Why would someone clone my online store? What they want, why yours, and why now

Someone clones an online store to take money from people who already trust it. The store they copy is one shoppers already search for by name, and the timing can follow the sales calendar: a fake discount blends in best in the week every shop is offering a real one.

What does someone want from a copy of my store?

A cloned online store usually does one or more of five jobs: take payment and send nothing, send a counterfeit, collect card details at a fake checkout, collect customers’ personal details and passwords, or catch people searching for your name. Every one of them runs on the trust your customers already have in you.

Take the money and send nothing

This is the simplest version. A shopper finds your products at a price they have never seen from you, pays, and waits for a parcel that never comes. In 2024, The Register reported on one network of fake stores that researchers said had taken roughly $50 million from 850,000 people over three years, across 22,500 domains. Most of its buyers received nothing at all.

Send a counterfeit

Some fake stores do post something. As National Trading Standards puts it, “Consumers will either receive nothing, or they’ll get a bad quality item or a counterfeit of the brand they were expecting.” For your brand, the counterfeit can be the worse outcome. A shopper who got nothing knows they were scammed. A shopper who got a poor copy may think you sold it to them.

Collect card details at a checkout that isn’t real

Some fake stores make their money at the checkout. According to The Register, the main purpose of the network it reported on was to steal card data, using fake payment pages made to look like well-known payment services.

Collect names, addresses and passwords

A checkout asks for a name, an email address, a phone number and a home address before it asks for a card, so a fake one can collect those too. That is a list of people who wanted to buy from you, with their contact details, which can be sold or used for the next scam aimed at them. If your store has customer accounts, a copied sign-in page can collect passwords as well, and a customer who uses the same password on both puts their real account with you at risk.

Catch the people searching for you

Some copies sell nothing at all. They carry your pages and your name so that they turn up when people search for you, then send each visitor on to something that pays whoever runs them: another scam, a page of ads, or a shop that pays for the referral.

Why my store?

A clone earns money only if shoppers believe it, so the stores worth copying are the ones shoppers already trust: brands people search for by name, priced so a steep discount looks plausible, and sold in enough places that one more shop goes unnoticed. Most of the reasons your store was copied are things you have done well.

• People search for your products by name. Someone who types your brand and a product into a search bar has already decided what they want. They are looking for a price, and a fake can offer one.
• Your prices leave room for a believable discount. A steep discount on a cheap product looks suspicious. On a premium one it looks like a sale. The FTC notes that some shopping ads sent people to sites impersonating well-known brands and offering big discounts.
• You sell through partners and resellers. When a shopper has already seen your products on three other sites, a fourth raises no questions.
• You sell direct. If your own website is where most of your customers buy, an address that looks like yours is all a copy needs.
• Your products sell on their pictures. Fashion, beauty and homeware are bought on how they look, and the photographs are on your site, ready to copy.
• Your own marketing taught shoppers to expect offers. If you run sales, discount codes and launch promotions, a fake one looks like your next email.

One of our own cases shows how these add up. An upmarket US e-commerce brand sells through its own store and through partners and resellers around the world, and it already had an enterprise brand-protection provider. Within three days of our monitoring going live, we had found seven fake stores posing as it, the first within nine hours.

Why now? Why Black Friday and other sales suit fake stores

Sales give a fake store cover. Around Black Friday, low prices are expected and ads are everywhere, so a fake discount looks like every other discount that week. In November 2025, National Trading Standards reminded shoppers to watch for “the annual Black Friday boom in scam adverts”.

Many shopping scams start with an ad. In a Censuswide survey of 2,001 UK adults, published by National Trading Standards in November 2025, 14% of respondents who shop online had been scammed after buying something from clicking on an advert on a search engine or social media. In the US, shopping scams were the most reported scam on social media in 2025, according to the Federal Trade Commission, and more than 40% of people who reported losing money to a scam on social media said it started when they ordered something they had seen in an ad.

Some shoppers now use an AI assistant to help decide what to buy. In a Which? survey of 1,078 members of its panel in September 2026, 32% said they used AI chatbots for shopping or researching things to buy. We have written separately about when AI assistants send shoppers to a fake store.

Black Friday is the obvious date, and the same logic applies to January sales, a product launch, or any campaign of yours that sends people looking for your name with a deal in mind. A copy that turns up just before one of those moments may well have been built for it.

Is it someone I know?

Usually not. Fake stores tend to be built from ready-made kits and run in batches, by people working through many brands at once. Your store was a good fit for the kit, and that is about as personal as it gets.

In our e-commerce case, the seven fake stores ran on two platforms, two on Shopify and five on WooCommerce, and came from two different kits, as if two separate operations were behind them. Their domains were registered with registrars in four countries. The network The Register reported in 2024 was run as a franchise: a core crew wrote the software and ran the servers, and affiliates ran the shops.

If it does look personal, check whether it is a copy at all. A rival, a former partner or an ex-employee trading under a name close to yours, as themselves, is a different problem with different rules. Our guide to which lookalike domains can be taken down covers it.

Is a fake copy of my store a big deal for the business?

Yes, though the cost never arrives as one bill. The customer loses the money first, and any dispute with their bank is with whoever took the payment, which was not you. Much of what follows can land on your business, spread across teams that each see only their own part of it.

• Customer service answers people who paid a store you never ran.
• Your e-commerce team stops running the shop to gather screenshots, report the copy and keep checking whether it has gone.
• Finance pays for any goodwill refund you choose to give on an order somebody else was paid for.
• Your reviews can pick up the counterfeit, because a customer sent a poor copy may review the brand on the label.

The people running the copy came for your customers’ money. By the time a customer tells you about the order, the cost can already be yours.

Will it come back?

Often, yes, on a new address. Taking a fake store down removes that store, and whoever ran it still has the kit, the copied pages and every reason they picked you. In our e-commerce case, more fake stores appeared after the first seven, and by the end of the second week 14 fake stores had been taken down.

That is what makes fake stores so tiring to fight by hand. Each new copy needs its own evidence, sent to whichever registrar, host and store platform it uses this time, and each of them has its own abuse process. Some reports come back pointing you somewhere else. Somebody has to keep checking whether each store has really gone, and start again when the next one appears. In the weeks before Black Friday, that person is also running the sale.

Or let us do the chasing. DefendDomain watches, day and night, for new addresses using your name and for copied pages and wording from your store, including on addresses with no trace of your name. When a fake store goes live, you approve its takedown with one click, and the reports, follow-ups and checks run for you. If you would rather hand that decision over, on our Enterprise plan we make that click too. We keep watching after a store comes down, so its replacement is found the same way. More on how we find fake stores and get them taken down.

What to do this week

• If a copy is live, start with what to do when someone clones your website.
• If it is taking orders in your name, report it to us and one of our team will call you back, usually the same working day.
• See which lookalikes of your web address are already registered, and which of them can send email.
• List your official shop address and your authorised stockists on your own site, so a customer in doubt has something to check against.

DefendDomain provides early detection and early takedown of domain impersonation, including lookalike domains and copies of websites and online stores, for mid-market e-commerce, SaaS, fintech and professional-services companies. Takedowns are unlimited on our Pro and Enterprise plans.

Frequently asked questions