Brand Impersonation: Review, Evidence & Reporting

Key takeaways

• Build the official baseline
• Search for variants with a bounded schedule
• Triage copied branding and harmful behavior

Build the official baseline

List each official account URL, exact handle, account owner and recovery contact in a private register. Publish the official links on your own website so customers have a reliable reference. Record known regional accounts, resellers and parody accounts separately: a handle containing your brand is not automatically an impersonator. If your team changes a handle, update both the website and register so an outdated official link does not confuse the next review.

Search for variants with a bounded schedule

Use each platform search for the exact brand and a few plausible variants: punctuation changes, a doubled letter, support or help appended to the name, and the old handle after a rename. Search engines can supplement this with a query such as site:instagram.com "Example Studio", but results can be stale or incomplete. Example Studio is a fictional worked example. Prioritize the channels where customers actually contact you. Set a review interval and owner, and record a completed review even when there is no actionable result. MyRecon is an on-demand public username check; it does not provide a continuous brand-monitoring alert service.

Triage copied branding and harmful behavior

For each candidate, note its exact URL and current handle, the copied logo or description, any claim to be official, and the destination of visible links. Compare these with your official baseline. Classify the case as a name collision, disclosed parody or fan account, unresolved lookalike, or documented impersonation concern. A copied image plus a request to send money to an unrelated domain needs a different response from an empty account with a similar name. Do not contact or pay the suspected account to test it, and do not expose customer messages in a public evidence post.

Preserve a small evidence packet

Save a screenshot that includes the handle, relevant claim and visible URL, with an observation timestamp and timezone. Keep the original page URL alongside it; a screenshot alone can lose context. If the evidence comes from a customer, obtain permission to retain it and redact unrelated customer details from the report copy. Record the official account URL and explain the specific mismatch. Keep a separate status for evidence unavailable behind a login screen; an inaccessible profile does not establish that an account is harmless or fake.

Report, notify and recheck

Use the platform impersonation form from its official help center. Submit only the requested proof of authority through that route, and save the report reference. If customers are at risk, publish a factual notice through your verified channels listing your official contact and payment domains. Avoid naming an unresolved candidate as a confirmed fraudster. Revisit the exact candidate URL after the platform responds. Record removed, still accessible or unable to verify, rather than treating submission as successful removal.

Worked example: support lookalike

Suppose the official handle is example_studio and a candidate example_studio_help copies the logo and says payments must go through example-payments.invalid. The reserved .invalid domain is illustrative, not a real destination. The useful report contains both account URLs, the observed payment instruction, timestamped screenshots and the official payment-domain reference. The conclusion is a documented impersonation concern; it does not identify the person operating the account. If the candidate only shares the display name with no misleading claim, leave it unresolved or a name collision.