Tuesday, 25 August 2026

The top generative AI tactics used by counterfeiters and why IP matters

by David Barnett and Jane Jarosz

GenAI is changing the economics of online infringement

We have seen how the digital era has enhanced a multitude of social structures, completely changing access to, and the ability to use information. The key change has been the emergence of generative AI, which has lowered the technical entry barrier for fraud and counterfeiting, shifting it to industrial-scale deception.

Generative AI ("GenAI") applications are automated systems capable of generating sophisticated content - including text, images, audio and video - in response to user prompts. Many GenAI systems are built on models trained using vast volumes of existing content, allowing them to identify and reproduce statistical patterns within that material.

The rapid evolution and adoption of GenAI has made these capabilities accessible to businesses and consumers alike. More than 60% of the US population, for example, now uses GenAI services[1]. Familiar examples include OpenAI's ChatGPT, Google Gemini, image-generation platforms such as Midjourney, and coding assistants such as GitHub Copilot.

For brand owners, however, GenAI represents both an opportunity and an increasingly significant enforcement challenge. The same technologies being used to improve brand protection can also be exploited by counterfeiters, fraudsters and other infringers to produce convincing content at greater speed and scale than ever before.

The important point for businesses is that GenAI does not necessarily create entirely new forms of infringement. In many cases, it reduces the cost, skill and time required to carry out existing forms of abuse. At the same time, emerging capabilities - including deepfakes, voice cloning and increasingly sophisticated synthetic imagery - are creating new threat risks that traditional monitoring and enforcement processes may not adequately address.

The tactics counterfeiters are using with GenAI

For bad actors, GenAI can be used to automate or enhance almost every stage of a fraudulent campaign. Common applications include the creation of phishing e-mails[2], fake websites, malicious files, deceptive social-media content and other materials designed to look like a legitimate shopping journey.

This is how it has lowered the technical barrier to entry. A fraudster no longer needs sophisticated design, copywriting or coding skills to produce convincing content. GenAI can generate polished materials almost instantly, allowing relatively unsophisticated actors to operate with greater speed, credibility and scale.

For brands, this creates a particularly challenging combination: more content, produced faster, with fewer obvious indicators of fraud. AI-generated imagery is making counterfeit listings more convincing.

The counterfeit-goods market provides a clear example of how these capabilities can be applied.

AI image-generation tools can produce highly convincing representations of branded products, packaging and other brand assets. Counterfeiters may incorporate legitimate-looking product features, serial numbers and other characteristics into generated imagery, creating the appearance of authenticity in marketplace listings or promotional materials.

This can make basic visual verification significantly more difficult. A consumer or automated moderation system may be presented with imagery that appears to show a genuine product even when the underlying goods are counterfeit - or may not exist at all.

GenAI can also support the creation of merchandise incorporating protected intellectual property. Automated image-generation and listing tools, combined with print-on-demand services, can allow infringers to produce and market merchandise featuring protected designs or other IP with relatively little upfront investment[3].

For brand owners operating across large e-commerce ecosystems, the commercial implication is significant: the volume of potentially infringing content can increase without a corresponding increase in the infringer’s cost or effort.

How deepfakes and voice cloning create a new impersonation threat

One of the more difficult emerging challenges is the use of AI-generated video and audio to impersonate trusted individuals. Deepfake technology can create convincing video or audio content depicting a person saying or doing something that never occurred. Voice-cloning technology can similarly reproduce recognisable voices from relatively small amounts of source material.

These techniques have already been observed in executive impersonation and payment-transfer scams[4], as well as identity theft of famous actors and actresses. The same capabilities can also be applied to counterfeit promotion and brand impersonation.

This is particularly relevant to brands that rely heavily on celebrity partnerships, influencers or high-profile executives. A synthetic video appearing to show an influencer endorsing a counterfeit product can potentially be distributed across social networks and messaging applications in seconds.

The resulting risk is not limited to lost sales. A convincing fake endorsement can also create reputational damage, consumer confusion and questions about the authenticity of the brand's legitimate marketing activity.

Why brand and marketing teams need to think beyond counterfeit takedowns

For businesses, the increasing sophistication of GenAI-enabled infringement reinforces the need to treat online brand protection as a strategic risk-management function rather than simply a reactive takedown exercise.

Monitoring remains important, but it is only one part of the response. Businesses should consider how their IP portfolio, online monitoring strategy, enforcement processes and evidence-gathering capabilities all work together. A strong IP portfolio can be particularly valuable because enforcement platforms and intermediaries commonly require rights holders to demonstrate ownership of the relevant rights before any action can be taken.

