Key Takeaways: Domain Name Fraud
- Domain name fraud happens when domains are registered, copied, or misused as part of scams, phishing, impersonation, or other fraudulent activity.
- A fraudulent website hosted in South Africa may be reported through the ISPA Take-Down Notice process.
- A .za domain being used for fraud may be reported through the ZARC anti-abuse and take-down process, even when it is being used mainly for scam emails.
- If someone uses a .za domain to impersonate your company, the .za Alternative Dispute Resolution (ADR) process may provide a way to dispute the registration and potentially have the domain transferred.
- Businesses can reduce their exposure by securing important domain names, watching for lookalike domains, keeping contact details current, using domain locking, and managing domain name renewal carefully.
- Serious online fraud should also be reported to the South African Police Service (SAPS). Suspicious cyber activity can be reported to the National Cybersecurity Hub.
Imagine searching for your business online and finding a website that looks almost exactly like yours.
Same logo, products, and almost the same domain name.
There's just one problem. It isn't yours.
Domain name fraud can take many forms. From fake websites and phishing emails to criminals registering similar domains to impersonate real businesses.
The Internet Service Providers' Association of South Africa (ISPA), the ZA Registry Consortium (ZARC), and the .za Domain Name Authority (.zadna) highlighted the dangers of domain fraud. They went on to explain that South Africans have several options when fraud involves a .za domain or locally hosted website.
That's good news if your business ever becomes a target, but knowing what to look for before it happens is better.
What Is Domain Name Fraud?
Your domain is more than the address of your website. It's also part of how customers identify and trust your business online.
That makes domain names attractive to scammers.
One common type of scam involves registering a domain that looks similar to a legitimate company's domain. A criminal could then create a fake website or use an email address on that domain to contact customers.
For example, someone could replace one letter in your domain and hope nobody notices.
Other domain name scams target the domain owner directly.
A renewal scam may involve fake renewal notices designed to look like they came from your actual provider. The scammer may ask you to pay an inflated price for a supposed domain renewal.
There are also appraisal scams. This scam involves someone expressing interest in buying a domain before insisting that the owner first pays an appraisal fee to a particular service.
The details change, but the objective is usually the same: use confusion around domains to steal money, information, or trust.
Someone Is Using a Domain for Fraud. What Can You Do?
This is where the recent ISPA guidance becomes especially useful.
The correct response depends on what is actually being abused.
1. A Fraudulent Website Is Hosted in South Africa
If a fraudulent website is hosted by a South African Internet Service Provider, it may be possible to submit an ISPA Take-Down Notice.
Importantly, a South African-hosted website doesn't necessarily use a .za domain. A .com website could be hosted locally, while a .co.za website could be hosted overseas.
The Take-Down Notice process deals with content hosted by an ISP. It doesn't deactivate the domain name itself.
2. A .za Domain Is Being Used for Fraud
What happens if there isn't really a website to take down?
Perhaps someone has registered a .za domain and is using it to send scam emails.
ISPA's September 2026 announcement says the ZARC anti-abuse and take-down process may help in cases where a .za domain is being used fraudulently, including when the website itself is hosted outside South Africa.
This targets abuse of the domain rather than simply the website content.
3. Someone Is Pretending to Be Your Business
This can be particularly damaging.
If somebody registers a .za domain to impersonate your company, you may be able to use the .za Alternative Dispute Resolution process.
Unlike the previous two options, a formal domain dispute usually comes with a cost. Depending on the outcome, however, the process can potentially result in the disputed domain being transferred.
If you've lost money or been the victim of substantial fraud, the matter should also be reported to SAPS. ISPA also points South Africans towards the National Cybersecurity Hub for reporting suspicious online activity.
What to Do About Domain Name Fraud
| What’s happening? | What you can do | Where to report it |
| A fraudulent website is hosted in South Africa | Request that the fraudulent content be taken down | ISPA Take-Down Notice process |
A .za domain is being used for fraud or scam emails | Report the domain abuse and request action against the domain | ZARC anti-abuse and take-down process |
Someone is using a .za domain to impersonate your business | Dispute the domain and potentially have it transferred | .za Alternative Dispute Resolution (ADR) |
| You've suffered substantial financial or online fraud | Report the incident to the relevant authorities | SAPS and the National Cybersecurity Hub |
Protect Your Domain Before Someone Else Targets It
You can't stop every scammer from registering domains, however, you can make life harder for them.
Start by registering the domain names that are important to your business. That could include your primary .co.za, as well as other relevant types of domain or obvious variations of your business name.
This doesn't mean buying hundreds of registered domains just in case. Focus on the names that someone could realistically use to confuse your customers.
It's also important to:
- Know which domain registrars manage your domains
- Keep your domain registrant details current
- Be suspicious of unexpected renewal emails.
If you receive a domain renewal notice, don't immediately follow its payment link. Log in to your normal registrar account and check the domain's status there.
Features such as domain locking can also help prevent unauthorised transfers. And keep track of renewal dates. Losing an important domain because you forgot about domain name renewal can create a completely different problem.
Working With ISPA for a Safer South African Internet
We're also proud to be an accredited member of ISPA and part of the wider South African internet industry working to make the online space safer and more accountable.
ISPA lists HostAfrica as a Medium member, and membership requires compliance with the organisation's Code of Conduct. ISPA also plays an important role in processes such as handling Take-Down Notices and providing mechanisms for consumer complaints and accountability.
For us, being part of ISPA isn't simply another badge for the website. It means working within an industry framework designed to protect internet users, address abuse, and give South Africans clearer options when things go wrong online.
Domain name fraud is a good example of why that collaboration matters. Registrars, hosting providers, registries, industry bodies, and customers all have a role to play in making the South African internet a safer place to do business.
Your Domain Is Part of Your Business Identity
There are millions of domain name registrations worldwide, managed through different registrars and domain registry systems. For businesses, choosing a domain shouldn't be treated as a minor box to tick before building a website.
It's part of your brand.
Customers see it in your website URL, your email address, and sometimes in search engine results before they see anything else about your company.
At HostAfrica, we help businesses register and manage domain names, including South African .co.za domains. This, alongside web hosting and other services needed to build a professional online presence.
Securing the right domain won't make fraud disappear. But owning and properly managing the domains that matter to your brand is a sensible first step in protecting your identity online.
Because finding out someone is pretending to be your business is stressful enough.
Finding out you could have secured the domain first is even worse.
FAQs: Domain Fraud
What is domain name fraud?
Domain name fraud involves using a domain to deceive people, such as through fake websites, phishing emails, business impersonation, or other scams.
How do I report a fraudulent .za domain?
A .za domain being used for fraud can be reported through ZARC's anti-abuse and take-down process.
What if someone registers a domain pretending to be my business?
For .za domains, you may be able to use the Alternative Dispute Resolution process to dispute the registration and potentially have the domain transferred.
How can I protect my business from domain name scams?
Secure important domain variations, enable domain locking where available, keep registration details current, monitor renewal dates, and verify unexpected renewal notices before paying.
