Free Cease-and-Desist Letter Template for Fake Website Takedowns

A cease-and-desist letter for a fake website should identify the brand's trademark rights, describe the infringing site specifically with a URL and date of observation, state clearly what needs to stop, and set a firm but reasonable deadline for compliance before further legal or platform-level action follows. Below is a practical template brands and legal teams can adapt, along with guidance on when sending one makes sense and what to do if it is ignored.

When a Cease-and-Desist Letter Is the Right Tool

A cease-and-desist letter works best when there is an identifiable party behind the infringing site, whether through domain registration information, a hosting provider that will forward correspondence, or contact details listed on the site itself. It is less useful against anonymous operators using privacy-protected domain registrations and offshore hosting with no responsive contact channel, since there is no one positioned to receive or act on the letter. In those cases, a direct takedown request to the hosting provider, domain registrar, or payment processor is typically faster and more effective than pursuing a cease-and-desist first.

The Template

Below is a structure that can be adapted to a specific situation. Legal counsel should review before sending, since specific language may need adjustment based on jurisdiction and the nature of the infringement.

[Brand Legal Letterhead or Company Name]

[Date]

To: [Registrant name if known, or "Operator of [domain]"]

Re: Cease and Desist – Unauthorized Use of [Brand Name] Trademark and Brand Identity

This letter concerns the website located at [URL], which we identified on [date] as using the [Brand Name] trademark, logo, and/or brand identity without authorization.

[Brand Name] is the owner of the registered trademark [trademark registration number, if applicable] and has not licensed, authorized, or otherwise permitted the operator of [URL] to use its name, logo, product imagery, or brand identity in any capacity.

The website in question [describe the infringing activity specifically: e.g., "sells products falsely represented as genuine [Brand Name] merchandise," "impersonates [Brand Name]'s official website," "solicits customer login credentials while falsely presenting as [Brand Name]'s account portal"].

We demand that you immediately:

1. Cease all use of [Brand Name]'s trademark, logo, and brand identity on the website and any associated content.

2. Remove the website at [URL] or take it offline entirely.

3. Cease any further registration or use of domains incorporating [Brand Name]'s trademark or confusingly similar variations.

Please confirm compliance in writing within [X] business days of this letter. Failure to comply may result in further action, including but not limited to formal complaints to your hosting provider, domain registrar, and payment processor, as well as potential legal action to protect [Brand Name]'s trademark rights.

This letter is sent without prejudice to any other rights or remedies available to [Brand Name], all of which are expressly reserved.

[Signature]

[Name, Title]

[Brand Name]

[Contact Information]

What to Include as Supporting Evidence

Attach or reference screenshots of the infringing site dated at the time of observation, since the site content may change or disappear after the letter is sent. Include the specific URL and, where available, the domain registration date. If the site is selling counterfeit product, note any test purchase results confirming the product is not genuine. If the site is phishing for credentials, document the specific request being made, such as a login form mimicking the brand's real account portal.

What to Do If the Letter Is Ignored

A cease-and-desist letter has no independent enforcement power if the recipient does not respond, which is common with operators running fraudulent sites deliberately. If the deadline passes without compliance or a response, the next steps are typically a formal complaint to the domain registrar citing trademark infringement, a report to the hosting provider's abuse contact, and where payment is involved, a fraud report to the payment processor. In cases involving significant financial harm or a repeat pattern from the same operator, escalation to litigation or involvement of law enforcement becomes reasonable, particularly for cases crossing into consumer fraud rather than simple trademark infringement.

Why This Should Be One Tool Among Several, Not the Only One

Sending a cease-and-desist letter and waiting for a response before pursuing other action can cost valuable time against a fake website that is actively harming customers. For sites with a responsive registrant or where legal weight is likely to matter, this letter is a useful first step. For sites already showing clear signs of fraud with no identifiable responsible party, running the registrar, hosting, and payment processor takedown paths in parallel, rather than waiting on a letter first, is usually the faster route to getting the site down. Before deciding which path applies, brands can run a quick diagnostic to confirm whether the site in question is a fake or a legitimate reseller.

Remove.tech's enforcement process handles this kind of prioritization automatically, filing takedown requests through the appropriate channel, whether registrar, host, or platform, as soon as a violation is confirmed, rather than waiting through a sequential legal correspondence process for sites that show clear signs of not being legitimate businesses that would respond to one. Brands dealing with a suspected fake site of their own, or wanting to know how many exist right now, can request a free brand audit to see the full picture before drafting a single letter. For what to do the moment a fake site using the brand's name is discovered, this guide covers the full process.

FAQ

Does a cease-and-desist letter need to be sent by a lawyer to be effective?

It carries more weight when sent on law firm letterhead or reviewed by counsel before sending, but a well-documented letter from the brand directly can still be effective, particularly against operators who respond to any indication that legal consequences are possible. For cases likely to escalate, involving counsel from the start is worth the cost.

How long should the compliance deadline be?

Five to ten business days is typical and gives a legitimate recipient reasonable time to respond while still creating urgency. Shorter deadlines can be used for cases involving active financial harm to customers, such as an ongoing phishing scam.

Is it necessary to have a registered trademark before sending this letter?

A registered trademark strengthens the letter's legal weight significantly, but common law trademark rights, based on established use of a brand name, can also support a cease-and-desist claim in many jurisdictions. Legal counsel should confirm the specific standing available before the letter is sent.

Should this letter be sent to the domain registrant, the hosting provider, or both?

Both, when contact information is available for each. The registrant is the direct party responsible for the infringement, while the hosting provider can independently remove the content under its own terms of service even without the registrant's cooperation.

A cease-and-desist letter works best as one tool in a coordinated response, not a standalone fix. For sites with an identifiable, potentially responsive operator, it creates a documented legal record and a real chance of voluntary compliance. For sites showing clear signs of fraud with no responsive party behind them, moving directly to registrar, hosting, and payment processor takedowns in parallel is usually the faster path to getting the site down.

‍