Scam protection

Scams taken down at the source.

Fake shops, scam ads, fake support pages and impersonation accounts using your name. Unphish finds them across websites, social media, ads and app stores, and gets every piece of the scam removed.

Scam campaign · “Solstice Pay rewards”Example
  1. Ad
    “Get 50% cashback with Solstice Pay”Sponsored post on social media
    Removed
  2. Website
    solsticepay-rewards.shopFake rewards shop taking card details
    Offline
  3. Social
    @SolsticePaySupportFake support account replying to customers
    Removed
  4. App
    Solstice Pay Rewards (APK)Fake app on a third-party store
    Takedown sent
4linked pieces
1campaign
3already gone

How it works

Every piece of the scam, taken down together.

A scam is rarely a single website. It's an ad, a landing page, a fake account and a payment page working together. We find all of them and take them down together.

01

Detect

We look where scams reach customers.

Websites, ads, social media, app stores and marketplaces are monitored for the scams in your threat profile, along with links your team reports.

WebsitesAdsSocial mediaApp storesTeam reports
02

Investigate

Follow the lure to the payment.

We trace each scam from the ad or post to the page that takes the money. Evidence is captured, AI-assisted analysis scores the risk and links the pieces into one campaign, and an analyst confirms before anything is enforced.

AI-assisted analysisScreenshotsLinked accountsPayment pages
03

Disrupt

Take down every piece.

Reviewed threats go to enforcement in one click. Websites, accounts, ads and apps go to the right host, platform or registrar with evidence attached, and we escalate if they don't act.

One-click enforcementHostsPlatformsApp storesEscalation
04

Understand

Know what's targeting you.

Every case feeds your scam threat profile, so you can see which scams hit your customers, where they come from and what's coming back. Removed scams are checked so they stay down.

Threat profileCampaign linksReportsAudit trail

What we take down

The scams using your name.

Scammers borrow your brand because your customers already trust it. These are the scams we find and remove most.

Fake shops

solsticepay-store.shop

Stores selling fake products or taking card details

Rewards and giveaways

Claim your $500 Solstice Pay bonus

Fake offers that lead to phishing or payment pages

Investment scams

Solstice Pay crypto fund

Fake investment schemes borrowing your credibility

Fake support

@SolsticePaySupport

Accounts and pages posing as your help team

Scam ads

Sponsored · Solstice Pay

Paid ads and search results pushing fake sites

Fake apps

Solstice Pay Rewards.apk

Cloned apps on official and third-party stores

See the scams using your name.

Run a free threat scan and we'll show you the lookalike domains and scam sites using your brand.

The results

Proven on real scam cases.

From scam takedowns we closed for our clients in the first half of 2026.

98%

of scam websites we pursued were taken offline

100%

of cases checked by an analyst before a takedown is sent

99%

of impersonation accounts we pursued on Facebook, X and Instagram were taken down

$2.18bn

reported lost to scams in Australia in 2025, up 7.8%

National Anti-Scam Centre, March 2026

Biggest scam losses in Australia, 2025

  • Investment$837.7m
  • Payment redirection$166.8m
  • Romance$139.9m
  • Phishing$97.6m

Investment scams alone cost Australians more than the next three types combined.

Source: Unphish cases for fake shops, fraud campaigns and social media impersonation opened January to June 2026. Australian losses: National Anti-Scam Centre, Targeting Scams report, March 2026 (combined data across Scamwatch, ReportCyber, AFCX, IDCARE and ASIC).

Case study · Airline loyalty programme

250+

malicious and suspicious instances found in our first sweep.

Fake websites were only part of it. The same members were being targeted with scams across the open web, social media and app stores.

What we found

  • Phishing websitesPages impersonating the programme to target its members
  • Fake appsLookalike apps posing as the official one
  • Scam adsAds using the brand to lure members to scam sites

Client name withheld to protect confidentiality.

Campaigns

One scam, many channels.

The same scammers run the ads, the fake shop, the support account and the app. We link them into one campaign, so you see the whole operation and we take it all down together.

  • Shared hosting and page code across scam sites
  • The same phone numbers and payment pages
  • Accounts and ads pointing to the same sites
  • Repeated wording, images and naming patterns
Explore threat intelligence →
Campaign viewExample
1 CAMPAIGN Shared hosting Same payment page Same phone number
11sites, accounts and ads
3shared signals
1coordinated takedown

Scams Prevention Framework

Ready for Australia's Scams Prevention Framework?

The SPF requires banks, telcos and digital platforms to take reasonable steps to prevent, detect, disrupt and report scams. Unphish gives you the action and the evidence to show you have.

01

Prevent

Spot lookalike domains, fake profiles and scam ads before they reach your customers.

02

Detect

Continuous monitoring across the web, social media, app stores and ads.

03

Disrupt

Rapid removal of scam websites, accounts and ads, backed by enforcement-grade evidence.

04

Report

A complete audit trail of every detection and takedown, ready for regulator reporting.

What's included

Everything you need to stop scams using your name.

