LegalBrandGuard
Scan

How long does it take to get a fake site taken down

Updated on August 23, 2026 · LegalBrandGuard · 5 min read

Quick answer

Between 48 hours and several weeks — and it isn’t the severity of your case that decides this, it’s the domain’s registrar. On the CIMALP case, the suspension happened less than 48 hours after the notice. Other registrars take several weeks, and some never respond. None of the official reporting mechanisms shut the site down: only the operator holding or hosting the domain can make that happen.

How long, depending on the route taken

Four routes exist, and they don’t produce the same result. Confusing them is the most costly mistake when you discover a copy of your storefront: you believe you’ve acted while the fake site is still taking payments.

Timeframes and outcomes of the routes for taking down a fake site
RouteWhat it producesTimeframe
Notice to the registrarThe domain stops resolving: the site becomes unreachable everywhere, at once.From 48 h to several weeks, or never
Notice to the host (DSA Article 16)The content is removed, but the domain survives and can be rehosted elsewhere.Not timed: the DSA requires diligent handling without setting a duration
UDRPThe domain is transferred to you and stops causing harm for good.About three months
Reports and delistingAccess is discouraged or the address disappears from a search engine — the site stays online.No effect on shutdown — browser blocking within 24 to 72 h

That last row is the one read the least often, and it’s the most important. Public reporting mechanisms are useful, free, and worth using. But none of them has the power to shut a site down.

What decides the timeframe: the registrar

A solid case file speeds up nothing if it lands with an operator who doesn’t read their abuse inbox. Conversely, a serious registrar processes a well-documented notice within a few days. The gap between the two runs to weeks, sometimes months — and it has nothing to do with you.

What actually speeds things up

  • Identifying the right recipient before writing. A notice sent to a guessed address produces nothing, and wastes the days during which the fake site is still collecting payments. How to identify the registrar and its abuse contact.
  • Providing proof of title, not just claiming it. The trademark registration number, the certificate, and a timestamped capture of the infringing site. An operator who has to verify your claims themselves handles your request last.
  • Notifying the registrar and the host in parallel. These are two separate entities, with two separate obligations. Waiting for one to respond before contacting the other mechanically doubles the delay.

What speeds up nothing at all

Following up daily, writing in capital letters, citing a quantified loss, or threatening legal action in a first letter: none of this changes how the case is handled, and a heavy-handed tone sometimes pushes the file to a legal department, where it will wait even longer.

The official mechanisms: what they do, what they don’t do

Four public mechanisms come up systematically in the advice given to e-commerce merchants. They deserve to be used — each has its own value — provided you know what to actually expect from them.

Phishing Initiative — blocking access in browsers

Reporting an address gets it added to the block lists used by browsers. Customers who click then see a warning screen instead of the fake storefront. We see an effect within 24 to 72 hours — well before the domain suspension itself, which takes at least 48 hours and sometimes several weeks. The site isn’t shut down, though: it stays online, and remains reachable to anyone who bypasses the warning. It’s the most useful measure while the takedown is under way, because it cuts off traffic first.

Pharos — reaching the investigative services

The French Ministry of the Interior’s reporting platform forwards illegal content to the relevant services, who decide what follows. No removal timeframe is attached, and no shutdown results directly from it. The report documents the facts with the authorities: that’s its function, and it matters if the case takes on a criminal dimension.

Google delisting — reducing exposure

A request based on a rights infringement removes the address from Google’s results. The site keeps running: it stays reachable by its direct address, through a paid ad, through a message, or on another search engine. Yet a fake storefront rarely catches its victims through organic search — it catches them through advertising and social media. Useful, then, but far from sufficient.

Cybermalveillance.gouv.fr — getting oriented

France’s national assistance service publishes a quick-reference guide on professional site impersonation and points toward the appropriate steps. It doesn’t intervene with operators and doesn’t run any takedown procedure on your behalf.

What these four mechanisms have in common: they inform, discourage access, or record a complaint. Shutdown, on the other hand, happens elsewhere — with the operator holding the domain.

Verifying that a site is actually shut down

A site that no longer shows up for you isn’t necessarily shut down: a cache, a local block, or a browser warning all produce the same apparent effect. Two checks settle it.

  • The domain’s status at the registry. A WHOIS or RDAP lookup shows the status: clientHold or serverHold means the domain no longer resolves. It’s a public, verifiable fact you can check for yourself, without having to take our word for it.
  • DNS resolution. A suspended domain no longer returns any IP address. If an address still responds, the site is reachable, whatever your browser shows.

A suspension isn’t final: the holder can contest it, and an organized network will reopen elsewhere under another name. Shutdown protects the customers who would have come across that particular domain; it doesn’t end the phenomenon.

Frequently asked questions

How long does it take to get a fake site taken down?+
From 48 hours to a few weeks when the registrar processes its abuse inbox, and never when it doesn't. The delay depends neither on how severe the harm is nor on how solid the case file is: it depends on which operator the notice is sent to. That's why we identify the registrar before writing, not the other way round.
Does reporting the site to Pharos get it taken down?+
No. Pharos is a French platform for reporting illegal content: the report is forwarded to investigative services, who decide what happens next. It's not a takedown procedure, and no removal timeframe is attached to it. The report is still useful — it documents the facts with the authorities — but it does not make the site stop operating.
Does a Google delisting make the fake site disappear?+
No. Delisting removes the address from Google's search results: the site stays online and remains reachable by its direct address, through a paid ad, through a message, or on another search engine. Yet your customers rarely reach a fake storefront through organic search. It reduces exposure — it does not shut the site down.
Why do some registrars never respond?+
Because nothing legally forces them to respond within a set deadline. The obligations that apply to them cover publishing and making an abuse contact reachable, not a response time. A registrar whose business model runs on volume and anonymity has no operational incentive to process reports, and field experience confirms it.
Do we get the domain back once the site is closed?+
No. A suspension takes the domain out of service, it does not transfer it: it stays registered to its holder. Getting the transfer requires a separate procedure, UDRP, which is longer and follows a different logic.
What happens if the site isn't taken down within the timeframe?+
A case costs €99 excl. tax, refunded in full if the site is not taken down within 30 days. We would rather refund a lost case than promise a deadline that the operator on the other end owes us nothing on.

Check your own brand

We identify the registrar, produce the notice, and drive follow-ups through to shutdown — €99 excl. tax per case, refunded if the site isn’t taken down within 30 days.

Scan my site for free

Sources

See also: the takedown process, step by step and takedown or UDRP: which to choose.

← Getting a fake site taken down