Impersonation scams: what trusted brands need to watch now

TL;DR: Trusted brands are being cloned through lookalike domains, fake executive profiles and counterfeit donation pages that move money, credentials and trust, according to ZeroFox, while FTC data cited in the article puts imposter-scam losses at $3.5 billion in 2025. Brand protection now depends on faster discovery, better validation and coordinated disruption, not just domain registration.

Editorial analysis by NHI Mgmt Group, based on content published by ZeroFox: “One Organization, Five Scams: What a Real Impersonation Case Reveals About Fundraising Fraud”.

By the numbers:

• Consumers lost $3.5 billion to imposter scams in 2025, the fifth consecutive year they ranked among the most-reported fraud categories.

Key questions

Q: How should organisations respond when their brand is being used in impersonation fraud?

A: Treat it as a cross-functional incident involving fraud, security, communications and legal teams.

Q: Why do lookalike domains and fake executive profiles work so well in fraud campaigns?

A: They exploit trust shortcuts.

Q: What are the best practices for reducing impersonation risk across social and web channels?

A: Register high-risk domain variants, claim and verify official accounts, publish a clear verification page, and build a fast reporting path for the public and internal teams.

Practitioner guidance

• Map your impersonation surface Inventory the domains, social handles, executive identities and payment endpoints that could be abused to impersonate your organisation, then assign owners for each surface.
• Publish an official channels page Create a single verification page that lists your legitimate domains, social accounts and donation or payment destinations so audiences can self-check before acting.
• Reduce executive data exposure Limit the personal information available through public profiles and data brokers so attackers have less material to build believable fake executive accounts.

Bottom line: Impersonation fraud exploits trust, not just technology, by borrowing legitimate brand signals to make false donation, payment and outreach flows look real.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →