Someone is impersonating your business online: what law applies?

A fake account with your logo, a cloned storefront, or a message from "your" support team asking customers for payment all cause the same harm: people cannot tell which one is really you. Our page on internet law, cloned stores and fake accounts explains why platform rules are often the fastest lever. This page sorts out which laws apply, who enforces each one, and what each can actually achieve.

How to respond, step by step

1. Preserve the evidence first. Capture the fake profile, posts, messages to customers, payment links and any domain, with URLs and dates. Ask customers who were contacted to forward what they received.
2. Sort what was taken. Your name and logo point to trademark and false association law. Copied photos, video and site text point to copyright. A look-alike domain has its own process, covered on our page about recovering a domain registered in bad faith.
3. Report to the platform. File under the platform's impersonation or trademark category with links to your official account and registration. For copied content, a copyright notice to the platform's designated agent follows the rules on our page about DMCA takedown notice requirements.
4. Warn your customers. Post on your verified channels which accounts and payment methods are really yours.
5. Report scams to the FTC. When the impersonator is taking money from consumers, report it at ReportFraud.ftc.gov, the reporting site the FTC names in its impersonation rule announcement.
6. Send a demand once you know who it is. Former contractors, resellers and competitors are often identifiable, and a cease and desist letter may end it.
7. Go to federal court when needed. A court can enjoin false association and infringement (15 U.S.C. 1116(a)), and you are entitled to a rebuttable presumption of irreparable harm once you show a likely violation. Filing costs $350 plus a $55 administrative fee.

Which legal route fits which kind of impersonation?

Most impersonation cases use more than one route at the same time. The table matches common situations with the law, the decision maker, and the realistic result.

When the impersonator also sells knockoffs, our page on stopping counterfeit sellers online covers marketplace reporting, Customs and statutory damages.

What does the FTC Impersonation Rule cover, and what does it leave out?

The rule makes it a violation to "materially and falsely pose as, directly or by implication, a business or officer thereof," or to materially misrepresent affiliation with a business, "including endorsement or sponsorship" (16 CFR 461.3). Section 461.2 does the same for government agencies.

The definitions are broad. A "business" includes not-for-profit entities. An "officer" includes "executives, officials, employees, and agents," so posing as your support staff or sales rep is covered. "Materially" means likely to affect a person's choice of, or conduct regarding, goods or services (16 CFR 461.1).

The FTC finalized the rule in March 2024, and it took effect April 1, 2024, according to the FTC's announcement that day. The FTC said it lets the agency file federal court cases seeking money back for consumers and civil penalties against violators. For a knowing rule violation, the maximum civil penalty is $53,088 per violation (16 CFR 1.98(d)), a 2025 figure the FTC kept unchanged for 2026 in a September 15, 2026 notice.

Two limits matter. First, the rule does not cover impersonating individuals. The FTC proposed adding that in 2024 and held an informal hearing in January 2025, and its October 1, 2026 advance notice says the Commission "is still evaluating its options." Second, the FTC did not adopt a proposal to reach those who supply the "means and instrumentalities" of impersonation. The same October 2026 notice opens a new inquiry into whether search, social media and marketplace platforms that optimize scam ads should be covered, with comments due November 30, 2026.

Fake reviews and purchased followers fall under a different FTC rule, covered on our page about whether brands can buy reviews or followers.

When can your business sue for false association?

Your own lawsuit usually runs under 15 U.S.C. 1125(a)(1)(A). It reaches anyone who, "on or in connection with any goods or services," uses a word, name, symbol or false or misleading representation that is likely to cause confusion "as to the affiliation, connection, or association" with you, or as to the "origin, sponsorship, or approval" of their goods or services. Any person who believes it is likely to be damaged can sue, and a registration is not required.

The phrase "in connection with any goods or services" does real work. A fake store taking orders or a fake support line collecting fees fits easily. A fan page or commentary account that sells nothing is a harder fit, and platform rules may be the better tool there.

