence: who, when, what, and the reply. Keep your claims consistent across all recipients.

Also note the payment details shown at checkout, and keep any customer reports.

STEP 03

Domain takedown: who can actually take it down

A fake shop relies on several companies. Each one is a pressure point, and a "website takedown" usually succeeds when you press the right one.

Hosting companyRuns the server and can remove the site. Usually the most direct route.

RegistrarSold the address and can suspend the domain.

Cloudflare or a similar serviceSits in front of the site, so it hides the hosting company. It forwards your complaint to the operator and the hosting company.

Shop platformShopify and others can close the store.

Ad networksGoogle and Meta can stop the traffic.

Browsers and paymentBrowser warnings scare off visitors. Payment networks can cut off the money.

Your takedown options

Route	What it does	What you need
Hosting company abuse report	Removes the site. EU Hosting companies serving the EU must offer a notice route open to anyone[17]	Exact address, substantiated reasons
Registrar abuse report	Can suspend the domain. Find the contact with ICANN Lookup[16]	Evidence. Escalate to ICANN only after reasonable time[16]
Cloudflare abuse form	Forwards your report to the operator and hosting company[18]	Use abuse.cloudflare.com
Shopify trademark report	Removes infringing content[19]	Direct links. A general shop link is rejected
Browser blocklists	Warn visitors: Google, Microsoft, Netcraft	The address and a short reason
Google and Meta ads	Stops paid traffic[20][21]. Reported ads are handled one at a time: in one case Meta removed the ad within 24 hours, but 60 more from that account stayed up[22]	Report the advertiser and list every ad you found. Meta's Brand Rights Protection needs a registered trademark
Card networks and PayPal	Visa passes it to the shop's payment processor (the acquirer)[23]. Also Mastercard[24] and PayPal[25]	Proof you've already reported it. Mastercard asks for at least three prior notices. Visa encourages test purchases

Legal routes, when reports don't work

These generally need a registered trademark, and are slower. Use them for a shop that keeps coming back, or to get the domain itself.

Route	Domains	Result	Cost and time
UDRP (WIPO) INTLDomain dispute procedure	.com and many others	Transfer or cancellation, no damages[28]	From USD 1,500[29], normally within 2 months[28]
URS INTLRapid suspension procedure	New endings, check per ending	Suspension only, on clear evidence[30]	Check with the provider
.eu ADR EUDispute procedure for .eu	.eu	Transfer or revocation[31]	€1,300, with a €700 discount price until Dec 31, 2026[32]
DENIC DISPUTE DE	.de	Blocks transfer of the domain, and you get it if it's deleted. The shop stays online[33]	Needs proof of your right. Valid one year, extendable[33]
Court injunction	Any, where a court has jurisdiction	Orders the operator to stop. See the laws by country below	Through your lawyer. DE In Germany you generally bear the risk if it proves unjustified[34]

Trademark law, by country

Court routes run on national law, or on EU law for an EU trademark. These are the provisions your lawyer would start from.

Takedown notice you can adapt

Keep it short, factual and specific. Replace everything in brackets, and remove anything that doesn't apply.

Subject: Abuse report: fake shop imitating [YOUR BRAND] at [FULL URL]

Hello,

I am writing on behalf of [COMPANY], owner of the trademark [BRAND] ([REGISTER AND NUMBER]).

The website [FULL URL], which you [host / registered / protect], imitates our brand and appears to take customer payments without being connected to us.

What we found:
- It uses our logo and product photos without permission: [EXAMPLES]
- Its legal notice shows [COPIED OR FALSE DETAILS]
- Payment details shown: [DETAILS]
- First seen: [DATE, TIME, TIME ZONE]

Attached: screenshots showing the full address, and proof of our trademark and authority to act.

Please review this report under your abuse policy and remove or disable the content, and let us know the outcome. We are also reporting this case to [AUTHORITY].

To the best of my knowledge, this report is accurate.

[NAME, ROLE, COMPANY, EMAIL, PHONE]

STEP 04

Report a fake shop to the authorities

Reporting supports investigations, even if it won't take the shop offline itself. Report where your company or the victims are, and keep the reference number.

STEP 05

Protect customers and watch for the next one

• Warn your customers with a website banner or newsletter^[8], and brief your support team.
• Tell victims what to do: contact their bank or payment provider and report to the police.
• Monitor for replacement domains. Shops are often relaunched at new addresses^[6].
• Check that the shop stays offline. Keep your log, and if the same operator returns, your earlier evidence helps the legal route.

Stay on safe ground

Common questions

This guide is general information, not legal advice. Tags show where a law or route applies: DE Germany, AT Austria, CH Switzerland, UK United Kingdom, US United States, FR France, NL Netherlands, EU European Union, INTL international. Laws, fees and contact routes change, so check the linked source before you rely on it.