Search your store's name in ChatGPT and in Google, then add the words sale, discount and official store. Compare every result you do not recognize with your real domain, your product photos, your prices and your contact details. That ten-minute check is the fastest way to learn whether a copy of your store is out there.
It matters right now because of a report on fake shopping sites, Black Friday and AI answers. On November 4, 2026, NordVPN published a press release about a network of more than 10,000 fake stores copying 166 fashion and luxury brands. Some shops from that network turned up when AI tools answered shopping questions.
If you sell online, that is enough to make you wonder whether someone has cloned your store and is taking your customers' money. The network copied large brands. What carries over to a small store is the method, and the checks below are the ones that apply.
Key Takeaways
Search your store name with sale, discount and official store in ChatGPT and in Google, and compare every unfamiliar result with your official domain.
The November 4, 2026 press release describes a network of more than 10,000 fake stores; AI tools cited some of those shops, not 10,000 of them.
Capture the full URL, screenshots and date first, then report to ChatGPT, Google, the domain registrar and the host.
HTTPS and a familiar logo are not proof either; confirm a seller on its official domain.
What can I check about my store in ten minutes tonight?
Open ChatGPT and Google in separate tabs. Search your exact store name with each of these words: sale, discount, official store and scam. Then search your real domain the same way. Write down every result that is not your own website, and do not enter payment details on any of them to test.
For each unfamiliar result, compare it with your official domain, your social profiles, your customer-service page and your public business listings. Look at the logo, the product photos, the descriptions, the prices, the return and shipping policies, the contact details and the payment methods. A result that matches your store on several of these and sits on a domain you do not own deserves a closer look.
Save what you find before you report anything, because a page can change or vanish once it is flagged.
Evidence to capture for each copy
The complete address of the page, not just the domain name.
The search result or AI answer where it appeared, and the page itself.
When you saw it, and which tool or search showed it.
Your logo, photos, descriptions or policies, next to the originals.
How the page asks customers to pay, without testing it yourself.
What did NordVPN report about fake stores and AI answers?
NordVPN's November 4, 2026 press release, titled "NordVPN uncovers a 10,000-store Black Friday fraud network impersonating 166 brands," published through a newswire, describes more than 10,000 counterfeit stores built from one cloned WordPress and WooCommerce template. They impersonate 166 fashion and luxury brands in 26 countries, and 1,549 were fully active as of November 3, 2026.
The AI detail is narrower than the headlines around it. In NordVPN's testing, Perplexity recommended two of the fake shops, and ChatGPT and Gemini cited other shops from the network. NordVPN also says shops in the network verified Google Search Console and rank for discounted brand searches, and that AI assistants that draw on web search inherit this visibility. So, the 10,000 figure counts stores in a network. AI tools cited some of them.
| Item | Reported figure |
|---|---|
| Press release published | November 4, 2026 |
| Fake stores in the network | More than 10,000 |
| Brands impersonated | 166 fashion and luxury brands |
| Countries | 26 |
| Fully active stores | 1,549, as of November 3, 2026 |
| AI tools named | Perplexity recommended two fake shops; ChatGPT and Gemini cited other shops from the network |
These are NordVPN's own findings, so quote them as NordVPN's if you mention them to customers. NordVPN's April 14, 2026 investigation described a related network of more than 800 fake stores. The targets were large fashion and luxury brands, and this post names no fake store.
How do fake stores copy a real one?
NordVPN's reports describe a repeatable build. The April investigation found professional e-commerce templates, real-looking product photography, WordPress and WooCommerce installations, replicated checkout flows and discounts of 50% to 80%. The November report adds localized languages, currencies, local addresses, product catalogs, logos and familiar payment badges.
NordVPN also noticed that the stores shared technical fingerprints, such as a recurring misspelling of "support" as "suppotr" and images loading from shared staging domains. The FTC's November 2024 holiday shopping alert says fraudulent sites often steal legitimate businesses' photos and logos and advertise expensive products at unusually low prices. When you review a result that uses your name, go through these in order:
- Domain: Your brand name with extra words, a different ending, or a spelling you never used.
- Photos: Your own product photos or descriptions on a page you did not build.
- Prices: Discounts far deeper than you have ever offered.
- Policies and contact details: Copied wording, an address that is not yours, or no way to reach a person.
- Checkout: Payment methods you do not accept or instructions you never wrote.
How do I report a fake copy of my store?
Start inside the tool that showed you the copy, then go to the people who control the domain. Save your evidence first, so every report below can use it.
In ChatGPT, use the thumbs-down control on the answer, choose "Safety or Legal concern" and follow the prompts. OpenAI also takes site reports through its content-reporting form, and if the copy infringes your trademark or sells counterfeit goods, OpenAI points rights holders to its trademark and counterfeit-disputes form.
For Google, send the page's URL through its phishing report, and include the legitimate store's address and the evidence of copied branding. Google's Safe Browsing guidance describes deceptive pages as pages that pretend to be a trusted entity or trick visitors into sharing confidential information or taking an action meant for a trusted entity. If the copy appears in a Google ad, use Google's ad-reporting route.
