Fraudox FRAUDOX

Takedown answers

Direct answers for common takedown questions

Short, quotable answers to the questions brands, creators and security teams ask before they file a takedown.

Fast facts

What does Fraudox remove?

Fraudox removes phishing sites, impersonation accounts, fake brand pages, scam domains, counterfeit apps and stolen content.

The route changes by target. A phishing page may need a host and registrar report. A fake Instagram account usually needs an impersonation or trademark route. A counterfeit app may need an app-store claim plus reports to APK mirrors.

How long does a takedown take?

Clean, reproducible cases often resolve inside 48 hours, but timing depends on the platform, evidence quality, abuse type and escalation route.

A host can remove a live phishing page quickly when the abuse is obvious. A registrar suspension, trademark claim or app-store review may take longer because the reviewer needs stronger proof and sometimes asks follow-up questions.

What evidence should I send for a takedown?

Send the exact URL or profile, screenshots, the real brand or account being copied, proof of ownership and any scam link, payment request or phishing form.

A takedown report should make the violation reproducible. The reviewer should be able to open the target, compare it with the real brand, see the harm and know what action is requested.

Should I report a scam to the host, registrar, CDN or platform first?

Report the layer that can stop the harm fastest, then escalate to the layer that prevents recurrence. For phishing, that is often host first and registrar second.

A host can remove content. A registrar can suspend a domain. A CDN can stop fronting an origin or help expose it. A platform can remove accounts and posts. The best route is chosen by the asset, not by a generic checklist.

What evidence each case needs

The best report is specific. These are the proof points that usually decide whether a reviewer can act quickly.

Phishing page

Exact URL, screenshot, copied brand, form endpoint, redirects and affected login or service.

Host first, then registrar/CDN if needed.

Fake social account

Profile URL, handle, screenshots, real account, ownership proof and scam messages if present.

Impersonation, trademark or fraud route depending on proof.

Lookalike domain

Domain, WHOIS/RDAP, DNS, screenshot, redirect chain and evidence of abusive use.

Registrar abuse when active harm is visible.

Counterfeit app

Store listing, developer name, screenshots, trademark proof, APK mirror URLs and malicious behavior.

Official store, then mirrors and hosting providers.

Stolen content

Original file or first publication, copied URL, timestamps, account/page details and ownership proof.

Copyright route, DMCA route or platform IP channel.

What should I do if a platform rejects an impersonation report?

Do not repeat the same report. Identify why it failed, add missing proof, switch to the stronger route and escalate with a concise timeline.

Many rejections happen because the report used the wrong category, did not prove ownership, or described harm without showing it. A stronger second filing should answer the reviewer before they ask.

Read more

Do I need a trademark to remove a fake page?

A trademark helps, but it is not always required. Personal impersonation, fraud, phishing, copyright theft and platform abuse can use different evidence routes.

If the fake page copies a registered brand, trademark evidence is strong. If it copies a creator, executive or support identity, the better route may be impersonation, copyright, fraud or phishing.

Read more

What if the scam only appears from one country?

Treat visibility as evidence. Capture the abusive view from the affected country and compare it with clean or blank views from other locations.

Geo-blocked scams often show a phishing page to victims and a harmless page to reviewers. The report should name the country, timestamp, redirect chain and content difference.

Read more

What if the impersonator deletes the content and brings it back?

Capture fast, preserve the timeline and report the account or domain as a recurring abuse asset, not only as a single post.

Temporary deletion is a common evasion tactic. A strong escalation shows first appearance, deletion, return, reused assets and user confusion across dates.

Read more

How does Fraudox pricing work?

Fraudox uses monthly plans and counts a takedown only when removal is confirmed. Failed attempts do not consume the quota.

The point is alignment: the billable event is confirmed removal, not filing a report, sending an email or opening a ticket.

Read more

What should I avoid sending in a takedown request?

Do not send real passwords, full payment details, unrelated personal data or emotional summaries without URLs and proof.

The strongest report is specific and minimal: target, proof, harm, ownership and requested action. Extra sensitive data can slow review and create avoidable risk.

Read more