The Federal Trade Commission has a new warning for car shoppers, but small businesses should read it as a website security story.
On Sept. 1, the FTC said scammers are setting up bogus car dealership websites to trick shoppers into paying upfront for vehicles that do not exist. The agency says some scammers clone real dealership websites, copying logos, vehicle listings, photos, and even fake testimonials. The FTC also says AI is making that cloning easier. FTC consumer alert
That matters beyond auto retail because the attack does not depend on a weak password, a breached server, or a hacked account. It depends on something simpler: a scammer can make a fake version of a real business look convincing enough for a rushed customer.
For owners, the risk is not only that a customer loses money. It is that the customer may blame the real business first.
The Scam Uses Your Trust
The FTC describes a pattern that should feel familiar to anyone who sells high-ticket goods online. A fake site uses a real dealer's name and branding. It lists hard-to-find cars, explains the buying process in detail, offers flexible return policies, and asks the buyer to pay before seeing the vehicle.
That is social engineering dressed up as ecommerce.
The customer is not necessarily falling for a sloppy fake. They may see the right logo, familiar photos, polished copy, and a checkout process that feels normal. If the impersonator bought a similar domain name, ran search ads, or posted listings in marketplace groups, the fake can look close enough in the moment.
This is why AI matters in the alert. A scammer no longer needs to manually rebuild every page, rewrite every vehicle description, or produce credible customer language from scratch. The tools that help legitimate businesses move faster can also help criminals make more believable copies.
What Owners Should Check This Week
The useful move is not panic. It is search hygiene.
Start by searching your business name with words like "sale," "payment," "deposit," "complaint," "review," and "scam." Then search for your most valuable product names, your phone number, and your address. If you are in a category where customers pay deposits before delivery, do the same for common misspellings of your domain.
Auto dealers should do this immediately, but the same logic applies to:
- equipment dealers
- specialty retailers
- home improvement contractors
- event venues
- appliance sellers
- used goods marketplaces
- repair shops that collect deposits
If customers routinely pay before receiving the product or service, your name has value to a scammer.
Make The Real Site Easier To Verify
The FTC's advice to shoppers is to verify the dealership, ask to see the car in person, use a mobile inspection service if distance is an issue, and walk away if the seller insists on upfront payment by wire transfer only.
Owners can turn that into a practical trust checklist.
Put your payment policy in plain language on your site. List the exact domain customers should use. Make your phone number and physical address easy to confirm. If you take deposits, explain which payment methods you accept and which ones you never request. If you sell through third-party marketplaces, link to the official listings from your own site.
That does two things. It helps real customers verify you. It also gives your team a clean page to send when someone asks, "Is this really you?"
Have A Response Ready
If a customer reports an impostor site, do not improvise from scratch.
Save screenshots. Record the domain. Report the site to the registrar, hosting provider, search engine, marketplace, and the FTC at ReportFraud.ftc.gov. If the fake site is using your trademarks, logos, or copyrighted images, include that in the takedown request.
Then warn customers through the channels they already trust: your website, Google Business Profile, email list, and social accounts. Keep the message specific. Name the fake domain if your counsel is comfortable with that. Tell customers how to verify the real business and which payment methods you never use.
The worst response is silence, because silence lets the fake keep borrowing your credibility.
The Owner Takeaway
The FTC's car dealer alert is really a storefront impersonation warning. If your business has a recognized name, searchable inventory, visible photos, and customers who can be pressured into a deposit, scammers can clone enough of your public presence to create damage.
Spend 20 minutes this week looking for fake versions of your business. Then make your real site easier to verify. That small check is cheaper than learning about an impostor from an angry customer who thinks they paid you.