Why You Need an Anti-Phishing Service to Protect Your Brand from Fraud

From email phishing to fake social media accounts, brand impersonation poses major risks to businesses and their consumers. Our tailorable anti-phishing service enables brand owners to identify and shut down online abuse and phishing scams effectively.  

As part of our online brand protection solution, we offer a bespoke anti-phishing and web monitoring service that focuses specifically on brand impersonation. Comprising field-proven monitoring capabilities and a dedicated anti-phishing mailbox that is managed on the client’s behalf, the customizable service includes: 

• Creating and managing a phishing mailbox for you to report perceived abuse for action and control.
• Monitoring of newly registered domain names.
• SSL monitoring of hostnames in newly published SSL/TLS certificates.
• Monitoring of social media and Paid Ads.
• Monitoring of “PhishTanks” (directories of phishing scams). 

Step 2: Optimize Online Monitoring 

We tailor the online monitoring modules that form part of our online brand protection solution to support brands where they need us most. This includes optimizing our: 

• Web Monitoring Service 

Our web monitoring service for phishing cases includes undertaking reverse searches for unique identifiers from the cases collected from various sources—such as abuse mailboxes, domain monitoring, and threat exchangers—to proactively detect unreported phishing pages, gather data, and neutralize the attacker’s infrastructure. 

• Domain Monitoring Service 

Our team investigates newly registered domain names daily, and suspicious domain registrations are added to our CMS and enforced immediately to pre-agreed workflows when signs of fraudulent or malicious behavior are detected [1]. 

• SSL Monitoring  

Most online abuse such as phishing, harmful activity, and brand impersonation takes place on websites with a Secure Sockets Layer (SSL)/Transport Layer Security (TLS) certificate. Such certificates enable an encrypted connection between the browser and the web server, and websites without an SSL/TLS certificate are often categorized as unsafe by browsers. Most users today associate websites starting with https: (SSL certified) as secure. Unfortunately, this perceived safety assurance, together with the easy setup of SSL/TLS certificates, has made this the new arena for fraud.  

Thomsen Trampedach, our center of excellence for online brand protection, has developed a solution that monitors in real-time newly published SSL/TLS certificates from transparency certificate logs and scans for our client’s brand names in the domain name (hostname/common name) that is protected by the certificate. The results are categorized according to risk in our CMS, which allows our team of professionals to proactively act on the biggest threats to our clients as they emerge [1].  

• Social Media/Paid Ads Monitoring 

Our team monitors social media and paid ads to identify and challenge unauthorized activities, such as impersonation, via available tools (such as Facebook’s Commerce & Ads IP Tool). 

• Monitoring of Phishing Directories  

Our comprehensive anti-fraud and anti-phishing service includes monitoring directories of phishing scams using a proprietary tool that automatically scans the biggest phishing databases. 

• Deep-Dive Investigations 

Our team can perform deep-dive searches to investigate phishing cases that require extra attention, including those involving public authorities.