When customers see a message from your brand on social media or in their inbox, is it really your brand, or is it a scam? The odds are rising that it could be a con. Brand-impersonation attacks increased eleven-fold from 2014 to 2018, in part because they’re so easy. Anyone can create a social media profile, and many companies have unprotected email domains that criminals can hijack for real-looking phishing campaigns. Here’s how you can protect your brand and keep your customers’ trust.
\r\nScams that trick victims into thinking they’re dealing with a store, brand or service provider they trust are not new, but there are new developments making these attacks more common. One is the growing organization and sophistication of cybercriminal gangs, who carefully profile the types of victims they want to target and even set fraud quotas for their criminal employees.
\r\nAnother factor is the ease with which scammers can use brands’ own tools to cloak their identity. Copying a brand logo or even a validation symbol like the Twitter checkmark takes only a few minutes and minimal skills. Because email was originally developed without safeguards to verify senders’ identity, many if not most brands’ domains are open to tech-savvy malicious users. Without raising any alarms, they can launch phishing attacks that appear to come from the brand’s email accounts. This practice is known as domain spoofing.
\r\nAutomation has dramatically increased the speed and scope of brand-impersonation fraud attempts, too. Scammers now send nearly 23 phishing emails every second and launch a new phishing domain every five minutes. The result is a perfect storm of brand fakery targeting consumers and damaging brands.
\r\nSocial media scams make the most of real-time interaction to quickly steal account credentials and payment data from consumers. Scammers create fake accounts that look like their target brand – complete with copied logos and forged account-validation symbols.
\r\nWith these accounts, they can offer fake coupons and deals, show up in brand-related threads posing as customer service representatives and run fake contests. When Apple released the iPhone X, for example, criminals created more than 500 Apple-imposter social media accounts to promote fake iPhone giveaways. All hopeful victims had to do was follow a link to a website that would quietly steal their credentials, take their payment data, or install malware on their devices.
\r\nPhishing attacks – emails from scammers posing as brands, stores, or service providers – rose by 250% during 2018, according to Microsoft. In addition to domain spoofing, fraudsters also send emails from “lookalike domains” (such as mlcrosoft.com instead of microsoft.com), send malicious links, request victims’ login and payment credentials, and even threaten victims with consequences for nonpayment. This last method swept the U.S. last fall and winter when scammers posing as local utility companies threatened to cut power to victims unless they paid a fictitious unpaid balance immediately.
\r\nImpersonation scams can hurt brands in several ways, even though brands are victims in these schemes, too. First and foremost, scams can drive away customers. Victims may blame the brand for not preventing the fraud, and research shows that 63% of consumers stop shopping with a brand after one bad experience. Other victims, as well as customers who learn about the scam in the media, may hesitate to open future emails from that brand, and that can cause marketing email campaigns lose effectiveness. News reports and social media discussions can also steer potential customers toward other brands.
\r\nPhishing scams also require damage control. Brands that are targeted need to warn their customers about the impersonation scam. They also need to try to find out how the phishing is happening. Are fraudsters using the brand’s domains to send email? If so, implementing better email security is an urgent priority. Are scammers setting up lookalike accounts on social media? Those accounts must be reported and monitored.
\r\nThere are three core areas that help companies protect their brands from abuse by cybercrooks: communication, security and monitoring.
\r\nCommunication: Include a safety policy in customer-facing emails, on your social media accounts, and on your site, along the lines of “Brand XYZ will never contact you to ask for your customer login or payment card information.” Visual communication matters, too, so keep your logo, colors and other visual branding elements consistent across channels, so knockoffs are easier for customers to spot. And when scammers target your brand, let your customers know what to watch for.
\r\nBetter security: Create strong passwords for your brand’s social media accounts, keep a running list of who has login access, and update passwords when there are staffing changes. To prevent domain spoofing, implement a DMARC sender authentication policy on all your email domains. This open-source protocol gives domain owners the power to detect and reject unauthorized users.
\r\nMonitoring: Use social monitoring tools to keep tabs on brand mentions and conversations. Report scam accounts when they appear and delete comments on your pages and posts by accounts impersonating your brand. For email, DMARC will show you who’s sending emails from your domains (employees, third-party tools like MailChimp and maybe fraudsters) and can flag or reject suspicious outgoing messages. Finally, respond quickly to customer reports of scammers abusing your brand.