CasesSearch…⌘K
←SC-1187P2Export Case Packet
https://solsticepay-rewards.shop/checkoutUnphishScan

Case status

Resolved

State: Closed

Verification history

DownDNS: ✕ | HTTP: ✕12 Aug 2026, 11:09
Desktop screenshotCaptured
Solstice Pay RewardsClaim your 50% cashbackPay $1.99 to claim
OverviewEvidence & AnalysisTimelineNotes

Description of abuse

Fake rewards shop impersonating Solstice Pay to collect card details, promoted through sponsored social media posts

Threat type
Fake shop
Category
Domains / Web
Detected
12 Aug 2026
Campaign
Linked to 3 other cases

Outcome

Resolved

  • Screenshot evidence available
  • WHOIS/registrar evidence available

Add a comment

Add a comment for your enforcement team
Add comment

Illustration of the Unphish client portal with example data.

Scam threat profileThe scams, channels and regions most likely to target your customers
Fake shop and scam site takedownWebsites, landing pages and payment pages using your name
Social media impersonationFake accounts, support pages and giveaway posts removed
Scam ad reportingSponsored posts and search ads pushing scam sites
Fake app removalCloned apps on official and third-party stores
AI-assisted analysisScreenshots, page source, hosting and account details risk-scored and validated by an analyst
One-click enforcementReviewed threats move straight into takedown, where configured
EscalationIf a host or platform is slow or says no, we escalate through alternative contacts and upstream providers
Removal verifiedAutomated checks confirm each piece is gone and flag it if it reappears
Threat intelligenceSites, accounts and ads clustered into one campaign
Spotted one? Send it inIf your team or customers find a scam, flag it and we'll take it from there
Reporting and audit trailDashboards, timelines, scheduled reports and a record of every action

Found a scam using your brand?

Request a takedown →

FAQ

Scam protection questions, answered.

What is scam protection?

Scam protection means finding the scams that use your brand to trick your customers, such as fake shops, scam ads, fake support pages and impersonation accounts, and getting them taken down before more people are caught.

Which scams can you take down?

Fake shops and rewards sites, investment and giveaway scams, fake customer support pages, impersonation accounts on social media, scam ads and fake apps. If it uses your name to deceive your customers, we can investigate it.

How long does a scam takedown take?

It depends on the platform or provider. Some act quickly and others need a push, so we escalate when a provider doesn't respond and track every case until it's confirmed offline.

What is a scam threat profile?

Scams look different for a bank, an airline or a retailer. We work with you to define the scams most likely to target your customers, the channels they use and the ones that cause the most harm, and we monitor and prioritise based on that.

Can you find the people behind a scam campaign?

We link scam sites, accounts and ads that share hosting, page code, phone numbers or payment pages into one campaign, so you can see the whole operation and we can take it down together.

Can we report scams our customers find?

Yes. Your team can send us any suspicious link, account or ad at any time, and it goes through the same evidence, validation and takedown process.

Does Unphish help with UK scam and fraud rules?

Yes. Unphish helps UK organisations detect, disrupt and document impersonation, with a full audit trail of every detection and takedown. That record supports your work under the Online Safety Act and APP fraud reimbursement rules.

Keep exploring

Make the call

Would you take this down?

You've detected a website using your brand. Review the evidence, then decide what to do.

  1. Evidence
  2. Investigate
  3. Enforce

Here's what you can see

  • Domainmember-rewards-hub.com
  • Registered3 days ago
  • BrandingDoesn't use your company name or logo anywhere
  • Website contentUses copy taken directly from your website
  • Imagery5 of 21 images appear to be copied from your website
  • PagePromotes a "Member Rewards" offer

What would you do?

Not yet.

There are potential grounds for copyright enforcement based on the copied content and imagery. But the Member Rewards offer raises another question: what happens when someone tries to claim it?

Good call. B. Investigate further

There are already potential grounds for copyright enforcement based on the copied content and imagery. But the Member Rewards offer raises another question: what happens when someone tries to claim it?

Risky.

It doesn't use your name or logo, but it copies your website's words and images and promotes an offer to people who think it's you. That's worth a closer look before you move on.

Here's what you find

  1. "Claim Member Rewards" button
  2. Registration form
  3. The form asks for Full nameEmail addressPhone numberAccount login details
  4. The information is sent to an unrelated external endpoint

Now what would you do?

You've got enough.

The investigation has confirmed the site is harvesting personal and login details. More digging won't change the answer. It's time to act.

Not this time.

It's collecting login details from people who think they're dealing with you. Leaving it up puts your customers at risk.

A. Enforce

The investigation confirmed the site is harvesting information. There are two possible enforcement routes, based on what we found.

Copied content + imageryCopyright / DMCA

Copied website content and imagery give grounds for copyright-based enforcement.

Information harvestingPhishing

The site is collecting information while using copied assets from the real brand.

Detection is only the start. A suspicious site doesn't always tell the full story. The evidence you uncover decides the right route.

Liked that one? Follow us on LinkedIn for scam insights, research, takedown stories and company news.

See the scams using your name.

Run a free threat scan or book a demo to see the scams targeting your customers right now.