Skip to main content

DMCA takedown templates for copied Shopify stores.

Paste the URL of the site copying your store. We look up the registrar abuse contact, draft the notice, and hand you a ready-to-review .eml file.

  • Auto-detects the registrar and pre-fills the abuse contact.
  • Includes sections for the copied work, your contact details and supporting evidence.
  • Outputs an .eml draft with XARF evidence attached.
  • Your data never leaves your browser. The lookup is the only network call.

The copied site

Your store

Signer

Once you've downloaded it

Three steps from downloaded draft to filed takedown.

  1. 01

    Open the .eml in your mail client

    Double-click the downloaded file. Apple Mail, Outlook, and Thunderbird will all open it as a pre-addressed draft. Gmail users: drag the file into a new compose window, or upload via "Attach files."

  2. 02

    Send from the email on the notice

    Use the contact details you included in your notice. Use a reply address you control and identify your authority to report the copied material. Follow the receiving provider’s form requirements.

  3. 03

    Track the report and follow up

    Response times vary by provider and the evidence you submit. If you don't hear back, escalate to the hosting provider (separate notice), Google Safe Browsing, and any payment processors the clone uses.

From one-off notice to continuous reporting

Recon keeps watch for store clones.

The app monitors clone loads, lookalike domains, redirects, and phishing pages, then organizes the evidence into a merchant-readable report. If escalation is needed, you stay in control of what gets sent.

What Recon adds

  • → Clone and lookalike monitoring
  • → Evidence capture with page, domain, and registrar context
  • → Risk level and recommended next step
  • → Merchant-led escalation templates when needed

Common questions

Is this notice legally compliant?

It contains every element required by 17 U.S.C. §512(c)(3): identification of the work, identification of the infringement, contact info, good-faith statement, statement under penalty of perjury, and signature. That's the floor most hosting providers check against. Complex disputes or repeat offenders may still need a lawyer.

Why an .eml file instead of a PDF?

Hosting and registrar abuse desks process email, not PDFs. The .eml opens in your mail client as a pre-addressed draft with the XARF evidence report already attached. One click to send, formatted exactly the way the recipient's automation expects.

What's XARF?

eXtended Abuse Reporting Format is a standard JSON schema for abuse reports. Attaching it lets automated triage parse the report before a person reviews it.

Where do I find the right abuse contact?

Paste the infringing URL and click "Look up registrar." We query WHOIS/RDAP and prefill the registrar's abuse address. If the lookup fails, search "{registrar name} abuse contact" or check the registrar's website directly.

Should I also report to the hosting provider?

Yes. File in parallel. The registrar controls the domain, while the host controls the server. Large providers such as Cloudflare, AWS, and Shopify have their own abuse intake forms.

Use a DMCA notice for copied creative work

A DMCA notice is a copyright claim. It can be the right route when another site republishes your original photography, copy, video, or other creative work without permission. It is not a catch-all complaint for a suspicious store.

For a copied Shopify storefront, separate the issue before you report it:

What you foundUsual reporting route
Your original product photography or copyCopyright or DMCA process
Your registered or common-law brand name used to misleadPlatform trademark process or legal advice
A deceptive checkout, credential theft, or fraudProvider abuse or phishing report
A confusing domain nameRegistrar review or a domain-dispute route, if appropriate

One site can create more than one problem. A copied product page may support a copyright report, while a deceptive payment flow should be reported through an abuse channel as well. Describe each fact accurately rather than forcing every concern into one notice.

Confirm that you own the material

Before filing, identify the specific work and the basis for your right to report it. Keep a record of:

  • The original URL, files, and publication date where available
  • The infringing URL and a screenshot showing the copied material in context
  • The elements that were copied, such as a photograph, paragraph, illustration, or video
  • Any licensing information that matters
  • The name and contact details of the rights owner or authorized representative

Copyright may exist automatically in original work, but ownership and scope can be complicated. Generic product facts, short phrases, product names, and functional page layouts may not be protected in the same way as original creative expression. If the claim is material to your business, get advice from qualified counsel.