\r\nProtecting your brand from impostors requires attention to what’s happening in your brand’s communication channels, as well as regular security improvements. These efforts are a good way to drive scammers away from your brand in search of easier targets. They’re also a must to build and maintain trust with your customers in an age when brands and consumers need to be allies in the fight against cybercrime.
\n","docType":"article","guid":"articles_06b29fadf4416dc46baf5c6c2eb6e946","lastModified":"2019-04-18T14:00:00.000Z","published":"2019-04-18T14:00:00.000Z","structuredData":null,"subtitle":"Phishing attacks rose by 250% in 2018.","template":"legacy","title":"Brand-Impersonation Fraud Is On the Rise and Can Hurt Your Business","type":"article","author":{"avatar":null,"bio":"Rafael Lourenco is Executive Vice President at ClearSale, a Card-Not-Present fraud prevention operation that protects e-commerce merchants against chargebacks. The company’s flagship product, Total Guaranteed Protection, is an end-to-end outsourced fraud detection solution for online retailers. Follow on twitter at @ClearSaleUS or visit http://clear.sale/.","name":"Rafael Lourenco","image":null,"slug":null,"social":{"facebook":"","linkedin":"https://www.linkedin.com/in/rafael-lourenco-5a71b823/","twitter":"https://twitter.com/clearsaleus","website":"https://www.clear.sale/"},"status":"enabled","title":null,"type":"New BDC Member","user":{"imagePath":"https://staging.business.com/images/uploads/user/profile/9dac2af9242e2349bf049cf1bf75c63ae00f1.jpg","profile":{"company":"ClearSale","jobTitle":"EVP","website":"https://www.clear.sale/"}}},"breadcrumbs":null,"channels":{"primary":{"name":"Marketing","slug":"marketing"},"sub":{"name":"Branding","slug":"branding"}},"meta":{"robots":"index, follow","description":"Brand fraud, or impersonating a company to scam customers, is on the rise. It's important to understand the signs of brand fraud.","title":"3 Tips to Prevent Brand Impersonation and Build Trust - business.com"},"parsedContent":{"toc":[{"id":"brand-impersonation-is-big-business","title":"Brand impersonation is big business"},{"id":"social-media-scams-that-steal-customer-data","title":"Social media scams that steal customer data"},{"id":"email-impersonations-that-defraud-your-customers","title":"Email impersonations that defraud your customers"},{"id":"the-fallout-for-brands-after-impersonation-scams","title":"The fallout for brands after impersonation scams"},{"id":"reducing-the-risk-of-brand-impersonation","title":"Reducing the risk of brand impersonation"}],"json":[{"component":"p","children":["When customers see a message from your brand on social media or in their inbox, is it really your brand, or is it a scam? The odds are rising that it could be a con. ",{"component":"a","props":{"href":"https://www.adweek.com/brand-marketing/how-to-protect-your-brand-from-malicious-brand-impersonations/","target":"_blank","rel":"nofollow"},"children":["Brand-impersonation attacks increased eleven-fold"]}," from 2014 to 2018, in part because they’re so easy. Anyone can create a social media profile, and many companies have unprotected email domains that criminals can hijack for real-looking phishing campaigns. Here’s how you can protect your brand and keep your customers’ trust."]},{"component":"h2","props":{"id":"brand-impersonation-is-big-business"},"children":["Brand impersonation is big business"]},{"component":"p","children":["Scams that trick victims into thinking they’re dealing with a store, brand or service provider they trust are not new, but there are new developments making these attacks more common. One is the growing organization and sophistication of cybercriminal gangs, who carefully profile the types of victims they want to target and even set fraud quotas for their criminal employees."]},{"component":"p","children":["Another factor is the ease with which scammers can use brands’ own tools to cloak their identity. Copying a brand logo or even a validation symbol like the Twitter checkmark takes only a few minutes and minimal skills. Because email was originally developed without safeguards to verify senders’ identity, many if not most brands’ domains are open to tech-savvy malicious users. Without raising any alarms, they can launch phishing attacks that appear to come from the brand’s email accounts. This practice is known as domain spoofing."]},{"component":"p","children":["Automation has dramatically increased the speed and scope of brand-impersonation fraud attempts, too. ",{"component":"a","props":{"href":"https://www.pcmag.com/news/363217/more-than-1-1m-lost-to-cybercrime-every-minute","target":"_blank","rel":"nofollow"},"children":["Scammers now send nearly 23 phishing emails every second"]}," and launch a new phishing domain every five minutes. The result is a perfect storm of brand fakery targeting consumers and damaging brands."]