Fake casino site using our brand: how to take down a clone (lawful grounds)

Short answer: a clone casino that copies your brand, logo and licence is attacked on several legal grounds at once, not one. The copied creative assets come down under copyright (DMCA §512 in the US) sent to the host; the brand name and false licence claim run on trademark and fraud/passing-off; and where the host will not move, leverage shifts to the registrar, the upstream network and search deindexing. No single notice is guaranteed — the result depends on the host, the registrar and the jurisdiction.

How a clone casino actually works

A clone is not a competitor — it is impersonation built to defraud. The operator scrapes your live site, lifts your logo, colour scheme, game tiles and page copy, and republishes them on a near-identical domain (a typo-squat, a different TLD, or your name plus a suffix). Crucially, it usually reproduces your licence number and regulator badge so players believe they are depositing with a licensed operator. The point is conversion: take deposits, refuse withdrawals, and disappear before the chargebacks land. Because the assets are copied wholesale, the clone leaves a clear evidentiary trail — which is exactly what the takedown routes below rely on.

Your first job is documentation. Capture full-page screenshots with visible URLs and timestamps, archive the pages (a timestamped archive service is enough), and record the domain, the WHOIS, and the hosting IP. If the clone is behind a proxy, the real origin still leaks — our guide on finding the real host behind Cloudflare walks through the channels. This evidence is the predicate for every notice that follows.

What you can do yourself

For a single clone on a cooperative host, the self-help route is real:

1. Host abuse and legal channels. The hosting provider has obligations a proxy does not. Send a notice to the host”s abuse address (often in the IP WHOIS / RIR record) and any separate legal address, naming the copied assets, the false licence claim, and the player-fraud nature of the site. If the site sits behind Cloudflare, also file at abuse.cloudflare.com — Cloudflare generally forwards to the origin host rather than removing content itself, but it identifies the host and acts directly on narrow categories such as phishing.
2. DMCA §512 for the copied creative (US). A DMCA §512 notice covers the copyright in what was copied — your logos, graphics, photographs and page layout. It is the cleanest, most-actioned route at most hosts because it is a defined statutory process. It does not, on its own, reach the brand name or the licence claim; those are trademark and fraud matters.
3. Registrar. The domain”s registrar has an acceptable-use policy; a site built on copied assets, a false licence and player fraud typically breaches it and can take the whole domain offline — broader than removing one page.
4. Search deindexing via the legal channel. File through Google”s Report Content for Legal Reasons tool on trademark and fraud grounds so the clone stops surfacing in search.

A note on Lumen: Google forwards many legal-removal requests to the public Lumen database, which means a clumsy self-filing can republish the very URLs you are trying to bury. For clearly unlawful content the forms work fine — but precision matters, and over-broad filings backfire.

Where the self-help route breaks

Two walls stop most in-house attempts. The first is bulletproof hosting: operators deliberately choose offshore or non-cooperative hosts that ignore abuse and DMCA notices entirely. Identifying such a host does not compel it. The second is scale and regeneration: a clone is rarely alone. Take one down and a mirror appears on a new domain and host within days, faster than a manual notice-by-notice process can keep up.

When the host will not move, leverage shifts sideways and upward — to the registrar, to the host”s upstream network provider, to the payment processors and KYC vendors the clone depends on to take deposits, and to search deindexing so the site loses the organic traffic that is its reason to exist, even while the file stays live on an uncooperative server. None of these layers is guaranteed alone, which is why serious enforcement runs several at once.

What the statute route looks like

The counsel-grade version is multi-track and jurisdiction-aware:

• Copyright — DMCA §512 (US). Targets the copied assets at the host and search layer.
• Trademark / passing-off. The brand name, logo-as-mark and false licence claim are trademark infringement and passing-off — the route that actually reaches the impersonation itself, pursued under the law of the relevant jurisdiction (US, EU/EEA, UK each differ on standing, notice and remedy).
• Fraud and consumer-protection. A site taking deposits under a false licence engages fraud and consumer-protection regimes, which strengthens registrar, payment-provider and regulator engagement.
• Regulator coordination. Where a regulator (FCA, CySEC, ASIC) publishes a warning about the clone misusing your brand, the work is documenting that the warned entity is not you — never suppressing a legitimate warning, which protects players and supports your removal case.

When to bring in counsel

If you have one clone on a cooperative host, the steps above are something your team can run. It becomes a counsel matter when the host is hostile or bulletproof, when the clone is one of many mirrors regenerating faster than you can file, or when you need the trademark, fraud, registrar, payment-provider and deindexing layers worked in parallel under named statute across more than one jurisdiction. That is enforcement at volume — distinct from a single takedown — and it is where the practice operates, including with API-level access on Cloudflare-protected domains through Cloudflare”s Brand Protection programme. We do not remove or suppress lawful content; we challenge a clone that is fraudulent, infringing, or in breach of the host”s and registrar”s terms.

---

Informational, not legal advice — verify the current forms and grounds, which differ by jurisdiction (US, EU/EEA, UK). No outcome is guaranteed; results depend on the facts and the jurisdiction.