As technology rapidly continues to advance, we’re warned repeatedly about the dangers of online identity theft. As a leader or owner of an organization, you may be even more vulnerable because a hacker might not only steal your personal identity, but also — or alternatively — hijack your organization’s brand.
It’s sometimes called “brandjacking.” Essentially, a fraudster copies or recreates an organization’s digital assets and then uses them to perpetrate fraud against customers, suppliers, employees, or other stakeholders. These assets can include the company’s logo, website, social media accounts, and email domain. Here are some ways to battle back:
Register your trademark. If you haven’t already, register your trademark with the U.S. Patent and Trademark Office and the World Intellectual Property Organization. Doing so won’t stop a determined criminal from compromising your brand, but it can provide you with legal recourse should brandjacking occur.
Buy similar domain names. Fraudsters sometimes register similar-looking domain names and then set up fake websites to siphon money from customers. To prevent them from doing this to your organization, register variations, including common misspellings, of your domain name. In addition, consider buying other domain extensions — for example, .biz, .co, .org, and .us.
Invest in cybersecurity. Cybercriminals may try to hack your company’s network to get ahold of certain digital assets. That’s why strong cybersecurity is critical. At a minimum, you need firewalls, antivirus software, malware scanners, and intrusion detection tools. Consider engaging a qualified consultant to help ensure you’ve fortified all potential weak points. Also, require employees to change their passwords frequently and train them to exercise caution when opening emails and attachments.
Monitor online chatter. To prevent and detect brandjacking, you’ve got to be vigilant about your brand and digital assets. A big part of this is monitoring online conversations about your brand. Invest in social media tools to look for mentions of your organization; paying attention to both positive and negative commentary. Set up alerts through your preferred search engine for any reference to your organization’s name. If something seems strange or suspicious, investigate.
Enforce your legal rights. If you’re brandjacked, or even if you suspect it, contact your attorney immediately. Lawsuits can prove expensive and time-consuming, yet legal action is sometimes the most effective way to fight back. Your lawyer may want to bring in an attorney who specializes in intellectual property law to advise you on whether and how to proceed, as well as on how to better protect your brand online.
Communicate with stakeholders. In the event your brand is hijacked, let customers, suppliers, employees, and other stakeholders know that they should be on the lookout for fake websites and emails that purport to be from your company. Doing so will help protect them from fraud. Also, they may be able to help you catch or stop cybercriminals by reporting suspicious uses of your brand to you.
Be prepared to rebrand. If your brand is inextricably compromised, you may have to rebrand. This will entail substantial costs, but there could be a silver lining: Rebranding may create an opportunity to redefine your organization, revise your marketing strategy, and reengage with your customer base. Just make sure to fully protect your new brand using the previously mentioned tips as well as other best practices.