},{"component":"h2","props":{"id":"social-media-scams-that-steal-customer-data"},"children":["Social media scams that steal customer data"]},{"component":"p","children":["Social media scams make the most of real-time interaction to quickly steal account credentials and payment data from consumers. Scammers create fake accounts that look like their target brand – complete with copied logos and forged account-validation symbols."]},{"component":"p","children":["With these accounts, they can offer fake coupons and deals, show up in brand-related threads posing as customer service representatives and run fake contests. When Apple released the iPhone X, for example, ",{"component":"a","props":{"href":"https://www.cnet.com/news/free-apple-iphone-x-scams-too-good-to-be-true-facebook-instagram/","target":"_blank","rel":"nofollow"},"children":["criminals created more than 500 Apple-imposter social media accounts"]}," to promote fake iPhone giveaways. All hopeful victims had to do was follow a link to a website that would quietly steal their credentials, take their payment data, or install malware on their devices."]},{"component":"h2","props":{"id":"email-impersonations-that-defraud-your-customers"},"children":["Email impersonations that defraud your customers"]},{"component":"p","children":["Phishing attacks – ",{"component":"a","props":{"href":"https://securityboulevard.com/2019/03/microsoft-phishing-attacks-increased-250-from-january-to-december-2018/","target":"_blank","rel":"nofollow"},"children":["emails from scammers posing as brands"]},", stores, or service providers – rose by 250% during 2018, according to Microsoft. In addition to domain spoofing, fraudsters also send emails from “lookalike domains” (such as mlcrosoft.com instead of microsoft.com), send malicious links, request victims’ login and payment credentials, and even threaten victims with consequences for nonpayment. This last method swept the U.S. last fall and winter when ",{"component":"a","props":{"href":"http://www.eei.org/resourcesandmedia/energynews/Pages/New%20Email%20Scam%20Targets%20Utility%20Customers.aspx","target":"_blank","rel":"nofollow"},"children":["scammers posing as local utility companies"]}," threatened to cut power to victims unless they paid a fictitious unpaid balance immediately."]},{"component":"h2","props":{"id":"the-fallout-for-brands-after-impersonation-scams"},"children":["The fallout for brands after impersonation scams"]},{"component":"p","children":["Impersonation scams can hurt brands in several ways, even though brands are victims in these schemes, too. First and foremost, scams can drive away customers. Victims may blame the brand for not preventing the fraud, and research shows that ",{"component":"a","props":{"href":"https://www.fool.com/investing/2019/02/22/how-much-damage-can-1-bad-experience-cause-a-brand.aspx","target":"_blank","rel":"nofollow"},"children":["63% of consumers stop shopping with a brand after one bad experience"]},". Other victims, as well as customers who learn about the scam in the media, may hesitate to open future emails from that brand, and that can cause marketing email campaigns lose effectiveness. News reports and social media discussions can also steer potential customers toward other brands."]},{"component":"p","children":["Phishing scams also require damage control. Brands that are targeted need to warn their customers about the impersonation scam. They also need to try to find out how the phishing is happening. Are fraudsters using the brand’s domains to send email? If so, implementing better email security is an urgent priority. Are scammers setting up lookalike accounts on social media? Those accounts must be reported and monitored."]},{"component":"h2","props":{"id":"reducing-the-risk-of-brand-impersonation"},"children":["Reducing the risk of brand impersonation"]},{"component":"p","children":["There are three core areas that help companies protect their brands from abuse by cybercrooks: communication, security and monitoring."]},{"component":"p","children":[{"component":"strong","children":["Communication"]},": Include a safety policy in customer-facing emails, on your social media accounts, and on your site, along the lines of “Brand XYZ will never contact you to ask for your customer login or payment card information.” Visual communication matters, too, so keep your logo, colors and other visual branding elements consistent across channels, so knockoffs are easier for customers to spot. And when scammers target your brand, let your customers know what to watch for."]