This means that IP protection and online enforcement have become closely connected. A well-structured portfolio can provide the legal foundation needed to respond quickly when infringing content appears, while proactive monitoring can help prevent unauthorised use from becoming widespread.

A robust IP portfolio provides the foundation for enforcement

Intellectual property encompasses a range of rights, including trademarks, copyright, patents and registered designs. The appropriate combination will depend on the business, its products, its markets and the nature of the risks it faces.

Trademarks are particularly important in brand-protection programmes because they identify the commercial origin of goods or services. They most commonly protect words, names and logos, but trademark protection can extend to other distinctive characteristics - including, in appropriate circumstances, colours, sounds and even smells.

For businesses operating internationally, the practical challenge is not simply having 'a trademark'. Protection needs to be considered across the relevant jurisdictions, goods and services and forms of brand expression. This becomes increasingly important as infringers move beyond straightforward copying of a logo or word mark and begin exploiting the wider identity of a brand, and its shopping experience.

Personal brands are becoming IP assets

The growing threat of deepfakes is also changing how high-profile individuals think about their personal brands. Celebrities, athletes and other public figures are increasingly exploring whether distinctive aspects of their identity can be protected through IP rights. Examples include registrations by Taylor Swift covering a range of marks associated with her stage name, album titles, lyrics and other aspects of her brand[5], as well as applications by footballer Cole Palmer relating to his name, nickname, signature, portrait and goal celebration[6,7,8,9].

Other prominent examples include registrations by footballers Jude Bellingham, Kylian Mbappé and Gareth Bale relating to their names and celebrations, and IP protection obtained by athlete Usain Bolt for his distinctive "lightning bolt" pose.

These developments illustrate a broader commercial trend: personal identity can itself become an important brand asset. For individuals with substantial commercial profiles, protecting that identity can support both enforcement against unauthorised exploitation and legitimate licensing opportunities.

The importance of a multi-layered protection strategy

These issues are particularly relevant in jurisdictions such as the UK, where there is no standalone statutory 'image right' providing comprehensive protection against commercial exploitation of an individual's likeness. Instead, protection may need to be constructed from a combination of rights and legal principles, including passing off, privacy, data protection, copyright and trademark law. Each has different requirements and limitations.

For example, copyright may protect a particular photograph or other creative work but does not necessarily provide protection for the individual depicted. Passing off can be useful in appropriate circumstances but has its own evidential requirements and limitations.

This makes a carefully constructed IP strategy particularly important where a business or individual faces a material risk of impersonation or unauthorised commercial exploitation.

What should businesses be doing to protect themselves?

GenAI is likely to continue increasing both the sophistication and volume of online infringement, enabling counterfeit networks to operate at a scale never possible before. Businesses should therefore consider whether their existing brand-protection programmes are designed for an environment in which convincing synthetic content can be generated at this scale and speed.

Key considerations include:

  • Auditing the IP portfolio: identify important brands, products, designs and other assets that may require additional protection.
  • Review territorial coverage: ensure protection exists in the jurisdictions where products are sold, manufactured, licensed or most frequently infringed.
  • Protect distinctive brand assets: consider whether non-traditional elements of the brand could and should be protected.
  • Expand monitoring beyond marketplaces: include social media, short-form video, websites, messaging channels and other relevant digital environments.
  • Prepare for AI-generated impersonation: establish processes for identifying and evidencing deepfakes, synthetic imagery and voice clones.
  • Strengthen evidence collection: ensure teams can demonstrate ownership of rights and preserve evidence in a form that supports rapid enforcement.
  • Coordinate legal and commercial teams: brand protection, IP, cybersecurity, fraud and communications teams increasingly need to work together rather than operating in isolation.
  • Prioritise by business impact: focus resources on infringements most likely to create financial, reputational or consumer-safety risks.

The strategic importance of IP is increasing

GenAI is not fundamentally changing the importance of IP rights; it is increasing the commercial value of having the right rights in place and being able to enforce them effectively.

For counterfeiters, GenAI provides a powerful toolkit for creating convincing content, scaling operations and reducing the cost of fraud. For brand owners, it raises the stakes around portfolio management, monitoring and enforcement.

The businesses best positioned to respond will be those that view IP protection as part of a broader digital risk strategy. A robust portfolio, combined with effective monitoring and rapid enforcement, provides a stronger foundation for protecting brand equity and reputation. This is especially true as the distinction between genuine and synthetic content becomes increasingly difficult to identify.

