Malte ZanderContents
Setting up AI Fraud Protect takes about 15 minutes. You add the domains to protect, with your real pages as references, fill in the ignore list with your own domains and partners, configure the domain scanner, embed the report widget with one line of code and decide who sends reports. After that, reports and scans run continuously.
- Setup takes about 15 minutes, after which reports and scans run continuously (AI Fraud Protect).
- On a schedule, the domain scanner checks up to 20,000 variants of your domains, with typos, homoglyphs and add-ons like login (AI Fraud Protect).
- The report widget is embedded with one line of code. You set position, color and language yourself, in English or German (AI Fraud Protect).
- Hosts need the exact URL for a notice under the EU Digital Services Act, among other details. That is why the widget captures the full link (DSA, Article 16).
What do you need before you start?
Five things you clarify and prepare during onboarding:
A written mandate and power of attorney from the rights holder. Reports are only made on its behalf.
Your trademark evidence, such as the registration number of your registered mark. It belongs in every evidence package.
The domains to be protected, with your real pages as references.
A person who sends the reports, ideally with a deputy.
A list of your partners and resellers, so their domains are never reported.
Step by step
Step 1: Add your protected domains
Enter your main domain and the most important subdomains, such as [your-brand].com and login.[your-brand].com. From these seed domains, the domain scanner generates the variants it searches for. If you have several brands, each gets its own organization, see Multi-brand protection.
Step 2: Choose your reference pages
The AI compares every finding with your real page, on desktop and mobile. So choose the pages most likely to be copied as references: your homepage, login page, results or verification page and, if relevant, your shop. Visual similarity shows how the comparison works.
Step 3: Create the ignore list
Enter all of your own domains, including old campaign and country domains, plus the domains of partners, resellers and agencies. Domains on the ignore list are never reported. The more complete the list is on day one, the fewer false positives you see later. More in False positives in brand protection.
Step 4: Configure the domain scanner
Set the schedule and how many variants each scan checks, up to 20,000. The scanner looks for typos, homoglyphs and terms like login, certificate or exam. Domains without content but with risk, such as parked, for sale or under construction with your favicon, go on the watchlist and are reassessed with every scan. You can also check individual domains or whole lists manually, by domain or CSV.
Step 5: Embed the report widget
Set position, color and language, copy the embed code and add it where people have doubts: on your website, your login page and your results or verification page. Anyone with a suspicious link reports it there or uploads a certificate as a PDF. Report widget explains why the widget matters so much.
Step 6: Assign responsibilities
Decide who reviews new cases, who sends reports and who takes over for escalations and legal questions. Every message is reviewed and sent by a person, so you need clear responsibility, holidays included. More in Human in the loop takedowns.
What happens after setup?
The first scan runs on your schedule, and the results appear as threats with a risk level and a note on what was copied. Reports through the widget collect in one place and are analyzed by the AI with a screenshot. The dashboard shows open critical threats, active cases, open takedowns and reports from the community. For every case you take on, the evidence package is ready and the reports to host, registrar, DNS provider and Google are prepared to fit the framing.
The first 30 days
A simple routine is enough to start:
Daily: review new critical threats and widget reports and initiate takedowns.
Weekly: check open takedowns, follow up where a response is missing and go through the watchlist.
Monthly: write a short report, see Brand protection reporting.
After 30 days: refine the ignore list and reference pages based on the first cases.
Common setup mistakes
Five mistakes that are easy to avoid:
The widget only on the homepage. It matters most on the verification and login pages.
An incomplete ignore list. Forgotten partner domains create false positives.
Too few reference pages. Without your real login page as a reference, the comparison with a cloned login page is weaker.
Nobody is responsible. Cases without an owner pile up.
The widget is never mentioned. Point verifiers, customers and support to it.
How does AI Fraud Protect help?
AI Fraud Protect is available now, and setup takes about 15 minutes. The mandate, power of attorney and trademark evidence are sorted out during onboarding. After that, the domain scanner and report widget find fakes, the AI assesses them against your reference pages, and every case gets an evidence package and prepared reports that a person reviews and sends. You don't have to issue credentials with Virtualbadge.io, although signed credentials make copies stand out sooner.
Start the free fraud scan for a short report within 48 hours, or request a demo to see the dashboard, the report widget and a complete case.
FAQ
How long does setup take?
About 15 minutes, if your domains, reference pages and partner list are ready. You settle the mandate and power of attorney beforehand during onboarding.
Do we have to issue credentials with Virtualbadge.io?
No, AI Fraud Protect works without it. Signed credentials make it easier, because anything issued with a signature can be verified and a copy stands out sooner.
Who should send the reports?
Someone who can judge the case and may act on the brand's behalf, for example from brand protection, IT security or legal. Plan for a deputy.
Can the widget match our design?
You set position, primary color and language yourself, in English or German.