Preserve before you complain: a successful takedown erases the proof
Spend the first two hours on one task: keeping the fake pages exactly as they are. For a website, take page-by-page screenshots that show the address bar and the system clock, and save the full address of each page. Cover the home page, the contact page, the payment page and any page showing your company name, logo, licence numbers or office photos. Save the page source where you can. For a social page, capture the page name, its address or ID, the creation details, the posts, any pinned contact information and conversations with victims. List phone numbers, bank accounts, e-wallet numbers and chat handles in a separate table.
Next, look up what is public. A domain lookup shows which registrar the name was registered through, when it was registered and where it points. The pointing information usually indicates which hosting company or content delivery service carries the site. Screenshot what you find and do not guess at what you cannot. This step tells you where the complaints go. If the affected name turns out to be your own, expired and taken by someone else or with its settings altered, that is a different situation covered in an expired or hijacked company domain. If an account was broken into, see when the company website or social account is hacked.
Then gather evidence of harm. Where clients have already been deceived, ask them for their exchanges with the fake page and their transfer records. Where there are no victims yet, keep the payment details and the persuasion script shown on the page. Do not chat with the people behind the page to draw them out, and never send a payment posing as a customer to collect proof. Arrange everything by date in one folder. The four complaints, the notice to clients, the police report and any later lawsuit all draw on the same pack.
Registrar and host: send both letters together
The registrar controls the name and the host controls the content. Either can make the site disappear, so write to both. Reputable registrars and hosts keep an abuse channel, usually a dedicated mailbox or a web form listed on their site or in the public lookup result. Write in English and put the nature of the complaint in the subject line: a website impersonating a named company to commit fraud, with a request for suspension.
Five paragraphs are enough. One, who you are: registered company name, registration number, official website and official contact email. Two, the target: the full domain and the specific addresses. Three, the imitation: the site uses your name, logo or licence details, shown in side-by-side screenshots with each match marked. Four, the harm: the page collects personal data or solicits payment, and victims exist or are likely, with evidence. Five, the request: suspend the domain or remove the content, and preserve related records for law enforcement. Attach the registration certificate, any trademark certificate, the screenshots and the victim records.
Keep expectations realistic. Speed and standards vary widely between providers. Some act quickly and others keep asking for more, so no number of days is offered here. Hidden registrant details are the norm. You will rarely learn who is behind the name, because registrars generally release that only to law enforcement or a court. After a host removes the content, the operator can move to another host, which is why the registrar complaint cannot be skipped. Where the domain itself contains your registered trademark, a lawyer can also assess a domain dispute proceeding to have the name transferred to you. It is slower but permanent. Having no registered mark makes every step harder; see trademark registration in the Philippines.
Search engines, browser warnings and payment channels: cut the traffic and the money
While the site is still up, you can make it hard to find, hard to open and unable to collect. The main search engines accept reports of phishing or fraudulent pages and also process removal requests for infringing content. The safe-browsing systems behind the main browsers take phishing reports as well, and a flagged address shows users a red warning before the page loads. These channels do not require proof of identity; an address and a short description will do. Reports made through the rights-holder route with evidence attached tend to succeed more often.
If the impostor is buying advertisements to drive people to the fake page, report the advertiser account to the ad platform for impersonating a business. That is often much quicker than waiting for organic results to drop. If the fake page lifted photographs and text from your own website, a copyright removal request to the host and the search engine is a separate ground, and frequently a faster one.
The money side matters just as much. List every bank account, e-wallet number and payment QR code shown on the fake page and report in writing to the bank or payment provider concerned that the account is being used to defraud the public in your company's name, asking that it be reviewed under their internal rules. Where a victim has already paid, the victim must contact their own payment provider at once and file a report, because only the payer can start a recall or freeze request; the process is in reporting cybercrime in the Philippines. The company should not promise recovery on a victim's behalf and should not reimburse informally. What you can do is supply proof that the company was not involved and pass the account details to law enforcement. For fake emails announcing new bank details, see business email compromise.
Police report, client notice and records: what must run alongside takedown
Takedown stops the page from deceiving people. The police report and the public notice establish that the deception was not yours. Report to the police cybercrime unit or the corresponding division of the national investigation agency, bring the evidence folder, and obtain a receipt or reference number. The value lies less in the prospect of an arrest than in a dated official record that the company knew and reported on that day. When a victim later complains to a government office, or an agency comes to verify, that receipt and your notice are the most direct proof. If a notice from an agency follows, the reply format is in writing a reply to an inspection notice.
