Skip to content

CR-2026-0179 · E-commerce

Counterfeit storefronts reusing verified merchant identifiers

Severity
Moderate
Published

Summary

Counterfeit storefronts are reproducing legitimate merchants' registration numbers, trust-mark imagery and review widgets to pass casual verification. The technique targets the checks consumers are told to perform, which makes conventional 'look for the padlock' guidance ineffective.

Who this affects

Consumer-facing retailers, marketplaces and trust-mark providers.

Recommended action

  1. 01

    Monitor for unauthorised reproduction of your registration numbers and trust-mark imagery.

  2. 02

    Ensure trust marks resolve to a verifiable record rather than rendering as a static image.

  3. 03

    Give customers a single authoritative channel to confirm whether a storefront is genuinely yours.

Technical detail

Indicators and detection logic

The full technical package — infrastructure indicators, hashes, sender patterns and ready-to-deploy detection rules — goes to platform customers ahead of publication. If you are in an affected sector and not a customer, ask us and we will send this one anyway.