Corporate Catphishing: How Brands Can Protect Their Consumers from Brand Impersonation Scams

by Hanah Khaled

In today’s digital age, it can be difficult to distinguish between fact and fraud. Not only do fraudsters pose as other people to lure unsuspecting lovelorn individuals into giving up money in exchange for affection, but they also impersonate businesses and brands to obtain sensitive information and deceive their customers into sending them money.

Impersonation is becoming an increasingly common scam and can happen through email, social media, and other digital platforms. Mimecast’s “2022 State of Email Security Report” found that 90% of organizations experienced an impersonation attack over the previous 12 months. Brand impersonation scams can be very costly for both consumers and businesses, and they can significantly damage brand reputations.

Delta Air Lines Phishing Email Scam

Recently, Delta Air Lines customers have been receiving a fake email stating they can win a $100 gift card by filling out an online survey. If they were to click the link, they would be taken to a phishing page designed to take the customer’s credit card and personally identifiable information.

No alt text provided for this image
Fake Delta Air Lines Email
No alt text provided for this image
Delta Air Lines Phishing Page

Aside from the immediate monetary loss in this scam, the psychological damage for the consumer can have detrimental lasting effects. What happens when Delta Air Lines does want to ask their customers for their opinion in exchange for a cash gift? Will consumers trust their marketing efforts?

How Businesses Can Prove Their Identity and Protect Their Consumers

Experts recommend that businesses take a systematic and multidisciplinary approach to this problem. The right approach will require not only technology like automated detection but also security leadership to protect the brand on a number of fronts.

Boost Security Protocols

Brands can create more complex authentication protocols with technology, such as Domain Keys Identified Mail (DKIM) or Sender Policy Framework (SPF), to protect consumers. These protocols help to validate emails from trusted brands to ensure that consumers only get the real messages from actual legitimate brands.

Keep Trademarks in Check

Beyond the blue check on social media, it is imperative that brands register their trademarks, logos, and unique product images so consumers can easily spot the fakes. By collaborating with your marketing department to ensure the distinctness of your brand, customers will recognize it quickly, and automated detection searches can differentiate the brand from impersonators.

Control All Domains

Brands should monitor not only the domains they own but the domains that could be similar to theirs. Businesses can invest in threat intelligence platforms that can help identify the use of fake domains and phishing campaigns.

Test Regularly

Brands should conduct regular brand impersonation scam testing to assess their level of readiness and to identify areas that require improvement. This kind of testing can identify gaps or weaknesses in the brand’s fraud protection strategies. The test can also allow businesses to monitor the effectiveness of implemented protocols to verify the strength and ability of their anti-fraud measures to combat scams.

Educate Your Consumers

The more consumers are aware of brand impersonation scams, the easier it is for them to recognize and avoid them. Brands should educate their consumers about the types of brand impersonation scams and the warning signs, as well as the ways they can differentiate their brand from the fraudsters.

Brands can establish positive relationships with consumers by taking preventative measures against fraudulent activity. By being proactive in your approach, you can create a consumer-friendly experience where your customers appreciate and feel safe with your brand.

by Hanah Khaled Aug 05, 2024

Your privacy is important to us.
We use cookies and similar technologies which are essential for our website and our mobile app (collectively, the "Service") to function. We and third parties may also use non-essential cookies and similar technologies to collect and analyze usage, optimize our services, personalize content, tailor and measure ads, keep this site secure, and for any other uses as set forth in our Privacy Policy. Manage Cookies