Keep the notice short and checkable. On the website home page, in a pinned post and in an email to existing clients, state that a site or account impersonating the company has been found and name the fake domain or page. State the only official website, accounts and contact details. State that the company never collects payment through personal accounts. Ask anyone affected to write to a dedicated address and to notify their payment provider and the police promptly. Do not name a suspect, and do not write that the company bears no responsibility for any loss, which pushes victims away.
Brief your own people as well. Reception, customer service and sales should know what has happened, what to say when a victim calls and to whom to pass the call. Record every complaint in one table with the submission time, the acknowledgment and the reply. Fake pages often return under a similar domain or page name after removal. With that table and a ready evidence pack, the second round of complaints needs only a few words changed.
Making impersonation harder, and where Yixing fits
Impostors choose the companies that are easiest to copy: no registered mark, unverified official accounts, and no page explaining how to check that you are dealing with the real firm. Close those gaps. Register the company name and logo as trademarks in the Philippines. Complete business verification on the main social platforms. Register the common misspellings and alternative endings of your domain and point them to the official site. Hold every domain and account in the company's name with two-factor authentication. Publish a permanent page listing official channels and how the company accepts payment.
Add a monthly sweep. Search your company name, brand name and frequent misspellings on the main search engines and platforms and look for new pages. Free keyword alerts can do part of this for you. The earlier a copy is found, the fewer victims there are and the easier the complaint is to prepare. Keep the evidence folder structure and the complaint templates ready for reuse, and make one named person responsible for the sweep so that it does not lapse after the first quiet month.
Yixing International Travel (SEC Registration No. CS202009551; Bureau of Immigration accredited, BI Accreditation No. CA-202624381-1) provides compliance retainer support to foreign-owned companies in the Philippines: assembling registration and authority documents, preparing English complaints to registrars, hosts and platforms, drafting the clarification notice to clients, accompanying you to file the police report and archiving the receipts, arranging trademark registration, and referring you to a licensed lawyer where a domain dispute or lawsuit should be assessed. We are a private consultancy with no affiliation to any government office or platform, and we promise neither a takedown time nor any recovery of funds. Send us the link the day you find it; evidence first, then the complaints go out in parallel. Physical counterfeits of your brand follow a different route, covered in enforcing against counterfeits of your brand. For your specific case consult a licensed lawyer; this article is not legal advice.
Frequently Asked Questions
What is the first step when a fake website impersonates our company?
Who do we complain to for takedown?
Can we find out who registered the fake domain?
We have no registered trademark. Can we still get it removed?
How long does removal of a fake page take?
A client was defrauded by the fake site. Is the company liable?
What if it reappears under another domain after removal?
Let’s talk through your situation — free
Every company is different. Leave your details and a Chinese-speaking advisor will get back within 1 business day with practical, industry-specific guidance and a transparent quote.
Get help with Compliance & Retainer → Free consultation
Fake pages and accounts on social platforms: use the impersonation channel
The major platforms each have a reporting route built for impersonation of a business or brand, and it works far better than the ordinary report button on a post. That route normally asks the reporter to show authority to act for the business being imitated. Submit from the company's official account or official email, and have ready the registration certificate, identification for the authorised representative, and the links to the genuine page and the fake one. If you hold a trademark certificate, the intellectual property route is often faster.
Three parallel steps improve the odds. Complete whatever business verification the platform offers for your official page, which helps reviewers tell the real one from the copy. Pin a post on the official page stating the only official accounts and contact details and warning that the company never takes payment into personal accounts. Ask clients who were deceived to report the same fake page from their own accounts, since reports from victims are weighed together with the report from the rights holder. Fake accounts and groups on messaging apps have similar channels and should be reported as impersonation too.
Some things to avoid. Do not argue in the comments of the fake page, which only raises its engagement. Do not organise staff to mass-report from throwaway accounts, which may break platform rules and put the official account at risk. Do not publish personal details of whoever you suspect. If the fake page is in fact your old account, taken by a former employee or stolen, the route differs; see when a former employee holds company social accounts and a hacked or disabled Facebook or Instagram account. Once the platform removes the page, screenshot the page-not-found result and file it with the platform's reply.