},{"component":"p","children":[{"component":"strong","children":["Better security"]},": Create strong passwords for your brand’s social media accounts, keep a running list of who has login access, and update passwords when there are staffing changes. To prevent domain spoofing, ",{"component":"a","props":{"href":"https://techcrunch.com/2018/11/01/half-fortune-500-dmarc-email-security/","target":"_blank","rel":"nofollow"},"children":["implement a DMARC sender authentication policy"]}," on all your email domains. This open-source protocol gives domain owners the power to detect and reject unauthorized users."]},{"component":"p","children":[{"component":"strong","children":["Monitoring"]},": Use social monitoring tools to keep tabs on brand mentions and conversations. Report scam accounts when they appear and delete comments on your pages and posts by accounts impersonating your brand. For email, DMARC will show you who’s sending emails from your domains (employees, third-party tools like MailChimp and maybe fraudsters) and can flag or reject suspicious outgoing messages. Finally, respond quickly to customer reports of scammers abusing your brand."]},{"component":"p","children":["Protecting your brand from impostors requires attention to what’s happening in your brand’s communication channels, as well as regular security improvements. These efforts are a good way to drive scammers away from your brand in search of easier targets. They’re also a must to build and maintain trust with your customers in an age when brands and consumers need to be allies in the fight against cybercrime."]}]},"resource":null,"sponsorship":null,"thumbnail":{"path":"https://staging.business.com/images/content/5cb/8a1f67b4374f5148b4588/1500-0-","caption":"Denis Kavyer / Shutterstock / Credit: Photo Credit: Fizkey / Shutterstock","isBlurred":true},"bestPicks":null},"related":{"relatedArticles":[{"title":"Brand Reputation: How to Protect Your No. 1 Asset","canonical":"https://www.business.com/articles/protect-brand-reputation/","slug":"protect-brand-reputation","thumbnail":"https://www.business.com/images/content/5e0/6a8407b4374280b8b4573/1500-0-","dek":"Your most valuable asset is your brand reputation. Learn how to protect it.","lastModified":"2019-12-31T17:00:00Z","published":"2019-12-31T17:00:00Z","sponsored":false},{"title":"Logo Remixes: Are These Big Brand Logo Changes Hits or Misses?","canonical":"https://www.business.com/articles/are-these-big-brand-logo-changes-hits-or-misses/","slug":"are-these-big-brand-logo-changes-hits-or-misses","thumbnail":"https://www.business.com/images/channel/marketing.jpg","dek":"Let's take a close look at big brand logo design successes and failures, plus key takeaways for your business.","lastModified":"2015-09-23T16:00:00Z","published":"2015-09-23T16:00:00Z","sponsored":false},{"title":"6 Social Media Weapons to Boost Your Branding and Marketing","canonical":"https://www.business.com/articles/social-media-marketing-secret-weapons/","slug":"social-media-marketing-secret-weapons","thumbnail":"https://www.business.com/images/content/5b8/406bd1039eb0c6e8b45a2/1500-0-","dek":"Don't hinder your growth by ignoring social media.","lastModified":"2018-08-27T14:30:00Z","published":"2018-08-27T14:30:00Z","sponsored":false},{"title":"How to Create a Brand Identity: A Step-By-Step Guide","canonical":"https://www.business.com/articles/create-a-brand-identity/","slug":"create-a-brand-identity","thumbnail":"https://www.business.com/images/content/5ee/ba65b9c658abc098b458d/1500-0-","dek":"Brand identity is one of the most effective strategies that businesses of any size can use to gain a competitive edge.","lastModified":"2020-06-19T19:00:00Z","published":"2020-06-19T19:00:00Z","sponsored":false},{"title":"How to Inject Creativity Into Your Business's Marketing Methods","canonical":"https://www.business.com/articles/inject-creativity-into-your-business-marketing-methods/","slug":"inject-creativity-into-your-business-marketing-methods","thumbnail":"https://www.business.com/images/content/5e0/b9a7c5a215e2b0d8b4576/1500-0-","dek":"The more creativity you can include in your campaigns, the better off you (and your brand) will be.","lastModified":"2020-01-05T13:00:00Z","published":"2020-01-05T13:00:00Z","sponsored":false},{"title":"Logo Remixes: Are These Big Brand Logo Changes Hits or Misses?","canonical":"https://staging.business.com/articles/are-these-big-brand-logo-changes-hits-or-misses/","slug":"are-these-big-brand-logo-changes-hits-or-misses","thumbnail":"https://staging.business.com/images/content/560/2d7953287b183658b4585/1500-0-","dek":"Let's take a close look at big brand logo design successes and failures, plus key takeaways for your business.","lastModified":"2019-07-31T20:57:10Z","published":"2015-09-23T16:00:00Z","sponsored":null},{"title":"4 Big Reasons Your Brand Isn’t Growing","canonical":"https://www.business.com/articles/brand-growing/","slug":"brand-growing","thumbnail":"https://www.business.com/images/content/58b/dda7c3087b1eb06d02c33/1500-0-","dek":"A solid brand is hard to build. Here are four brand-building mistakes you should avoid.","lastModified":"2017-03-07T08:00:00Z","published":"2017-03-07T08:00:00Z","sponsored":false},{"title":"4 Tips to End Brand Dilution and Get Your Real Marketing Message Out There","canonical":"https://www.business.com/articles/end-brand-dilution/","slug":"end-brand-dilution","thumbnail":"https://www.business.com/images/content/5da/89e139c658ada388b456e/1500-0-","dek":"Turn your story into a powerful tool for your brand.","lastModified":"2019-10-22T13:00:00Z","published":"2019-10-22T13:00:00Z","sponsored":false},{"title":"Boost Your Brand With These 4 Best Practices","canonical":"https://www.business.com/articles/boost-your-brand-with-these-best-practices/","slug":"boost-your-brand-with-these-best-practices","thumbnail":"https://www.business.com/images/content/5e4/ab4297b43744f3c8b456f/1500-0-","dek":"Building a strong recognizable brand is key to moving your company to the next level.","lastModified":"2020-02-17T15:30:00Z","published":"2020-02-17T15:30:00Z","sponsored":false},{"title":"Storytelling Can Make or Break Your Brand","canonical":"https://www.business.com/articles/storytelling-builds-brands/","slug":"storytelling-builds-brands","thumbnail":"https://www.business.com/images/content/5b2/a8bfd51ee478d228b456f/1500-0-","dek":"If you're a direct-to-consumer business, your marketing campaigns need to tell a story.","lastModified":"2018-06-20T16:17:00Z","published":"2018-06-20T16:17:00Z","sponsored":false},{"title":"How to Create Greater Brand Awareness in 2020","canonical":"https://www.business.com/articles/create-greater-brand-awareness/","slug":"create-greater-brand-awareness","thumbnail":"https://www.business.com/images/content/5dd/b4d655a215e12638b4567/1500-0-","dek":"Creating brand awareness can help increase conversions and boost your bottom line.","lastModified":"2019-11-26T15:00:00Z","published":"2019-11-26T15:00:00Z","sponsored":false},{"title":"6 Brand Building Blocks for 2017","canonical":"https://www.business.com/articles/megan-totka-branding-building-blocks/","slug":"megan-totka-branding-building-blocks","thumbnail":"https://www.business.com/images/content/589/34a682f87b154073a8f77/1500-0-","dek":"Building a great business brand is all about details and consistency.","lastModified":"2017-02-10T17:00:00Z","published":"2017-02-10T17:00:00Z","sponsored":false}],"relatedReviews":[{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5b99633151ee47a8528b4582/Call_center_bbernard.jpg","canonical":"https://staging.business.com/categories/call-center-services/","title":"The Best Call Center Services for 2021","dek":"Our team has compared the best call center services for 2021. See up-to-date reviews for the top-rated answering services.","slug":"call-center-services","lastModified":"2021-02-26T14:22:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df7b1b69c658a61728b4567/Answering_Service_scyther5_Getty.jpg","canonical":"https://staging.business.com/categories/best-answering-services/","title":"The Best Answering Services of 2021","dek":"Our teams have compared the best answering services for 2020. See up-to-date reviews and prices for these top-rated services.","slug":"best-answering-services","lastModified":"2021-02-26T14:18:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5d4c65367b43741a258b4572/Laptop_Sfio_Cracho.png","canonical":"https://staging.business.com/categories/crm-software/","title":"The Best CRM Software of 2021","dek":"Looking for the best CRM software? We have easy-to-read, expert unbiased reviews and feature comparisons of the best and cheapest programs.","slug":"crm-software","lastModified":"2021-02-24T14:09:00Z"}],"relatedSponsoredArticles":null}},"pageContext":{"displayModified":"2019-04-18T14:00:00.000Z","template":"legacy","title":"Brand-Impersonation Fraud Is On the Rise and Can Hurt Your Business","meta":{"robots":"index, follow"},"docType":"articles","slug":"tips-prevent-brand-fraud","canonical":"https://staging.business.com/articles/tips-prevent-brand-fraud/","skipTOC":false}},"staticQueryHashes":[]}