Fake Page Using My Business Name: What to Do

A customer messages your shop asking when their order will arrive. You have no record of it. They send a screenshot: a Facebook Page with your business name, your logo and your product photos, taking deposits by bank transfer. A second customer says they found the same thing on Instagram.

The short answer: capture the evidence, report each fake Page or account to the platform as an impostor of your business, and if you own a registered trademark, use Meta's trademark routes too. At the same time, tell your customers which accounts are really yours.

This guide is for Malaysian business owners. It covers how to tell a copycat from a fan page, the reports that carry weight, what to do when customers have already paid, and how to handle clones that keep coming back.

Last checked: 5 October 2026.

#What Should a Business Do About a Fake Page Using Its Name?

Report it through the platform's own impersonation flow, backed by evidence. Meta's business help page on reporting an impostor account says it removes accounts on Facebook and Instagram that falsely claim to represent your official presence, and it gives in-app steps for both. If your business has a registered trademark, Meta's Trademark Report Form and Brand Rights Protection are rights-based routes that sit alongside the impostor report. Screenshot everything before you report, warn customers on your real channels, and remember that Meta makes the final decision.

#Copycat, Fan Page or Reseller? Check Before You Report

Not every page using your name breaks the rules. Meta says plainly that fan pages and opinion accounts generally do not violate its Community Standards. Reporting a page that is merely critical, or a genuine reseller, wastes your time.

If the copy is a paid advert rather than a Page, our guide to scam ads using your brand covers the Ad Library and ad reports. A cloned website is a different job again, covered in removing a fake website copying your business.

#Evidence Checklist Before You Report

Copycat pages change their name, delete posts or disappear the moment they sense a report. Collect this first, on a computer if you can, so the link and date show in each capture:

• The full link (URL) of each fake Page or account, copied from the browser address bar, not just its display name.
• Screenshots of the profile picture, cover photo, bio, contact details and recent posts, with the date and the URL visible.
• Screenshots of any post or message that takes orders, deposits or payment details, including the bank account number shown.
• Messages customers received from the fake page, with the customer's permission, and the date each one arrived.
• Links to your real Pages and accounts, so a reviewer can compare them side by side.
• Your trademark registration number and the link to its record, if you have one.
• Every report reference number, confirmation email or Support Inbox entry, kept in one document with the date sent.

Do not message the fake page, place a test order or click payment links to gather more. You do not need it, and it can expose your own accounts.

#How to Report a Fake Facebook Page or Instagram Account

This is the first report to file, and anyone with an account can do it. On Facebook, Meta's page on reporting a profile or Page pretending to be you or someone else gives these steps:

1. Go to the impersonating Page. If you cannot find it, search for the name or ask a customer to send you the link.
2. Click "Options" (the three dots) below the cover photo.
3. Select "Report Page".
4. Follow the prompts, choosing the option that says the Page is pretending to be your business rather than a general category such as spam.

On Instagram, Meta's business help page says to tap the three dots at the top right of the account, select "Report" and follow the on-screen instructions. The prompt wording varies by app version and region, so read each screen. Instagram's page on reporting an impersonating account adds a useful detail: an impersonation report is anonymous, so the reported account does not see who reported it. Intellectual property reports are the exception.

The off-platform impostor forms, Facebook's Report an Impostor Account form and Instagram's impersonation report form, are built around a person: they ask for the impersonated person's ID. When we read them on 5 October 2026, Instagram's form also asked for one impersonating account per report. For a business brand, the trademark route below is usually the better off-platform option.

#Using Your Trademark: Meta's Trademark Report Form

If your business owns a registered trademark, you can report a Page, profile or group that uses it. Meta's trademark help pages point to this form, and the form itself says to use it if you do not have access to Brand Rights Protection. When we opened it, it asked for:

• Your contact details, with a note that a business or professional email is wise.
• Documentation proving you are the rights owner or are authorised to report for them.
• The trademark, its registration number and jurisdiction, and a link to the registration in an online trademark database, or a certificate if you have no link.
• The links to the content you are reporting. Each report covers one registered trademark.

One point catches many Malaysian owners. Registering your company or business name is not the same as registering a trademark. Meta's page on trademark registration versus business registration says a licence or registration to do business generally is not a trademark registration and may not create trademark rights. In Malaysia, trademarks are registered with the Intellectual Property Corporation of Malaysia (MyIPO), whose FAQ says any owner using or proposing to use a trademark may apply. This is general information, not legal advice; a trademark agent or lawyer can tell you where your brand stands.

