Clone Websites: When Scammers Copy a Real Business

A lookalike scam site copies a real, established local business - name, logo, sometimes even its actual customer reviews - and swaps in a different phone number or payment link to intercept calls and deposits meant for the legitimate company. The giveaway is rarely the design, since copying a website's look costs the scammer nothing. It's almost always a mismatch between the domain's registration history and the business's claimed decades of operation, or a phone number and payment method that don't trace back to the real entity.

How the Clone Actually Works

The scammer picks a real, well-reviewed local business - locksmiths, garage door repair, towing, and similar urgent-need trades are common targets because customers searching in a moment of stress are less likely to cross-check details carefully. The clone site copies the real business's name, service area, and often lifts photos and even review text directly from the legitimate listing. The only functional differences are the contact phone number, which routes to the scammer instead of the real business, and sometimes the payment instructions.

The scam monetizes in one of two ways. Some clones exist purely to capture the call and then dispatch an unrelated, often unlicensed, technician who shows up and demands cash at inflated prices once the job is "already started" - a classic bait-and-switch enabled by search visibility rather than storefront presence. Others exist to collect a deposit or "dispatch fee" directly through the fake site and simply never send anyone.

How to Spot the Clone

Check domain registration age against claimed history. A site claiming "serving the community for 30 years" registered as a domain eight months ago is the single strongest signal. Use the ICANN registration data lookup to check the domain's creation date directly - this takes under a minute and is free.

Compare WHOIS registrant details to the business's actual registered address. A domain registered to a name or address unconnected to the business's official filings, especially when the real business's actual site (if it still exists) shows a different registrant, is a mismatch worth investigating before you call.

Search the exact business name plus its city in a search engine and compare results. If two nearly identical sites both claim to be the same business at the same address with different phone numbers, one is very likely the clone. Check which phone number appears on the business's official state registration or licensing record, since that's harder to fake than a website.

Call the number and ask for the business's license number or registered legal name directly. A scam operation intercepting calls for a licensed trade often can't produce a real license number on request, or gives one that doesn't match when checked against the licensing board.

If Your Business Is the One Being Cloned

Document the clone site's URL, the phone number it displays, and screenshots showing the copied content, then file a complaint with the domain registrar (identifiable via the ICANN WHOIS lookup) requesting takedown for impersonation - most registrars have an abuse-reporting process that acts faster than a formal legal filing. Report the fake listing or site to the search engine and any directory sites where it appears, since delisting reduces the volume of misdirected calls faster than a takedown alone. File a complaint with your state attorney general's consumer protection office, since customers being defrauded under your business's name is a pattern regulators track. Notify your existing customers if you have a mailing list or social presence, since some may have already been contacted by the clone and assume it's you.

Why the Real Business Rarely Notices Right Away

A clone site can operate for months before the real business discovers it, because the two typically aren't competing for the same search placement in a way either owner would notice organically - the clone often targets a slightly different keyword pattern, a different neighboring town, or paid ads rather than the same organic ranking spot the real business holds. The first sign is usually indirect: customers calling to complain about a job the real business never performed, or a pattern of confused reviews referencing a phone call or price that doesn't match anything the real business's staff recognize. Front-line staff are often the first to notice the pattern before ownership does, which is why it's worth having a standing instruction for staff to flag any customer complaint that references unfamiliar pricing, an unfamiliar phone number, or a job the business has no record of.

Verifying a Business Before You Call

Before calling a locksmith, garage door company, or towing service found through a search result rather than personal referral, a quick cross-check against public records can confirm you're reaching the actual registered business rather than a clone. A ProofReports search on the business name surfaces domain age and registration details together, which is exactly the combination that flags most lookalike sites - a mismatch between "20 years in business" marketing and a domain or entity registered within the past year.

Frequently Asked Questions

How do clone sites rank in search results if they're fake?

Search engines rank primarily on relevance and site signals, not on verified business identity, so a well-built clone with copied content can rank competitively, especially for urgent local searches with less competition. Search ranking alone is not a legitimacy signal.

Is copying reviews from another business illegal?

It can constitute both trademark infringement and, depending on jurisdiction, fraud, since the copied reviews are being used to deceive customers about who they're actually dealing with. Report it to the platform hosting the original reviews as well as the registrar.

Can I tell a clone site apart just by looking at it?

Rarely - the visual design is often identical or near-identical to the original by design. The domain's registration date and the phone number's actual owner are far more reliable checks than anything visible on the page itself.

Does a padlock icon or "https" mean the site is safe?

No. A valid SSL certificate confirms the connection to the site is encrypted, not that the business behind the site is who it claims to be - certificates are inexpensive and easy for a scammer to obtain for a clone domain just as easily as for a legitimate one. Treat the padlock as unrelated to the identity question entirely.