Case Study: “Domain Registration Auditing Department” Email Impersonation Scam Targeting Artists

Summary
An unsolicited email impersonating a Chinese domain registration auditing department claimed a third-party company was attempting to register an artist’s brand name as Asian top-level domains. The message used urgency and official-sounding language to pressure the recipient into responding, with the apparent goal of selling overpriced or fraudulent domain registrations and extracting personal or business information.

Scam Type
Impersonation / Domain Registration Scam (Fake Brand Protection / Domain Squatting Scare)

Incident Description
An artist received an unsolicited email from an individual identifying himself as Charles He of the “auditing department of a professional domain name registration and dispute solution organization in China.” The email stated that a company called “Replaed Ltd” had applied to register the artist’s brand name (redacted in the submitted example) as a brand name and as various Asian country-code top-level domains. The sender requested confirmation of whether the artist had authorized the registration, implying that failure to respond quickly could result in the domains being registered by the other party.

Evidence / Excerpts
Exact text of the email received (as submitted):

Dear CEO,
This is a formal email. We are the auditing department of a professional domain name registration and dispute solution organization in China. Here I have something to confirm with you. Today we formally received an application that a company claimed “Replaed Ltd” were applying to register “XXX” [name redacted for confidentiality] as their Brand Name and some “XXX” Asian countries top-level domain names through our firm. Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we would finish the registration at once. If you did not authorize, please let us know as soon as possible. Thank you!
Best Regards, Charles He Tel:+86.551-65331804

No screenshots or additional attachments were provided.

Red Flags

Claim of an “auditing department” that does not exist at legitimate domain registrars.
Unsolicited warning about a third party registering the recipient’s brand name.
Pressure to “confirm authorization” immediately.
Reference to Asian country-code top-level domains commonly used in fraudulent upsell schemes.
Generic sign-off and unverifiable telephone number.
Mass-sent template language with placeholder company names.

Scammer Method & Tactics
The scammer impersonates a bureaucratic Chinese domain-registration authority and fabricates an urgent trademark/domain conflict. Once the recipient replies, the scammer typically attempts to sell overpriced or nonexistent domain registrations, collect personal or business information, initiate prolonged “urgent” negotiations, or demand “processing” or “protection” fees. The approach relies on fear of brand-name loss, manufactured urgency, and the assumption that independent artists lack dedicated IT or legal support.

Risk Level
High

Recommended Action for Authors

Ignore and delete the email.
Do not reply, click any links, or call the provided number.
Do not purchase domains or pay any fees in response to unsolicited contacts.
If brand protection is genuinely needed, register only the domains actually required through reputable registrars (Namecheap, Google Domains, Hover, etc.). Asian country-code domains are unnecessary unless the author actively conducts business in those markets.
Forward similar messages to AuthorsAgainstScammers.org for documentation.

Status
Active

Source: https://authorsagainstscammers.org/2026/07/05/domain-registration-auditing-department-email-targeting-artists/

Forensic Scam Profile

Scam Confidence

95–99% likelihood. The email contains multiple hallmarks of a known Asian domain‑registration scam, including a fabricated “auditing department,” unverifiable sender identity, urgency language, and claims that another company is registering the victim’s brand name. These patterns match long‑documented domain‑upsell fraud schemes targeting small businesses and creators.

Threat Type

Domain Registration Scam / Business Impersonation Fraud. This scam impersonates a foreign domain registrar to pressure artists and small businesses into purchasing unnecessary or fake domain names under the guise of “brand protection.”

Target Audience

Independent artists, small business owners, creators, freelancers, and sole proprietors. Scammers target individuals who may not have IT departments and who are emotionally invested in protecting their brand identity.

Key Red Flags

Fake “auditing department” claim. 2. Unsolicited warning about another company registering your brand. 3. Urgent request to “confirm authorization.” 4. Generic sign‑off with unverifiable phone number. 5. No legitimate domain registrar contacts brands for permission. 6. Pressure to act quickly to avoid “losing your brand.”

Recommended Actions

Related Scams

• Asian Domain Name Scam — documented by the FTC as a long‑running upsell fraud targeting small businesses. • Business Email Impersonation Scams — IC3 reports frequent use of fake corporate departments to solicit payments. • Trademark Protection Scams — scammers claim your brand is being registered elsewhere to sell fake protection services. • International Domain Registration Fraud — consumer alerts warn of fake registrars offering “urgent” domain purchases.

Sender Details

Sender: “Charles He”

Additional Context

The scam attempts to exploit fear by suggesting another company (“Replaed Ltd”) is registering the victim’s brand name (“rachel-art”) across Asian top‑level domains. This tactic pressures creators into purchasing unnecessary domain protections at inflated prices. No legitimate registrar requires brand‑owner authorization for domain registration.

Book/Product Targeted

Reported Losses

Geographic Focus

Global, with heavy targeting of North American, UK, and Australian artists and small businesses. Most scam operations originate from China‑based or China‑themed fraudulent registrars.

Footnotes / Sources

• FTC Consumer Alerts – Domain Name Scams • IC3 (FBI) – Business Email Compromise & impersonation fraud reports • BBB Scam Tracker – International domain registration complaints • Wayback Machine – Archived examples of Asian domain registration scam templates • News: The Guardian & Wired coverage on domain upsell fraud patterns

Rae Stonehouse

Website | + posts

Rae Stonehouse is a Canadian author, publisher, and advocate committed to exposing publishing scams and supporting writers through education and community. As the creator of Authors Against Scammers, Rae provides clear, practical guidance to help writers protect their work, their money, and their peace of mind. His books and resources reflect a lifelong dedication to empowering others through knowledge, clarity, and real‑world experience.