How to check if your business is being impersonated

You spend years building your reputation, serving customers, and growing your business. Then one day, a customer contacts you about an offer you've never advertised, or complains about an order you never received.

These can be warning signs that someone is using your business name online. Here's how to spot business impersonation and what to do if it happens to you.

Key Takeaways:

• Business impersonation happens when criminals pretend to be your company online.
• Fake social media accounts, websites, emails, and listings can be used to scam customers and damage your reputation.
• Customer complaints, suspicious reviews, and fake profiles are often the first warning signs.
• Monitoring your online presence regularly can help you spot impersonation attempts early.
• Acting quickly can help limit reputational damage and protect your customers.

What is business impersonation?

Business impersonation happens when someone pretends to be your company online.

Criminals may create fake Facebook or Instagram profiles, copy your website, register a similar domain name, send emails that appear to come from your business, or create fake online listings.

Their goal is to take advantage of the trust you've worked hard to build with customers. They may use your business name to collect payments, steal personal information, send fake invoices, spread malware, or promote products and services that don't exist.

Small businesses can be attractive targets because customers often know and trust them. If someone receives a message from what appears to be a familiar local business, they may be less likely to question whether it's genuine.

The problem is that many business owners don't discover the impersonation right away. Often, the first warning sign is a confused customer asking about an offer, invoice, or order that has nothing to do with the actual business.

6 warning signs someone is impersonating your business online

Most business owners don't discover impersonation right away. Watch for these warning signs that someone may be using your business name or brand online.

1. Customers mention messages or offers you never sent

If customers ask about promotions, discounts, invoices, or offers you've never created, it may indicate that someone is contacting them while pretending to represent your business.

If multiple people contact you about suspicious messages, unusual offers, or accounts they believe are fake, take those reports seriously. They could be alerting you to an impersonation scam before it causes significant damage.

2. You discover social media accounts using your business name that aren't yours

You discover pages using your business name or branding on social media platforms such as Facebook, Instagram, TikTok, or LinkedIn.

Look for accounts with similar names, logos, profile pictures, or descriptions that could make customers believe they are interacting with your business.

3. Customers complain about orders you never received

A customer may believe they purchased from your company when they actually dealt with an impersonator using a similar name or website.

4. You get negative reviews that don't match reality

Negative reviews sometimes reveal impersonation attempts. Customers may describe experiences that have nothing to do with your actual products or services. For example, someone complains about poor service, a missing delivery, or a fake promotion that has nothing to do with your business.

Related: How to Spot and Protect Your Business from Fake Reviews: Red Flags, Tips, and Tools

5. Your suppliers receive suspicious emails

Criminals don't only target customers. They may also send emails pretending to be you or one of your employees, asking suppliers to change payment details, update bank account information, or share sensitive business data.

6. A very similar website to yours appears online

Scammers often register domain names that look almost identical to legitimate businesses. They may change a single letter, add an extra word, or use a different extension to make the website appear trustworthy at first glance.

Related: 8 Ways to Protect Your Very Small Business Reputation Online

How to check if your business is being impersonated

You can take some steps yourself, such as searching your business name on Google, checking social media platforms for similar accounts, looking for websites using variations of your business name, setting up Google Alerts, and paying attention to unusual customer complaints.

The challenge is that this process can be time-consuming and easy to miss. You may not have the time to regularly monitor dozens of websites, social media platforms, and online sources for signs of impersonation.

Bitdefender Ultimate Small Business Security can help you detect some of the warning signs that often accompany these scams. For example, Bitdefender Digital Identity Protection can alert you if business email addresses appear in known data breaches. Criminals often use exposed information from breaches to impersonate businesses, employees, or business owners.

The solution can also help protect the accounts and devices that criminals frequently target when attempting to hijack a business's online presence. Features such as phishing protection, scam detection, account security tools, and password management can reduce the risk of criminals gaining access to accounts that could later be used to impersonate your business.

Related: How to Check If Your Business Is Affected by a Breach (And What to Do if It Is)

What to do if someone is pretending to be your business

If you discover that someone is pretending to be your business, don't ignore it. Taking action early can help prevent customer confusion, financial losses, and reputational damage.

Document everything. Take screenshots of fake accounts, websites, messages, reviews, and advertisements. Keep records of dates, links, and customer reports. This information may be useful when reporting the impersonation to social media platforms, hosting providers, or authorities.

Report the fake account or website.  Most social media platforms have impersonation reporting processes. Website hosting providers may also remove fraudulent sites when provided with evidence.

Warn your customers. Post a notice on your website, social media accounts, and other official channels explaining the situation. Let customers know which accounts, websites, and contact details are legitimate.

Inform employees. Make sure staff know what is happening and understand how to respond to customer questions. If criminals are using your business name, employees should be prepared to recognize and report suspicious activity.

Monitor the situation. Impersonators often create new accounts after old ones are removed. Continue monitoring for new activity even after the initial problem appears resolved.

How to protect your business from impersonation scams

For many small businesses, reputation is everything. A single fake account, website, or email campaign can confuse customers, damage trust, and create problems that take months to fix. That's why monitoring your online presence and securing your accounts should be part of your overall cybersecurity strategy.

Consider:

• Claiming your business name on major social media platforms
• Registering important domain name variations
• Using strong passwords and multi-factor authentication
• Keeping business contact information consistent across platforms
• Regularly monitoring your online presence
• Educating employees about impersonation scams

The easier it is for customers to identify your official channels, the harder it becomes for criminals to fool them.

Try Bitdefender Ultimate Small Business Security free for 30 days and see how easy it can be to strengthen your business's cybersecurity.

FAQs

Can someone legally use my business name online?

In many cases, using a business name to impersonate a company, mislead customers, or commit fraud is illegal. The exact rules depend on your country and whether trademarks are involved.

How do I know if someone is impersonating my business?

Warning signs include fake social media accounts, customer complaints about orders you never received, suspicious emails, fake websites, and reviews that don't match your actual business activities.

What should I do if someone creates a fake profile for my business?

Document the evidence, report the profile to the platform, warn your customers, and continue monitoring for new impersonation attempts.

Can a fake website damage my business reputation?

Yes. Customers who interact with a fake website may associate scams, poor service, or financial losses with your legitimate business.

What is business impersonation fraud?

Business impersonation fraud occurs when criminals pretend to represent a legitimate company to steal money, personal information, or customer trust.