Independent analysis by NHI Mgmt GroupSource article: Red Points, “How Temu protects intellectual property at scale: a guide for brands and rights holders (2026)” (November 3, 2026)

TL;DR: Pre-listing screening, seller vetting and rapid complaint handling now define Temu’s counterfeit control model, according to Red Points, which says listings are checked against 47 million images and 9.5 million keywords before publication. Marketplace governance shifts from after-the-fact takedowns to evidence-rich, automated prevention.


At a glance

What this is: NHI Mgmt Group's analysis, drawing on Red Points's blog post: Temu is moving counterfeit enforcement upstream with seller vetting, pre-listing screening and faster complaint resolution.

Why it matters: That shift matters to brand protection, marketplace trust and identity governance because enforcement now depends on verified seller identities, structured evidence and automated monitoring at scale.

By the numbers:

  • Temu screens listings against more than 47 million images before they go live.
  • Temu resolves IP complaints in under 24 hours on average.

Context

Counterfeit enforcement on large marketplaces now depends on three moving parts: identity checks for sellers, automated content screening for listings, and fast evidence handling when rights holders escalate a case. When any one of those controls is weak, infringing goods can scale before the platform reacts, which makes brand protection a governance problem as much as a moderation problem.

The model matters because marketplaces increasingly decide risk before publication rather than after complaint. That changes the operational burden for rights holders, who need structured evidence, repeatable workflows and reliable reporting channels to keep pace with high-volume listings.


Key questions

Q: How should platforms verify sellers before listing approval?

A: Platforms should verify the merchant identity before approval by checking legal entity details, beneficial ownership, contact verification, payment account ownership and proof of business legitimacy. They should also bind the account to a vetted merchant profile, apply risk-based review for high-volume or high-risk sellers, and require stronger controls before granting listing privileges.

Q: Why do counterfeit sellers keep reappearing after takedowns?

A: Counterfeit sellers reappear because takedowns usually remove a listing, not the underlying seller infrastructure, payment rails or identity used to open new accounts. They often return through re-registration, reused device fingerprints, recycled contact details, proxy networks and cloned product data, so platforms need account linkage, payment screening and device-level abuse detection.

Q: How do complaint workflows speed up IP enforcement?

A: Complaint workflows speed up IP enforcement by standardising intake, evidence review and decisioning so reviewers can act on a consistent case record. A standard evidence package usually includes product images, rights ownership proof, listing URLs, seller identifiers and infringement details, which lets moderation teams triage faster and apply takedowns or holds with less manual back-and-forth.

Q: What controls reduce counterfeit listings before they are published?

A: Platforms reduce counterfeit listings before publication by combining seller vetting, restricted category controls, automated content scanning, price anomaly checks and pre-publication review for risky inventory. They can also require proof of authenticity, block repeat offenders, and correlate new listings with known bad accounts, payment methods and device signals.


Technical breakdown

How pre-listing screening changes counterfeit enforcement

Pre-listing screening moves enforcement upstream from manual takedowns to automated review before a product page becomes visible. The control stack usually combines text matching, image similarity, keyword databases and seller history so the platform can block or queue suspicious listings before they reach buyers. That reduces time-to-detection, but only if the reference data is current and the review queue is tightly governed.

Practical implication: Treat pre-listing screening as a control system that needs tuning, not a one-time setting, and measure false positives as carefully as blocked infringements.

Why seller vetting matters in marketplace identity governance

Seller vetting is the identity layer behind brand protection. If merchant onboarding does not verify the real entity behind a storefront, the platform cannot reliably link repeat offenders, enforce sanctions, or separate authorised distributors from infringers. Strong vetting also supports store-level action because the platform can tie complaints back to a stable seller identity instead of an easily replaced account.

Practical implication: Build onboarding checks that anchor seller activity to a verifiable business identity and preserve that identity across enforcement actions.

How evidence packaging speeds complaint handling

Complaint handling improves when rights holders submit structured evidence rather than narrative claims. Side-by-side comparisons, matching registration details, and standardised listing references let reviewers validate the infringement quickly and reduce back-and-forth. At scale, that is less about legal theory and more about data quality, because an incomplete package slows triage and weakens enforcement consistency.

Practical implication: Standardise evidence collection so every complaint can be reviewed quickly, compared consistently, and escalated without rework.


Threat narrative

Attacker objective: The objective is to monetise counterfeit goods while staying ahead of takedown and store-termination workflows.

  1. Entry begins with a seller account or listing that bypasses platform vetting and reaches the marketplace with questionable provenance.
  2. Credentialed access is then abused through repeated storefront creation, relisting or identity masking that keeps the infringer active after enforcement.
  3. Escalation occurs when the same seller network spreads infringing products across multiple listings, images and store fronts faster than manual review can contain.
  4. Impact is counterfeit circulation at scale, with damaged brand trust, diverted revenue and repeated enforcement workload for the platform and rights holders.
  • Twitter source code leak 2023: Twitter source code and internal tools were posted to GitHub by "FreeSpeechEnthusiast" and stayed public for months before a 2023 takedown.

Read and download The State of NHI & AI Agent Breach Report 2026, covering 200+ breaches impacting Non-Human Identities including AI Agents.


NHI Mgmt Group analysis

Pre-listing moderation is now the control point that matters most: once infringing products are live, the platform has already absorbed the reputational and operational cost. The stronger model is to stop questionable listings before publication and to back that with evidence that can support a fast enforcement decision. That shifts marketplace governance from reactive moderation to policy-driven gating, which is where scalable brand protection begins.

Marketplace identity is part of the enforcement problem, not a separate admin task: when merchant identity is weak, repeat offenders can reappear under fresh storefronts, new listings or changed imagery. Temu’s approach shows that seller verification, complaint routing and repeat-offender analysis belong in the same governance chain. Brand protection teams should treat seller identity as the control that makes enforcement durable.

Structured evidence is the hidden operating model behind fast takedowns: the difference between a quick removal and a stalled complaint is often whether the case file is machine-readable, comparable and tied to the right registration. That is why evidence format matters as much as the infringement itself. The practical lesson is to standardise the proof package before volume forces the process to break.

Repeat-infringement suppression is a network problem, not a single-listing problem: store-level termination only works when the platform can connect listings, images, pricing and merchant identifiers across a broader seller graph. That makes the named concept here counterfeit relisting pressure: infringers survive by reappearing faster than the enforcement loop closes. Brands should plan for that network behaviour, not just isolated violations.

What this signals

Counterfeit relisting pressure: marketplace teams should assume that removal alone is not enough, because infringers often return through new listings, new storefronts or modified imagery. The control objective is to shorten the time between reappearance and detection so the seller graph cannot keep regenerating risk.

Brand protection now behaves like a governance workflow rather than a single enforcement action. The more a marketplace depends on seller identity, structured evidence and automated screening, the more rights holders need repeatable controls that survive volume and relisting pressure.


For practitioners

  • Standardise evidence packets for complaints Require side-by-side comparison images, registration references and a concise factual description for every case so reviewers can validate infringement quickly.
  • Verify seller identity before listings go live Tie onboarding to business registration checks and preserve merchant identity across complaints so repeat offenders cannot easily reappear under new storefronts.
  • Track relisting patterns across storefronts Correlate image fingerprints, merchant identifiers and pricing shifts to spot repeat offenders that return after takedown.
  • Separate authorised channels from infringement cases Maintain rules that distinguish approved distributors from suspicious sellers so enforcement focuses on genuine violations rather than broad noise.
  • Measure enforcement latency from report to removal Use complaint-to-resolution time as an operational metric so the team can see whether moderation and escalation are actually keeping pace.

Key takeaways

  • Counterfeit enforcement is moving upstream, where seller identity and pre-listing review matter more than post-publication cleanup.
  • The article shows that scale changes the control model: millions of images and keywords are being used to block suspicious listings before buyers see them.
  • Practitioners need evidence-rich workflows and identity-aware seller governance if they want takedowns to hold against repeat offenders.

Related NHI Mgmt Group resources: Corporate Domain Registrar · Information Rights Management and Persistent File Protection Guide · Brand Impersonation and Lookalike Domain Takedown Playbook · Disinformation and Brand Impersonation Guide


Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

OWASP API Security Top 10 and MITRE ATT&CK address the attack and risk surface, while NIST CSF 2.0 and CIS Controls v8 set the governance and control requirements practitioners need to meet.

FrameworkControl / ReferenceRelevance
NIST CSF 2.0PR.AA-05 — Access Permissions, Entitlements and AuthorizationsSeller access and listing approval depend on governed permissions in a marketplace workflow.
Recommendation — Apply PR.AA-05 to restrict who can publish, edit and relist branded inventory.
CIS Controls v8CIS-5 — Account ManagementMerchant onboarding, repeat-offender tracking and store termination rely on account governance.
Recommendation — Use CIS-5 to maintain authoritative merchant records and remove abusive storefront access quickly.
OWASP API Security Top 10API9 — Improper Inventory ManagementMarketplace protection depends on complete inventory of listings, sellers and complaint channels.
Recommendation — Inventory all seller and listing surfaces so enforcement coverage does not drift.
MITRE ATT&CKTA0007; TA0008 — Discovery; Lateral MovementRepeat offenders discover gaps and spread infringing listings across storefronts and channels.
Recommendation — Map relisting behaviour to discovery and lateral movement patterns in your detection logic.

Key terms

  • Counterfeit Listing: A counterfeit listing is an online product listing that falsely presents goods as genuine, authorised or branded when they are not. It usually imitates legitimate product names, images or packaging, and marketplaces treat it as infringement or fraud because the listing itself is used to mislead buyers and evade brand controls.
  • Brand Registry: Brand Registry is a rights-management programme that lets a brand owner register trademark and brand information with a marketplace or platform. It typically gives the rights holder tools to search for infringing listings, submit complaints more efficiently and attach verified brand data to moderation and enforcement workflows.
  • Relisting: Relisting is the act of publishing a removed or blocked item again, usually under the same or a different seller account. In marketplace abuse, it often means restoring counterfeit, prohibited or infringing content after a takedown, which can defeat simple notice-and-removal controls.
  • Merchant Vetting: Merchant vetting is the process of checking a seller’s identity, business legitimacy and risk profile before allowing them to trade on a platform. It commonly includes entity verification, tax or registration checks, payment account validation and fraud screening so the platform can control who is allowed to list and sell.

Deepen your knowledge

The NHI Foundation Level course covers NHI governance, machine identity security and secrets management, the industry's only accredited NHI security programme. It helps security and identity practitioners connect governance controls to the operational risks their programmes face.
NHIMG Editorial Note
Published by the NHIMG editorial team on November 9, 2026.
NHI Mgmt Group, the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org