CAPE GIRARDEAU, MO (BBB) -- The manager for a large commercial builder recently called her IT support with serious concerns.ĚýOne of their clients received an email that at first looked like it came from her work email account, asking for payment on completed work, but it didn’t originate from her office.
The email address included her name, and the business domain was only one letter off. The sender asked for a wire transfer of payment for labor and materials on a large project costing almost a million dollars, and the recipient almost paid.ĚýThis manager’s company has fallen victim to typosquatting, and they’re not alone.
What is Typosquatting?
Cybersquatting is when someone buys a domain name so they can pretend to be another entity or business.ĚýTyposquatting is a form of cybersquatting and occurs when someone buys the misspelling of a domain name to get online traffic from those mistakes.ĚýIt’s also sometimes called URL hijacking.
A domain name is an entity’s web address, which people type in the navigation bar to visit their website. It might look like , , or . Email addresses typically follow a formula similar to [email protected], [email protected], or [email protected].
Why Bad Actors Bother
When users mistype or “fat finger� in the wrong address, they may be taken to a fraudulent website that looks similar to the one they intended to visit. The website owners can use this deception to steal identity information, sell products, or misinform.
They can also send emails from the misspelled domain name to try and trick the recipient into thinking it came from someone inside the company being mimicked. Recipients might think they’re dealing with a trusted source when they’re really interacting with someone whose whole intent is to deceive.ĚýBad actors use typosquatting for purposes like these:
- Making a quick buckĚýâ€� Sometimes the person who registers the misspelled domain hopes they’ll be able to sell the variation to the original company for more than they paid.
- Selling goods or servicesĚýâ€� People might check out, thinking they’ll receive merchandise from their favorite brand, and either never receive it or get an inferior knockoff.
- Installing malwareĚýâ€� Sometimes when users visit a fake website, they end up downloading malware to their computer.
- Getting clicks or viewsĚýâ€� Users may type in the wrong URL and find themselves looking at a page full of ads or articles. If they’re lured into clicking on the ads, the domain owner might earn revenue.
- Stealing sensitive informationĚýâ€� Users might think they’re logging in to their bank account, social media account, or online shopping account when they’re really supplying their username and password to cybercriminals.
- Protecting legitimate website trafficĚýâ€� Some companies buy variations of their domain name to make sure typosquatting can’t hurt them. They redirect traffic from those domain names to the legitimate business website.
- Attempt at making jokes or sullying a reputationĚýâ€� Users end up navigating to a website that makes fun of or contains an attempt at humor related to the intended organization.
Forms of Typosquatting
Cybercriminals try to stick as close as possible to the original domain name with only slight variations so users will overlook the mistake. URL hijackers often register domain names with the most common typos or misspellings. They might also change the domain suffix, hoping the user will choose to visit yourtown.comĚýinstead of yourtown.govĚýwhen trying to pay a utility bill or traffic ticket.
Another trick is to add an “s” to the domain name. For example, when becomes , the user might not even notice the difference.
How to Protect Yourself
- Typosquatting takes advantage of people who get in a hurry and don’t pay attention.
- The best way to avoid mistakes is to do the opposite. After typing in a web address and before hitting “Enter,� double-check the spelling. Once the online destination shows up on the screen, look for the padlock symbol and the website address includes HTTPS://.
- Business owners - register common alternate spellings for your domain, including variations with plurals and hyphens. If you own all the similar domains, cybercriminals can’t use them against you. It’s also a good idea to monitor website traffic. A sudden drop-off might indicate visitors are being diverted to a fake site through typosquatting.
- Report suspicious websites to theĚý. In Canada, see theĚý.
BBB offers resources to help people know who they can trust onĚý. Review BBB ratings, customer reviews, and links that go directly to the business website.
Typosquatting and the Law
TheĚýĚý(ACPA) was enacted in 1999 to make it illegal to register Internet domains that are similar to an existing business or personal name with the intent to misuse them. Cybersquatting and typosquatting are illegal, and ACPA requires URL owners to prove they’re acting in good faith.
If you find someone has registered a variation that could be used to impersonate you, notify partners, customers, employees, and anyone else who might be deceived so they can be on the lookout. Consider submitting a petition to theĚýĚýto gain ownership of a domain that is “identical or confusingly similarâ€� to yours if you can show the domain registrar is acting in bad faith.