Our guide to trademark reports against fake brand accounts goes deeper into the form.

#Brand Rights Protection for Registered Trademark Owners

Brand Rights Protection is Meta's own tool for brands that face repeated copying. Meta's page about Brand Rights Protection says it lets brands identify and report counterfeit, trademark and copyright infringement and business impersonation. The surfaces it lists include Facebook and Instagram ads, Shops, Marketplace, buy and sell groups, Pages, profiles, Groups, Instagram accounts and posts.

• Access is by application. Meta's article says businesses with a registered trademark can apply for Brand Rights Protection.
• Once granted, the tool sits in the Menu in Meta Business Suite, and a person needs the IP reviewer role in Settings to see it.
• It supports searching for accounts that misuse your brand, sending takedown requests, tracking results and adding reference images to help detect copies.
• Meta says it checks each request is complete and valid before acting, and may disable the accounts of repeat infringers where appropriate.

#Warn Your Customers Without Feeding the Copycat

Your customers need to know which accounts are real while the reports are reviewed. Post on every official channel and pin it. Keep it factual and do not name or link the fake page, which only sends it traffic:

There are fake pages using our name and logo. Our only official accounts are the ones linked from our website. We never ask for payment to a personal bank account through Facebook or Instagram messages. If you are unsure, contact us here before you pay.

• List your real handles and payment account names on your website, so customers have one place to check.
• Add a short Bahasa Malaysia and Chinese version if your customers use them, for example "Kami hanya ada akaun rasmi ini" or "我们只有这些官方账号".
• Brief anyone who answers customer messages, so they can confirm real orders quickly.

If the copycat runs a fake Facebook group rather than a Page, the reporting route is different: see our guide to a Facebook group impersonating your business.

#When Customers Have Already Paid the Fake Page

Money first. A customer who paid should contact their bank straight away and call the National Scam Response Centre on 997, then make a police report. Your evidence file helps them, so share the screenshots and the fake page's link.

MCMC's complaints page lists cheating by personation and cheating under section 420 of the Penal Code as matters for the Royal Malaysia Police (PDRM), and copyright and trademark infringement as a matter for the Ministry of Domestic Trade and Cost of Living (KPDN). As the business being copied, you can make your own police report too, which gives customers and the platform a reference to point to. For online content complaints, the same page says to go to the service provider first and escalate if it stays unresolved.

If the fake page sends people to a phishing site or a fake payment page, report it to CyberSecurity Malaysia's Cyber999 service, which takes incident reports through an online form, email, phone and a mobile app. Include the link and the time you saw it.

#When the Fake Page Keeps Coming Back

Some copycats return under a slightly different name a week later. That does not mean your report failed. Treat it as a routine:

1. Search the platforms for your business name, common misspellings and your product names once a week, and ask staff to forward anything they see.
2. Capture and report each new clone the same day, using the same evidence format.
3. Where a form has space for details, mention that the account copies a business already reported, and keep the earlier reference numbers in your log.
4. If clones keep appearing and you hold a registered trademark, apply for Brand Rights Protection.

#Mistakes That Weaken a Brand Impersonation Report

• Reporting a fan, review or complaint page as impersonation because you dislike what it says.
• Filing a trademark claim for a name you have not registered, or a copyright claim for content you do not own. False claims can cost you your own account.
• Organising staff or customers to mass report the page. It adds noise, not proof.
• Messaging or threatening whoever runs the page, or trying to find out who they are. Leave identification to the police.
• Deleting your evidence once the page is gone, then having nothing to show when it returns.

If a page is posting false and damaging statements about your business rather than pretending to be it, that is a defamation question. MCMC's table lists defamation for both PDRM and civil action, and a lawyer is the right person to advise on a claim or an injunction. This article is general information, not legal advice.

#When a Case Review Makes Sense

Meta reviews every report and decides. Some fake pages come down, some stay up after review, and lawful pages you simply dislike usually stay. Most owners can file the reports above without help. Outside help is worth considering when clones keep returning, when copies spread across Facebook, Instagram and other platforms at once, or when customers are losing money and you need the evidence organised for the platform and the police. SocialSafe by AwareXone, our recovery and digital identity service, reviews the case first and tells you honestly whether you already have what you need. We prepare rights-based reports through official platform and legal channels only, never file false claims, and never ask for your passwords or codes. You can read how we handle impersonation removal, and our Trust Center sets out what we will and will not ask for.

#Frequently Asked Questions