Brand impersonation is the unauthorized use of a company name, logo, domain style, or messaging to deceive users into trusting a malicious asset.

Attackers use brand impersonation to steal credentials, redirect payments, distribute malware, or damage trust by appearing to represent a legitimate business.