Scam Detective
Brand impersonation audit · $19 one-time

Every fake site using your name, mapped.

We map every live lookalike domain, typosquat, and copycat page impersonating your brand — each with evidence, a risk rating, and a takedown request you can send the same day. $19 one-time. No subscription.

  • Every live lookalike domain, typosquat, and copycat page we find
  • Evidence and a low / medium / high risk rating for each one
  • A ready-to-send takedown request for the registrar or host
Delivered in minutes·On screen + PDF·Money-back guarantee
Brand impersonation audit — $19
One-time payment · No subscription · Audit in minutes, on screen and as a PDF
Why now

The impersonation problem, in three numbers

230+
Phishing domains registered against a single credit union since November 2025. One target, hundreds of costumes — each one collecting member credentials under its name.
$42,000
Lost by one member to impersonators in the August 2026 VyStar Credit Union suit — a public court filing. The fake looked exactly like the real thing.
~60%
Of taken-down impersonation domains are serving a new fake within 24 hours. If you haven't mapped yours, the map is already out of date.
Proof of work

What an audit finds

The same desk that runs your audit publishes its work: 65 scam patterns documented across 8 weekly editions of our scam-wave research series — every one verified, published, and free to read on the research desk. Three of them below, shown the way a finding lands in your report.

01AI-cloned car dealership websiteshigh risk
Lookalike clone of a real business — the dealer's logo, listings, and photos copied down to the pictures, so the clone borrows the real dealer's name and clean reviews.
The evidence
“Wire transfer only.” — the FTC's September 1, 2026 scenario: a buyer pays for a rare classic or muscle car on the cloned site, then the “dealer” vanishes — or the real dealership has no record of the order, the payment, or a car.
What you’d do next
Fire the registrar-and-host takedown request citing the cloned domain, and pin a warning on your real site while the clone is live.
Documented in the September 15, 2026 edition — research desk →
02“MyChart Medicare Kit” phishinghigh risk
Brand impersonation by email and text — no clone site needed, just the name of the patient portal used across the country and a link that harvests the login.
The evidence
“Your MyChart Medicare Kit Awaits!” — signed “MyChart Health Network,” a Verona, Wisconsin entity that doesn't exist. More than 41 hospital and health systems, plus Pennsylvania's Attorney General, warned about it in a single week. Even the unsubscribe link is malicious.
What you’d do next
Takedown request to the sending domain's registrar and host, plus a patient alert through your real portal: there is no kit — click nothing.
Documented in the September 15, 2026 edition — research desk →
03Crypto-exchange “withdrawal alert” textsmedium risk
Brand impersonation by text message — the costume is the exchange's own “security team,” and the callback number in the text reaches the scammer, not the exchange.
The evidence
“Coinbase: A withdrawal of 2.417 BTC ($284,113.06) was initiated on your account. Verification code: 882914.” — the code is invented, and the script ends with the victim reading out their real login codes. Real exchanges never ask you to call a number from a message.
What you’d do next
No domain to seize — the costume is a phone number. Report the text to 7726 (SPAM) and at reportfraud.ftc.gov, and warn customers your real alerts never ask them to call.
Documented in the August 15, 2026 edition — research desk →

Sample findings from our published research — the brands named are the scammers’ costumes: documented impersonation targets, not Scam Detective customers, and no affiliation or endorsement is claimed. Your audit maps the fakes trading on your name, in exactly this format: the fake, the evidence, the risk rating, and the takedown request.

What your $19 buys

Inside every audit

Not a monitoring subscription, not a dashboard you have to babysit — a same-day, evidence-backed register of who is pretending to be you, and the paperwork to start shutting them down.

01
The full lookalike register
Every live lookalike domain, typosquat, and copycat page we find impersonating your brand — not a sample, the map.
02
Evidence for each one
What we saw and where: registration details, copied branding and content, the customers it's fishing for.
03
A risk rating per fake
Low, medium, or high — so legal, compliance, or marketing knows which fire to put out first.
04
One overall score and verdict
A 0–100 impersonation risk score for your brand right now, in plain English.
05
A ready-to-send takedown request
Addressed to the registrar or host, citing the specific infringing domains found. Sign and send it the same day.
Who this audit is for

Built for the brands impersonators love

Credit unions & community banks
Your members are the target. Fake “fraud department” pages and clone login sites drain member accounts under your name — and members blame you for it. One credit union has seen 230+ phishing domains since November alone.
Consumer brands
Clone storefronts and typosquat domains take orders — or sell counterfeits — under your label. The chargebacks, angry emails, and one-star reviews land on your support desk, not the scammer's.
Venues & live events
Fake ticket pages copy your event branding and sell seats that don't exist. Your box office inherits the fallout at the door, on the night, in front of a line of angry fans.
How it works

Three steps. Same day.

1
Tell us your name and domain
Two fields, no account. That's everything we need to start hunting for the fakes wearing your brand.
2
We research the impersonators
We map the live lookalike domains, typosquats, and copycat pages, pull the evidence on each, and rate the risk — delivered to your order page in minutes, on screen and as a PDF, with a link emailed to you.
3
Send the takedown requests
Your audit includes a ready-to-send takedown request per finding, addressed to the registrar or host and citing the infringing domains. Sign and send it the same day.
Straight talk

What we don’t do

—No continuous monitoring — this is a same-day snapshot of who's impersonating you, not a watch service.
—We don't execute takedowns — you (or your counsel) send the requests. We hand you everything they need to say yes.
—We can't recover stolen funds — if member or customer money has already moved, call your bank or card provider first.
—Not legal advice — the audit is evidence and a risk assessment. Your counsel decides what to escalate.
Questions

Asked before you asked

Is $19 really one-time?
Yes. You pay $19 once for one audit of your brand. There is no account, no recurring charge, and nothing to cancel.
How fast do I get the audit?
Minutes, not weeks. The full register — lookalike domains, typosquats, and copycat pages with evidence and risk ratings — lands on your order page shortly after payment, and we email you a link so you can come back to it. You also get the report as a PDF.
What if you find nothing impersonating us?
Then the audit says so, with the searches and sources behind that verdict — a clean bill is a real result. And every report carries our money-back guarantee: if the audit gives you nothing you can act on, reply to your receipt and we refund the $19, no questions asked.
Who sends the takedown request?
You do — or your counsel. We include a ready-to-send request addressed to the registrar or host of each infringing domain, citing the exact evidence. Registrars respond to the brand owner; most customers send it the same day.
We already found one fake — can you check it?
The audit covers your whole impersonation surface, including the fake you found. For a one-off consumer check on a single suspicious link, our $2 instant URL check does that in 60 seconds.
How do we reach you?
Email [email protected] — a real, monitored inbox. We answer questions about the audit before and after you buy.
One last thing

Impersonators registered a new domain today. Map them tomorrow?

$19, one-time. The full register, the evidence, and the takedown requests — same day.

Questions first? [email protected]