If you own a federal registration, add an infringement claim under 15 U.S.C. 1114. Remedies under both include the defendant's profits, your damages and costs, increased damages up to three times actual damages, and attorney fees in exceptional cases (1117(a)). Our page on what happens in an Atlanta federal IP lawsuit walks through the court process.

What changes the answer

• Business or person. The FTC rule protects businesses and their officers, not individuals in their own right (16 CFR 461.1 to 461.3). Creators and founders impersonated personally rely on platform rules and other laws, discussed on our page about personal brand, name and likeness. Georgia's protection for a person's name and likeness is explained on our page about Georgia's right of publicity.
• Registered or not. Section 1125(a) works without a registration; section 1114 and the counterfeit remedies require one. Our page on protecting the brand behind an audience explains why registering early helps.
• Commercial use. False association requires use "on or in connection with any goods or services" (1125(a)(1)).
• Who owns the copied content. A copyright notice requires that you own the photos or text, and suing requires registration for U.S. works (17 U.S.C. 411(a)). If a contractor created them, check ownership on our page about work made for hire or assignment.
• Materiality. The FTC rule reaches only material impersonation, meaning likely to affect a person's choices about goods or services (461.1).
• Unknown operators. When the account is anonymous and copies your content, our page on identifying an anonymous infringer explains the subpoena route.

A worked example

Common mistakes

• Reporting before capturing. Once a platform removes an account, the messages and payment links you need for court may be gone.
• Arguing with the impersonator in public. Replies spread the fake account further and rarely produce a removal.
• Treating an FTC report as your remedy. The rule is enforced by the FTC in its own cases. A lawsuit in your name runs under the Lanham Act.
• Assuming the FTC rule protects your founder personally. Impersonation of individuals is still a proposal, not part of the rule.
• Waiting to register the brand. Platforms and courts move faster with a registration number, and counterfeit remedies require one.
• Overlooking counter-notices. If you send a copyright notice, the operator may answer, as our page on what happens after a DMCA counter-notice explains.

What to do this week

1. Screenshot every fake account, post, message and payment page, with the URL and date visible.
2. Collect your registration numbers, or start one if you have none; our page comparing Georgia and federal trademark registration sets out the options.
3. Report each account under the platform's impersonation or trademark category.
4. Send a copyright notice for copied photos, video or site text you own.
5. Publish a short notice on your verified channels naming your real accounts and payment methods.
6. Report consumer-facing scams at ReportFraud.ftc.gov and keep the confirmation.

Frequently asked questions

Can my business sue under the FTC Impersonation Rule itself?

The rule is an FTC trade regulation rule, and the FTC enforces it through its own federal court cases. Your own claims usually run under 15 U.S.C. 1125(a) and, with a registration, 1114.

Does the rule cover someone pretending to be one of my employees?

Yes, when they pose as an officer of your business, which the rule defines to include executives, officials, employees and agents. Posing as that person privately, apart from the business, is outside the current rule.

How large are FTC civil penalties for violating the rule?

Up to $53,088 per violation for knowing violations, the 2025 level the FTC kept for 2026. Courts decide the actual amount in each case.

Is a parody account impersonation?

Not necessarily. False association turns on likely confusion about affiliation or approval, and a clearly labeled parody may not confuse anyone. Platform policies often draw their own lines.

What if the impersonator is a former reseller or contractor?

Start with your contract, which may already limit use of your name and require return of materials. Continued use after the relationship ends can support a false association claim if it suggests you still approve.

Can a court order the platform to reveal who runs the account?

Once a lawsuit is filed, discovery under the Federal Rules of Civil Procedure can be used to seek records that identify the operator. The DMCA subpoena is a narrower tool that works only for copyright infringement.

Zala IP Law helps businesses and creators respond to impersonation, cloned stores and other online infringement, and Shreepal J. Zala practices federal intellectual property law nationally. If someone is posing as your business, request a consultation or call 404-313-1701 after you have saved the evidence.