What a notice generally needs

Service providers often publish their own forms and requirements. A complete copyright notice commonly asks for:

  1. Your electronic signature or the signature of an authorized agent.
  2. A clear identification of the copyrighted work.
  3. The exact URL or other location of the allegedly infringing material.
  4. Contact information that lets the provider and uploader reach you.
  5. A good-faith statement that the use is not authorized.
  6. An accuracy and authority statement made under penalty of perjury, where the provider requires it.

Use the provider’s current form or policy page. Do not copy a template blindly, and do not make claims you cannot support.

Find the party that can act

Start with the platform or host that serves the copied material. A domain registrar, CDN, search engine, marketplace, and social network can each have a different role. They may not control the same thing.

PartyWhat it may be able to do
Store platform or hostRemove or restrict the page or account under its policy
Marketplace or social platformRemove a listing, post, ad, or account
Search engineConsider removal from search results in some circumstances
CDN or infrastructure providerRoute an abuse report to the customer or apply its own policy
RegistrarReview domain-policy concerns, not usually copied page content

Follow the current abuse or intellectual-property channel listed by that provider. Save the submission confirmation and any case number.

A practical evidence packet

Make the reviewer’s job easy. A useful packet is short and specific:

  • A one-sentence description of the issue
  • Original and infringing URLs side by side
  • Dated screenshots or source files
  • A list of the particular material copied
  • Ownership or authorization evidence
  • Your preferred contact details

Avoid attaching customer data, credentials, or unrelated correspondence. If an issue involves active fraud or customer risk, use the provider’s security or abuse route alongside any copyright request.

Counter-notices and escalation

The uploader may dispute a copyright complaint. Providers have their own procedures for counter-notices and restoration. A dispute can have legal consequences, so preserve your evidence and seek legal advice before escalating beyond the platform process.

If a provider does not act, check whether you reported the right issue to the right party. A second report should add missing facts, not repeat accusations. You may also have trademark, consumer-protection, contract, or domain-dispute options, depending on the facts and jurisdiction.

Keep customer communication factual

If customers could encounter a copied or deceptive storefront, tell them where to find your official store and support channels. Do not accuse a party of fraud publicly unless you can substantiate that claim. Direct customers to their payment provider if they believe they have been charged by a different merchant.

How Recon fits

Recon can surface checkout and storefront signals that merit review and keep the evidence connected to the finding. It does not decide whether material is infringing, send legal notices, or guarantee that a provider will remove content. Your team reviews the evidence and chooses whether to report it.

FAQ

Can I use a DMCA notice for my brand name?

Usually not by itself. Brand-name misuse is generally a trademark or platform-policy question. Use the route that matches the conduct.

Will a DMCA notice remove an entire website?

That depends on the provider, the reported material, and its policy. A notice should identify the specific copyrighted material at issue.

Should I contact the site owner first?

That is a business decision. If there is evidence of phishing, fraud, or customer harm, preserve evidence and use the relevant provider-reporting channel rather than engaging an unknown operator directly.

Version 1: DMCA Notice to Hosting Provider

Use this when you’ve identified the hosting provider through a WHOIS/nameserver lookup. Send to their abuse or DMCA contact.


Subject: DMCA Takedown Notice: Copyright Infringement on [infringing domain]

To Whom It May Concern:

I am writing to notify you of copyright infringement occurring on a website hosted by your service, in accordance with the Digital Millennium Copyright Act (17 U.S.C. § 512).

I. Copyright Owner Information

Name: [Your Full Legal Name] Company: [Your Company Name] Address: [Your Full Address] Phone: [Your Phone Number] Email: [Your Email Address]

II. Identification of Copyrighted Work

I am the owner of the copyrighted content published at:

  • [Your store URL, e.g., https://yourbrand.com]
  • [Specific original page URL 1]
  • [Specific original page URL 2]
  • [Add more as needed]

This content includes but is not limited to: original product photographs, product descriptions, website design and layout, brand logo and graphics, and other creative works authored by me / my company.