The central lesson is simply: as the tools available to infringers become more sophisticated, the strategic importance of owning, documenting and actively enforcing IP rights on an ongoing basis becomes much greater.

References

[1] https://www.genaiadoptiontracker.com/

[2] https://www.vectra.ai/topics/ai-scams

[3] https://www.ic3.gov/PSA/2024/PSA241203

[4] https://snapdragon-ip.com/black-friday-brand-protection-guide-resource/

[5] https://esquiretrademarks.com/how-many-trademarks-does-taylor-swift-have/

[6] https://www.youtube.com/shorts/jDzJ7QECUzo

[7] https://trademarks.ipo.gov.uk/ipo-tmcase/page/Results/1/UK00004129108

[8] https://www.lawinsport.com/topics/item/cold-palmer-trade-marks-image-rights-and-the-business-of-being-an-athlete

[9] https://www.taylorwessing.com/en/insights-and-events/insights/2026/01/bu-cole-palmers-trade-mark-strategy-are-faces-and-celebrations-registrable

This article was first published on 25 August 2026 at:

https://snapdragon-ip.com/the-top-generative-ai-tactics-used-by-counterfeiters-and-why-ip-matters/

Wednesday, 5 August 2026

A browse around the “.shop”s

This article explores the ecosystem of domains hosted on the .shop ('dot-shop') extension, which is popularly used for e-commerce websites. However, it has also been noted to be disproportionately utilised by bad actors in the construction of fraudulent sites.

The study considers those domains containing the names of any of the top ten global luxury brands, with a particular focus on trends and patterns in the set of hosting providers of the set of associated infringing websites. An understanding of these types of issues is key in determining appropriate enforcement strategies and also assessing whether takedown escalation routes or other website disruption techniques may be required. 

* * * * *

.shop ('dot-shop') is an example of an NgTLD (new generic top-level domain), or domain extension. It launched in 2016, with the intention of providing a 'dedicated space for e-commerce on the Internet'. However, like many of the new extensions, it has become popular with bad actors for use in the construction of infringing sites[1] - a consequence of low-cost, open availability registrations, and (in this specific case) the obvious association with e-commerce, which lends it to the association with issues such as the sale of counterfeit goods. .shop in particular has been observed to have a high rate of utilisation by infringers, and has been found commonly to have been featured in domain dispute cases[2,3]

Anecdotal evidence from the Commercial and Analyst teams at SnapDragon suggests that .shop domains are disproportionately commonly hosted by particular service providers - such as Beijing Ruihao Kai Yuan Technology Co., part of the network of entities under the management by Georgia-based ISP Malakmadze Web LLC - which tend to have a low compliance to enforcement requests when infringing sites are identified and reported. 

As an exploration of the relevant landscape, SnapDragon has carried out a simple study looking at the set of registered .shop domains with names containing any of the top ten global luxury brands[4]. Analysis of the luxury goods industry in particular can offer valuable insights into the general landscape of infringing e-commerce activity, because of the popularity and relatively high price-point of official goods, and the resulting potential for infringers to attempt to monetise this popularity through the sale of goods associated with infringement of the IP rights of these brands. 

Table 1 shows the total numbers of registered .shop domains with names containing each of the brands in question, noting that - because of the generic nature of the 'Coach' brand name specifically - the data has undergone a first stage of filtering in which the domain names were excluded where any other term appears before 'coach' in the name, or where the term 'coaching' appears explicitly, as a way of focusing the results on those most likely to be referencing the brand specifically. Even then, the data (particularly for the Coach brand) will still include some non-relevant 'false positives' (e.g. in that case, those websites relating to coaching as a service offering); in a live client service, the presence of these non-relevant results would require an additional level of proactive filtering to retain only those examples relating to the brand and/or relevant content.

Brand term
                           
No. domains
                           
  cartier 14
  chanel 220
  coach 577
  dior 334
  gucci 348
  hermes 277
  laurent 101
  rolex 513
  tiffany 138
  vuitton 23

Table 1: Numbers of registered .shop domains containing the names of each of the top ten global luxury brands (excluding clearly non-relevant cases for 'coach') 

The subsequent phase of analysis involved the use of simple automated scripts to inspect the content of any associated live website (if present), and to extract domain configuration information - with a specific focus on the host IP address and the associated web-hosting provider. A next round of filtering was also carried out to exclude (where this information was clear from the analysis carried out) any domains which are officially owned by the brand in question, or any formerly infringing sites which have been taken down and reclaimed by the brand. 