Then report the domain itself. A WHOIS or RDAP lookup shows the registrar and the hosting provider, and each has an abuse channel. Send the URL, screenshots, the brand being impersonated, any sign that the site collects payments, and a request for investigation. ICANN says accredited registrars must keep abuse contacts and investigate abuse reports; if a registrar or registry does not respond, you can file an ICANN DNS Abuse complaint.
Removal can take time, and a replacement domain can appear after one comes down. Keep your evidence organized so the next report takes minutes. Copies that run as ads or lookalike pages follow the same steps, and our guide to fake sites and ads using your business name covers that case.
What should I tell my customers, and when?
Warn customers when the evidence is clear: you have the URL, the screenshots and proof of copied branding or payment instructions. Post the notice on your own website, your email list and your social channels. Name your official domain, and tell customers where to report a suspicious transaction. Leave out accusations you cannot back up, and keep watching a result you cannot confirm yet.
Put your one real domain where customers already look: the footer of your site, the order-confirmation email and a card in every box. The FTC tells shoppers to search a seller's name and URL with "review," "complaint" or "scam" in its November 2025 holiday shopping alert, so a clear official-domain line gives them something to compare against. If the copy also appears as a social account, fake Instagram accounts selling under your business name has the steps for that.
What should I stop treating as proof that a store is real?
Stop treating HTTPS, a familiar logo, a polished design, translated pages, a local address or an AI citation as proof. The FTC says HTTPS encrypts a connection but does not prove a site is legitimate, and its online shopping guidance tells shoppers to check a seller across several independent sources and to pay by credit card where possible. Each of those signals can be copied.
OpenAI's shopping guidance says product descriptions, labels, reviews and ratings may be generated from third-party information and "are not guarantees or verified statements." It advises users to confirm the final price, taxes, fees, shipping, availability and return policy on the retailer's own site. An unfamiliar domain or a small price gap is a reason to compare, and the comparison tells you whether it is a copy.
When is paid help worth it?
The first pass is yours to run, and ten minutes gets you through a first check of what is out there. Paid help starts to make sense when there are several domains, customers have been harmed, payment details are exposed, replacement sites keep appearing or trademark questions come up.
At that point a specialist can turn scattered screenshots and complaints into one evidence packet, coordinate reports with OpenAI, Google, the registrar and the host, and watch for replacement domains. No one can promise that every fake site comes down quickly. What you gain is faster detection, cleaner evidence and clearer messages to your customers.
Can you spot the safe next step?
Pick an answer to begin.
1. NordVPN's November 4, 2026 press release reports more than 10,000 fake stores. What does that figure count?
2. An AI answer sends you to a store you have never heard of, and the page uses HTTPS. What does that tell you about the seller?
3. You find a copy of your store. What should you do before reporting it?
Frequently Asked Questions About Fake Shopping Sites in AI Answers
Can ChatGPT recommend fake shopping websites?
In NordVPN's testing, Perplexity recommended two fake shops, and ChatGPT and Gemini cited other shops from the network. OpenAI's shopping guidance says AI shopping details are not guarantees or verified statements, so confirm the price and policies on the retailer's own site.
Are there fake websites for stores for Black Friday deals?
Yes. NordVPN's November 4, 2026 press release describes more than 10,000 counterfeit stores impersonating 166 fashion and luxury brands, with 1,549 fully active as of November 3, 2026.
Does an AI citation prove a store is safe?
No. A citation shows that a page was used in an answer. Check the seller's domain, price, policies and payment route yourself.
How do I check whether someone copied my store?
Search your store name plus sale, discount, official store and scam in ChatGPT and Google. Compare every unfamiliar result with your real domain, product photos, prices, policies and contact details.
Does HTTPS mean a store is legitimate?
No. The FTC says HTTPS encrypts a connection but does not prove that a site is legitimate.
Should I warn customers about a fake copy?
Yes, when the evidence is clear. Name your official domain, tell customers where to report suspicious transactions and leave out claims you cannot support.
What This Means for You
You can check for a copy of your store tonight. Search your name with sale, discount and official store in ChatGPT and Google, compare each unfamiliar result with your real domain, save the evidence, and report confirmed copies to ChatGPT, Google, the registrar and the host. NordVPN's report describes a network of more than 10,000 fake stores that copied large brands, and some AI answers pointed to its shops.
Once your official domain is clear to customers and your evidence packet exists, the next report takes minutes instead of an evening. The rest of your sale-week preparation is in our Black Friday checklist for a small online store.
If you want a second set of eyes, Web Leveling can build the evidence packet, handle reports to OpenAI, Google, registrars and hosts, and watch for replacement domains through our online reputation work. We cannot promise that every fake site comes down quickly, and we will tell you if the ten-minute check is all you need. We work with small and medium businesses across the country and overseas. Tell us what you found when you searched your store's name, and we will help you decide the next step.
Terms
Fake store words in this post
Tap a term to see what it means.
Counterfeit store. A shop that copies a real brand's look and products to sell fakes or take payments.
Brand impersonation. Using another business's name, logo or photos to look like it.
Look-alike domain. A web address built from a real brand's name with extra words, a different ending or a changed spelling.
Registrar. The company that registers a domain name and keeps an abuse contact for it.
Hosting provider. The company whose servers store a website's files.
Safe Browsing. Google's system for flagging deceptive and dangerous pages.
Evidence packet. The URLs, screenshots, dates and copied branding you collect before reporting.