III. Identification of Infringing Material

The following URLs contain material that infringes my copyright by reproducing my copyrighted content without authorization:

The infringing website is a clone of my legitimate online store. It reproduces my copyrighted product images, product descriptions, page layouts, and brand assets without my permission or authorization.

IV. Good Faith Statement

I have a good faith belief that the use of the copyrighted material described above is not authorized by the copyright owner, its agent, or the law.

V. Accuracy and Authority Statement

I swear, under penalty of perjury, that the information in this notification is accurate and that I am the copyright owner or am authorized to act on behalf of the owner of an exclusive right that is allegedly being infringed.

VI. Request

I request that you expeditiously remove or disable access to the infringing material identified above, in accordance with 17 U.S.C. § 512.

Sincerely,

[Your Full Legal Name] [Your Signature: type your name if sending electronically] [Date]


Version 2: Abuse Report to Domain Registrar

Use this when you want the domain itself suspended. Send to the domain registrar’s abuse contact (found in the WHOIS record).


Subject: Abuse Report: Fraudulent Domain Impersonating [Your Brand Name]

To the Abuse Team:

I am writing to report a fraudulent domain registered through your service that is being used to impersonate my legitimate business and defraud consumers.

Fraudulent Domain: [infringing domain, e.g., yourbrand-official-shop.com]

My Legitimate Business:

  • Company: [Your Company Name]
  • Official Website: [Your store URL, e.g., https://yourbrand.com]
  • In operation since: [Date your store launched]

Nature of Abuse:

The domain listed above is hosting a cloned version of my legitimate online store. The site reproduces my copyrighted brand assets, product photographs, product descriptions, and website design without authorization. It is collecting customer payment information under the false pretense of being my business.

This constitutes:

  • Copyright infringement (unauthorized reproduction of copyrighted content)
  • Trademark infringement (unauthorized use of my brand name and assets)
  • Consumer fraud (impersonating a legitimate business to collect payments)
  • Phishing (collecting personal and financial information through deception)

Evidence:

I have attached the following:

  • Screenshots of the fraudulent site alongside my legitimate store for comparison
  • WHOIS records showing the domain was registered after my business was established
  • [Any additional evidence, e.g., customer complaints about the fake site]

DMCA Notice:

I have also filed a DMCA takedown notice with the hosting provider. A copy is attached for your records.

Request:

I request that you investigate this domain and take appropriate action, including suspension of the domain, in accordance with your acceptable use policies and ICANN’s requirements regarding domain abuse.

Sincerely,

[Your Full Legal Name] [Your Company Name] [Your Email Address] [Your Phone Number] [Date]


Tips for Sending

For the hosting provider DMCA notice:

  • Email it to their designated DMCA agent. This is often listed on their website under “Legal” or “DMCA.” Many providers also list their DMCA agent with the U.S. Copyright Office at copyright.gov/dmca-directory.
  • Attach screenshot evidence as image files or a PDF.
  • Keep a copy of everything you send, including timestamps.

For the domain registrar abuse report:

  • Most registrars have an online abuse form (preferred) or accept email at abuse@[registrar].com.
  • Include the DMCA notice as an attachment for additional weight.
  • If the registrar doesn’t respond within 5-7 business days, escalate to ICANN’s complaint process at icann.org/compliance/complaint.

Additional reporting (do these in parallel, not sequentially):


Install Recon and run your first scan in under a minute.

No signup required to scan. One click to install on Shopify. The free plan covers what most growing brands need.

Free

In the Shopify App Store

Setup

Under 60 seconds

Paid plan

$50/mo · 14-day trial

Contract

None. Cancel anytime.