1 October, 2026

Addressing Trademark Impersonation and Fraudulent Shop Tactics in carrefourshop.top

UDRP Cases

Carrefour SA successfully initiated a UDRP action against 郭玉辉 to recover the domain carrefourshop.top. The panel ordered the transfer of the domain after finding it was used for impersonation and phishing activities targeting consumers.

Case Snapshot

Case Number D2026-3688
Complainant Carrefour SA
Respondent 郭玉辉 (Yu Hui Guo)
Disputed Domain
carrefourshop.top
Threat Tactic Corporate Impersonation
Decision Date 2026-09-24
Panelist Sebastian M.W. Hughes
OutcomeTransfer
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-3688
UDRP Legal Assistance

Facing Unauthorized Domain Registrations or Brand Abuse?

Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.

Request Case Evaluation

Operational Risks of Brand Impersonation and Data Harvesting

The registration and active use of ‘carrefourshop.top’ present a multi-faceted business threat characterized by high-fidelity corporate impersonation. By prominently displaying the CARREFOUR trademark and official logo on a site purportedly selling household goods, the respondent orchestrated a deceptive environment designed to erode consumer trust. This tactic explicitly leverages the complainant’s long-standing reputation since 1968 to create a false impression of legitimate commercial affiliation. Beyond the immediate risk of brand dilution, the site functioned as a conduit for malicious activity by inducing visitors to input personal mobile telephone numbers, which were subsequently directed to a third-party Telegram account. This mechanism suggests a sophisticated attempt to harvest consumer contact data, likely serving as a precursor to targeted phishing campaigns, financial fraud, or social engineering attacks against the complainant’s customer base.

The severity of this threat is compounded by clear evidence of recidivism, as the respondent was previously implicated in WIPO Case No. D2026-1683. The respondent’s demonstrated willingness to engage in repeat infringing activity highlights a persistent threat profile that necessitates proactive monitoring and enforcement strategies. Given the respondent’s history of deploying ‘fake shop’ tactics, brand owners must consider these domain registrations not as isolated incidents but as indicators of evolving, serial malicious activity. The use of multi-lingual, brand-compliant websites serves to lower the barrier for victim interaction, thereby maximizing the potential for damage to the complainant’s customer trust while operating under the guise of an authentic retail storefront.

Strategic Efficacy: Leveraging Repeat Infringement and Procedural Efficiency

The Complainant’s strategy effectively leveraged the Respondent’s history of bad faith conduct, specifically by referencing a prior UDRP proceeding (WIPO Case No. D2026-1683) against the same individual. By documenting this pattern of recidivism, the Complainant reinforced the argument that the registration and use of ‘carrefourshop.top’ were not isolated incidents but part of a calculated effort to impersonate the CARREFOUR brand. The inclusion of visual evidence, such as the unauthorized use of the CARREFOUR logo on the website, provided clear proof of the Respondent’s intent to deceive consumers and create a false impression of affiliation, which proved essential for meeting the bad faith threshold under the Policy.

Procedurally, the Complainant secured a favorable outcome by successfully navigating the language of proceeding requirements. Although the underlying registration agreement was in Chinese, the Complainant’s proactive filing of an amended complaint in English, followed by the Respondent’s failure to contest the language change, allowed the Panel to conduct the proceedings in English. This tactical handling minimized delays and ensured that the Panel could directly address the complex fraud indicators, such as the site’s solicitation of mobile numbers for external Telegram communication. By establishing these procedural and evidentiary foundations early, the Complainant demonstrated the necessary alignment between the respondent’s technical bad faith and the specific risks of consumer data harvesting.

Practical Recommendations

  • Prioritize proactive monitoring of new .top and .shop registrations containing your primary trademarks to identify and initiate UDRP actions before fraudulent sites scale.
  • Submit evidence of prior adverse findings against the same respondent in previous UDRP cases to bolster arguments of a pattern of bad faith and streamline the Panel’s decision-making.
  • When facing cross-border disputes, include a specific request for English-language proceedings at the initial filing, supported by evidence that the respondent uses English-language content on their fraudulent site.
  • Document and capture screenshots of specific ‘phishing’ tactics, such as requests for Telegram contacts or mobile numbers, as this visual evidence of fraud is critical for proving bad faith use under the UDRP.
  • Implement an automated alert system for brand-specific keywords across global domain registration databases to reduce response time in securing infringing domains.

Frequently Asked Questions (FAQ)

Why was the domain carrefourshop.top considered confusingly similar to the complainant’s trademark?

The panel determined that the domain name is confusingly similar to the CARREFOUR trademark because it incorporates the complainant’s long-standing mark in its entirety, which is sufficient to satisfy the UDRP standing threshold.

What evidence proved that the respondent lacked legitimate rights or interests in the domain?

The respondent failed to provide any evidence of rights or legitimate interests. Furthermore, the panel found the respondent used the domain to impersonate Carrefour SA by prominently displaying the company’s logo and branding on a fake retail website, which inherently negates any claim to a legitimate interest.

How did the panel establish that the domain was registered and used in bad faith?

Bad faith was evidenced by the respondent’s use of the domain to host a fraudulent ‘fake shop’ that misled consumers into providing phone numbers for Telegram-based contact, likely to facilitate phishing. This, combined with the respondent’s history as a serial respondent in previous WIPO domain disputes, confirmed intent to impersonate the brand for illicit gain.

What was the practical outcome for this specific UDRP proceeding?

The panel ordered the immediate transfer of the disputed domain, carrefourshop.top, to Carrefour SA, successfully mitigating the ongoing risk of consumer data harvesting and brand damage caused by the impersonation site.

Is your brand being impersonated to harvest customer data?

Protect your customers from deceptive sites mimicking your brand identity to facilitate phishing or fraud. Our legal experts can assist in assessing your eligibility for a UDRP transfer to reclaim control of your digital assets.

Assess impersonation threat

Get Expert UDRP & Domain Dispute Assistance
Request a confidential case evaluation from our domain dispute attorneys. We will review your domain situation and reply within 24 hours.

    Thank You for Your Request!
    Our legal team is reviewing your dispute details and will contact you via email shortly.
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.
    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings

    Necessary
    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.