You’ve Been Cloned - Now What?
Discovering someone copied your store is alarming. Here’s what to do immediately and how to prevent it in the future.
Immediate Actions
1. Document Everything
Before anything changes:
- Screenshot the clone site thoroughly
- Save page URLs (use archive.org/web)
- Note the domain registration details (whois lookup)
- Capture any customer complaints
- Document financial impact estimates
2. Report to Platforms
Domain Registrar
- Find the registrar via WHOIS lookup
- File abuse complaint
- Most registrars have abuse policies
Hosting Provider
- Identify the host (tools like BuiltWith can help)
- File abuse complaint
- Report fraudulent content
Google Safe Browsing
- Report at safebrowsing.google.com
- Site gets flagged as dangerous
- Warning shows before users visit
Payment Processors
- If they use PayPal, Stripe, etc., report
- Payment fraud violates all processor terms
3. Alert Your Customers
Proactive communication prevents blame:
- Post on social media about the scam
- Send email to your list
- Add a notice on your website
- Provide your official domain clearly
4. Consider Legal Action
For persistent clones:
- DMCA takedown notices
- Trademark infringement claims
- UDRP domain dispute process
- Legal cease and desist
Why Did This Happen?
Clone sites target successful stores. Scammers:
- Scrape your content automatically
- Register similar domains
- Copy your entire design
- Buy ads targeting your customers
- Collect payments and disappear
How to Prevent Future Clones
Enable Clone Detection
SecurEcommerce’s canary token system:
- Embeds invisible trackers in your site
- Triggers alert when copied
- Identifies clone domains immediately
- Provides risk assessment
Monitor for Typosquats
Our DNSTwist integration:
- Checks hundreds of domain variations
- Alerts on new registrations
- Identifies potential threats early
Protect Your Content
Make copying harder:
- Enable content protection
- Block right-click saving
- Prevent easy scraping
Maintain Email Security
Stop email spoofing:
- Configure DMARC/SPF/DKIM
- Monitor for spoofing attempts
- Protect customer communications
The Cost of Detection Delays
Most store owners learn about clones through:
- Customer complaints (too late)
- Social media mentions (too late)
- Google search results (too late)
- Payment disputes (way too late)
By then, damage is done:
- Customers already scammed
- Brand already damaged
- Trust already eroded
- Money already lost
With SecurEcommerce, you know within hours, not months.
Recovery Takes Time
Even after a clone is taken down:
- Customer trust needs rebuilding
- Search results may still show clone
- Social media mentions persist
- Some customers won’t return
Prevention is far better than recovery.
Setting Up Protection
Get protected now:
- Install SecurEcommerce from the Shopify App Store
- Enable clone detection in the dashboard
- Configure alerts for immediate notification
- Set up blocking to reduce attack surface
Don’t wait for the next clone.
What SecurEcommerce Detects
Our system catches:
- Direct content copying (canary tokens)
- Typosquat domain registrations
- Similar domain patterns
- Clone site hosting patterns
Risk scores help you prioritize:
- Low risk: Monitor
- Medium risk: Investigate
- High risk: Take action
- Critical: Immediate response
You’re Not Alone
Store cloning is increasingly common. Fashion, jewelry, supplements, and electronics are most targeted. Having protection isn’t paranoid - it’s prudent business practice.