Of the remaining (1,871) domains, 756 (i.e. 40%) were found to return some sort of live website response (technically, an HTTP status code of '200'), with the remainder (1,115) existing in some sort of 'dormant' state (potentially with the intention of being activated at a later date). However, even amongst this set, 252 (23%) were found to have active MX (mail exchange) records, indicating that they have been configured to be able to send and receive e-mails, and could therefore potentially be associated with active e-mail based campaigns. 

From the set of live websites, we then focused on those for which an explicit website title had been configured, and then identified the subset of those with websites which were actively infringing the brand name in question - in most cases, through the sale of physical goods - rather than: (a) referencing the name in some other way (e.g. as a personal name, which is commonly the case for 'Chanel', for example); (b) featuring the brand as a sub-string in an unrelated term (e.g. examples such as 'cardiorelief', which contains 'dior' within it); or (c) where the website features lower-threat content such as a placeholder page (though even in these cases, it is common for the sites to be monetised through the inclusion of pay-per-click links). This analysis thereby also explicitly excludes consideration of other types of infringement, such as traffic misdirection - such as a range of identified domains with names of the form 'hermesNNNLL' (N = number, L = letter), which were found to resolve to online gambling sites. 

On this basis, the above analysis identified a set of 21 of the highest-risk domains, serving as a representative subset of the landscape of .shop domains which are actively being used for websites infringing the brand in question. Screenshots of examples of these are shown in Figure 1.

Figure 1: Examples of live e-commerce websites on .shop domains infringing any of the top ten global luxury brands 

The distribution of website hosting providers represented within this set of 21 high-risk .shop domains is shown in Table 2. Whilst the appearance of some of the mainstream hosting providers (such as Amazon, Hostinger and Shopify) in the list is unsurprising given the large numbers of domains under their infrastructure generally, the inclusion of some of the other entities - especially those which are much smaller operators - may provide an indication in some cases that these providers might be disproportionately commonly associated with infringing activity. It is particularly noteworthy that Beijing Ruihao Kai Yuan Technology Co., the entity which initially prompted the investigation, appears in five of the 21 cases (24%).  

Hosting provider
                                                                                 
No. domains
                            
  Beijing Ruihao Kai Yuan Technology Co. 5
  Amazon.com, Inc. / Amazon Technologies Inc. 4
  Hostinger International Ltd. / Hostinger US 4
  Shopify, Inc. 3
  Framer B.V. 1
  Tilda Publishing NOC 1
  Cogent Communications, LLC 1
  UltaHost Inc 1
  SAKURA Internet Inc. 1

Table 2: Distribution of website hosting providers within the set of 21 .shop domains actively being used for websites infringing the brand in question.

An understanding of these types of landscape issues can be key in constructing an effective enforcement strategy for dealing with infringements. Particularly in cases where the associated domain registrar (i.e. the company through which the domain name in question was originally registered) is also non-compliant - with certain registrars having a policy of denying responsibility for website content - it is important to have escalation routes available.

It is worth noting that GMO Registry, the organisation which manages the .shop extension, has published an acceptable use policy which explicitly prohibits 'trademark or copyright infringement, [or] fraudulent or deceptive practices' and references website suspension as one possible consequence of violations[5]. However, in cases where initial takedown efforts are unsuccessful, it is often worth exploring other simultaneous approaches to disrupt the activity of the websites in question, such as search-engine delistings and payment-gateway suspensions. 

References

[1] https://circleid.com/posts/towards-a-generalised-threat-scoring-framework-for-prioritising-results-from-brand-monitoring-programmes

[2] https://www.nelsonmullins.com/insights/blogs/nmwatch-tm/all/cybersquatting-in-the-shop-gtld-a-growing-concern

[3] https://www.domainskate.com/blog/shop-domain-names-becoming-favorite-for-phishing-scams-and-fake-sites/

[4] https://www.kantar.com/campaigns/brandz/global

[5] https://get.shop/volumes/files/shop-abuse_policy.pdf

This article was first published on 30 July 2026 at:

https://snapdragon-ip.com/a-browse-around-the-shops/

The top generative AI tactics used by counterfeiters and why IP matters

by David Barnett and Jane Jarosz GenAI is changing the economics of online infringement We have seen how the digital era has enhanced a mult...