Search & Content · September 12, 2026
What to Do When Someone Copies Your Business Website
A practical plan for documenting a copied business website, protecting customers, identifying the responsible services, and choosing accurate reporting options.
Preserve both websites before contacting anyone, confirm which text, images, branding, or code your business owns, and check whether the copy is misleading customers or collecting data. Secure the real site, publish a clear verification path when needed, identify the other site's registrar and service providers, then use truthful support, abuse, intellectual-property, or legal channels that match the facts.
A copied site may reuse one photo, duplicate a sales page, or deceptively imitate a company to take payments or information. Those situations require different responses. Document the exact pages and customer impact first; a similar layout alone does not prove infringement, fraud, or ownership.
In the United States, copyright can protect original text, photographs, illustrations, and other creative website content. The U.S. Copyright Office explains that copyright does not protect facts, ideas, systems, names, short phrases, domain names, or a page's general layout and look and feel. Ownership can also depend on employment, contracts, assignments, licenses, and prior material.
Search engines, registrars, hosts, platforms, and courts apply different rules and make independent decisions. A provider may request specific URLs and ownership evidence, and the site operator may dispute a notice. No ethical company can promise a takedown, domain transfer, recovery, or fixed timeline.
A practical step-by-step approach
01Preserve both versions before sending notice
Save the original and copied URLs, full-page screenshots, dates, source files, publication records, customer reports, and search results. Record when each page was accessed. Keep originals unchanged and note who collected them. If checkout, login, or malware is suspected, do not submit real credentials or payment information to test the copy.
02Confirm ownership and permission
List each copied item separately: article text, product descriptions, photographs, graphics, video, logo, software, or database material. Find the creator, contract, assignment, license, and publication history for each item. A web designer or photographer may retain rights unless an agreement transfers them. Ask qualified counsel when ownership or permitted use is unclear.
03Classify the risk to customers
Check whether the other site merely republishes content or also impersonates the company, claims affiliation, copies contact details, takes payments, requests passwords, or sends messages from a lookalike domain. Identify affected customers and transactions without collecting extra sensitive data. Route suspected fraud, account compromise, or safety issues to the appropriate security and legal responders.
04Secure the real website and accounts
Confirm that your domain, hosting, content system, analytics, email, and payment accounts have authorized administrators and strong recovery information. Review logs for unknown access, change exposed credentials, and enable multifactor authentication where available. A copied page does not always mean the original site was hacked, but a quick access review can rule out a second problem.
05Identify the services behind the copy
Use ICANN's RDAP lookup for available domain registration details and identify the registrar, nameservers, host, storefront, social account, advertising account, or payment provider involved. Public registration details may be limited by law and policy. Record official abuse contacts and terms; do not investigate private identities through deception, harassment, or invasive methods.
06Choose the narrowest accurate report
A host or platform may offer copyright, trademark, impersonation, phishing, fraud, privacy, or general abuse forms. Select only a category supported by the evidence. A U.S. DMCA notice has required statements and legal consequences, so use accurate ownership information and exact copied URLs. For important or disputed material, have intellectual-property counsel prepare or review the request.
07Protect customers and search visibility
If people may be confused, place a short notice on the official site identifying the real domain, support channel, and safe payment or login process. Keep self-referencing canonical tags, sitemaps, internal links, and Search Console ownership accurate. Google treats canonical signals as hints, not commands, and technical SEO alone does not remove another site's copy.
08Track decisions, copies, and recovery
Maintain one log with notices, responses, search changes, customer reports, and new domains. If a source page is removed but an old Google result remains, an outdated-content refresh may be appropriate. Monitor reasonably and preserve truthful records. Escalate unresolved infringement, deception, or losses to qualified professionals and appropriate authorities.
Information to gather
A clear record makes it easier to choose the right channel, communicate accurately, and avoid unnecessary repetition. Start with:
- Original and copied URLs with full-page screenshots and observation dates
- Source files, publication records, contracts, assignments, and licenses
- List of copied text, images, branding, code, forms, and customer paths
- Customer reports, suspicious messages, transactions, and known harm
- Authorized domain, hosting, website, email, analytics, and payment access
- RDAP result, registrar, host, platform, and official abuse contacts
- Report copies, confirmation numbers, responses, and follow-up dates
- Official-domain notice, monitoring terms, and named case owner
What not to do
Pressure can lead to decisions that create a second reputation problem. Avoid:
- Claiming ownership of licensed, public-domain, factual, or third-party material
- Submitting a false copyright, trademark, phishing, or fraud report
- Trying to hack, overload, deceive, or publicly shame the other site
- Testing a suspicious checkout with real customer or payment information
- Assuming canonical tags force another domain out of search results
- Promising a takedown, domain transfer, search result, recovery, or deadline
Frequently asked questions
Does copyright automatically protect a business website?
In the United States, copyright generally exists when qualifying original expression is created and fixed. Website text, photographs, illustrations, and other creative works may qualify, while facts, ideas, names, short phrases, domain names, and general layout are not protected by copyright in the same way. Ownership and registration questions can require legal advice.
Should a business send a DMCA takedown notice immediately?
Preserve the evidence and confirm ownership first. A DMCA notice must contain required information and good-faith statements. The recipient may challenge it, and a false notice can create risk. For valuable, licensed, jointly created, or disputed content, ask qualified intellectual-property counsel to review the facts and notice.
How can a business find who hosts a copied website?
Start with ICANN's RDAP lookup for available registration information, then review nameserver, network, platform, storefront, or page details for official contacts. Some data may be private or unavailable. Use published abuse channels and do not misrepresent your identity or use invasive tactics to identify a person.
Can Google remove the copied website from search results?
Google accepts certain legal and product-policy reports, including copyright requests, and reviews each request. Removing a result from Google does not remove the source website. Submit exact URLs and truthful evidence through the correct channel; Google, the host, and the site operator make separate decisions.
What if the copied site is collecting customer payments or passwords?
Treat that as a possible fraud and security incident, not only a content dispute. Preserve evidence safely, warn customers through verified channels, secure company accounts, notify relevant service providers, and involve appropriate security, legal, financial, or law-enforcement resources. Do not enter real credentials or payment data into the suspicious site.
Primary resources
Policies and features can change. Review the current source before submitting a request:
- U.S. Copyright Office: copyright in general
- U.S. Copyright Office: websites and website content
- U.S. Copyright Office: DMCA designated agent directory
- USPTO: about trademark infringement
- ICANN: information for RDAP users
- Google: report content for legal reasons
- Google Search Central: URL canonicalization