Cloned Company Websites
Pixel-perfect copies of real company sites used for phishing, fake sales, or fake support.
Last reviewed: 1 June 2026
What this scam is
Cloned company website scams replicate a real brand's site — increasingly with AI assistance — to phish logins, take fake orders, or pose as support. The copy can be nearly indistinguishable from the original.
How it works
Scammers register a similar domain and clone the site's look and content. Traffic arrives via ads, phishing links, or typos. You log in, order, or 'contact support' on the clone, handing over credentials, payments, or data.
Common red flags
- A domain that's slightly misspelled or uses an odd extension
- Reached via an ad or link rather than typed directly
- Login or checkout that feels subtly different
- No verifiable trust signals on closer inspection
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Log in to your [brand] account to claim your reward: [look-alike link].
Payment methods used
- Credentials/card details harvested
- Payments to scammer
Who is usually targeted
- Customers of well-known brands
- Online shoppers
What to do immediately
- Type the official address yourself or use a saved bookmark/app
- Check the domain carefully before logging in or paying
- If you entered details on a clone, change passwords and contact your bank
Evidence to preserve
- The clone URL
- How you reached it
- Screenshots
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
How do I avoid cloned sites?
Navigate to important sites by typing the address or using bookmarks/apps rather than clicking links or ads. Scrutinise the domain spelling before entering credentials or payment details.