Website Cloned or Copied? What It Means and What to Do

What is a cloned website?

A cloned website is a copy of a real website, placed on an address the real owner does not control. For an online store, the clone usually reuses the store’s name, logo, product photos, descriptions and layout. To a shopper, it looks like the real store.

Some clones are lazy imitations by a competitor. Many are scams. A scam clone takes an order and payment, then ships nothing, ships a cheap knockoff, or collects card details. The shopper believes they bought from you, so the complaint often comes to you.

A cloned website is different from a store that sells similar products. Two stores that use the same supplier can have similar photos legitimately. A clone copies your identity: your name, your pages and your words.

This page explains how cloning works and what merchants usually do about it. It is not legal advice.

How do scammers clone an online store?

Copying a store takes less effort than most merchants expect. A typical clone goes through four steps.

1. Copy the pages. Browsers can save a full page. Free tools can download a whole site. Theme files, images and text that a store shows to shoppers are, by design, public.
2. Copy the catalogue. Product names, prices, photos and descriptions are visible on every product page, so they are easy to collect in bulk.
3. Get an address. The clone needs a domain. Scammers often register a lookalike address such as yourbrand-shop.com, yourbrand.store or a one-letter misspelling.
4. Send traffic. Social media ads and search ads bring shoppers to the clone. Low prices or “closing down” sales make them act fast.

Steps one and two take minutes. A domain costs about $12. That is why cloning is common: the cost is small and one deceived order can repay it many times over.

Why are Shopify stores copied so often?

Because they are successful, and because they look the way shoppers expect a real store to look.

• The brand does the selling. A copied store does not need to earn trust. It borrows trust from your name, your reviews and your photos.
• Themes are recognisable. Shoppers know what a well-made Shopify store looks like. A good clone of one looks credible.
• Ads reach shoppers directly. A shopper who taps a social ad may never type your real address, so a lookalike address goes unnoticed.

None of this means Shopify is insecure. Your admin, payments and customer data are not exposed when someone copies your storefront. The clone is a separate website that only looks like yours.

How can you tell if your website has been copied?

Most merchants find out from a customer. These are the common early signs:

• A customer asks about an order you have no record of.
• A customer mentions a price, sale or address you never used.
• Your product photos appear in an ad for a store you do not recognise.
• A search for your brand name shows a result on a domain you do not own.
• Your analytics show traffic or images loading from an unknown domain.

You can also check on purpose. Search your brand name with words like “shop”, “official” and “sale”. Run a reverse image search on your best product photos. Look up addresses that differ from yours by one letter or one ending. Our guide How to Check if Your Shopify Store Is Cloned walks through five free checks in about 15 minutes. A Google Alert on your brand name is a useful free layer, with limits: see Google Alerts vs clone monitoring.

A close domain on its own is not proof of a clone. Many lookalike addresses are parked or unused. Look at what the page actually shows and does before you act.

Is it illegal to copy a website?

Often, parts of it are. But “copying” covers several different problems, and each one has a different remedy.

What was copied	What usually applies
Your original photos and written descriptions	Copyright. A copyright notice (often called a DMCA notice) to the host or platform. See DMCA notices.
Your brand name or logo, used to confuse shoppers	Trademark. Usually needs a registered mark to use a platform’s trademark process.
A checkout that takes money and ships nothing	Fraud. Report to the platform, the payment provider and the ad platform.
A login or payment page built to steal details	Phishing. Report to the host and to browser-safety services.

One clone can involve all four. Name the behaviour you can show, and send each report to the company that can act on it. For a contested case or a serious loss, talk to a lawyer.

What should you do if your website was cloned?

Act in this order. The first step matters most, because clones often move or disappear.

1. Save the evidence. Take dated screenshots of every page that copies yours, with the address bar visible. Save the same pages from your own store for comparison. Note any ads that point to the clone.
2. Find out where it runs. Check whether the clone is hosted on Shopify or somewhere else. This decides where to report. How to report a fake Shopify store explains how to tell.
3. Report it to the right companies. That can include the platform or host, the domain registrar, the payment provider and the ad platform. Reporting brand abuse covers each channel.
4. Tell your customers. Post your official address and support email. Tell shoppers who paid the clone to contact their bank or card issuer.
5. Keep a log. Record each report, its reference number and the date. Check the clone again in a few days.

Do not enter real payment details on the clone to test it. Do not contact the operator directly before you have saved the evidence.

For a full walkthrough, read Someone cloned your Shopify store. Here’s what to do.

Can you prevent your website from being cloned?

Not completely. Anything a shopper can see, a scammer can copy. Right-click blockers and image-protection scripts slow down no one who knows how to save a page. They do nothing against a reverse proxy clone, which shows your real pages live on another address.

What you can do is make a clone less useful and find it sooner:

• Register the obvious lookalikes. Your name on the main endings, plus common misspellings. See defensive domain registration.
• Lock down your email. A DMARC policy makes it harder for a clone to send email that appears to come from your domain.
• Publish your official address. Put it in your footer, order emails and social profiles, so customers can check.
• Keep your originals. Keep source files and dates for your photos and copy. They make a copyright report faster.
• Watch for clones. The earlier you find a clone, the fewer customers it reaches.

How Recon fits

Recon is a Shopify app that watches for clones of your store and for suspicious lookalike addresses.

If you add Recon’s optional theme block, Recon records when your copied theme code loads on another domain. A clone that copies your theme files carries that code with it. Recon also checks lookalike addresses for your domain and shows the evidence for each finding.

Recon cannot find every clone. A clone rebuilt from scratch with stolen photos does not carry your theme code. Recon does not remove websites. You review the evidence and send the report. The host or registrar decides whether to remove the site.

On the Free plan, Recon scans weekly and new clones arrive in your weekly summary, so you may hear about a clone up to a week later. The paid plan ($50/month) sends clone alerts by email as soon as they are detected and sweeps daily. Both plans prepare a notice for you to review and send.

FAQ

Q: Will Google punish my store if someone copies it?

A: Usually not. Google tries to rank the original. A clone can still show up in search or ads, so report it and keep your official address easy to find.

Q: My copied store is still up after I reported it. What now?

A: There is no standard timetable. Check that you sent the right claim to the right company. Then report other parts of the chain too, such as the registrar, payment provider or ad platform.

Q: Someone copied my product photos but not my store. Is that a clone?

A: Not a full clone, but it can still be copyright infringement. A copyright notice to the host or platform is the usual route.

Q: Can I find out who made the clone?

A: Rarely. Domain registration details are usually private, and scammers use throwaway accounts. Focus your effort on getting the site and its ads removed.

Recon research

• Recon has found 153,502 clones of Shopify stores, including clones of Taylor Swift’s store, SKIMS and Stanley.
• Inside a copy factory: one operation running 1,732 clones of 475 Shopify brands.