Islamic Relief Worldwide (IRW) has warned other charities about the “growing” threat of website cloning after being targeted itself.
During the Gaza crisis, IRW identified a website called Aid Gaza which described itself as an “Islamic Relief initiative” despite having no connection to the charity.
After analysing the website, IRW found that it had copied material from the relief and development charity and was directing visitors towards cryptocurrency wallets.
The charity also warned its supporters about an Arabic-language site called Reach Out to Gaza which used its branding and images to create “a convincing spoof website”.
It also identified fake “Islamic Relief Uganda” social media accounts, despite having no presence in the country, and unauthorised groups using its name on WhatsApp and Telegram.
“For many charities, a website is more than a communications platform,” IRW’s senior communications advisor Mohammad Shakir wrote in a recent article on Preventing Charity Fraud.
“It’s often the main route through which supporters donate, access information and decide whether an organisation can be trusted.
“When criminals clone that website, they aren’t simply copying its appearance. They’re exploiting the reputation and trust the charity has built, sometimes over decades.”
Consequences can be ‘significant’
Shakir said website cloning often involves reproducing a charity’s branding, photographs, campaign language and donation pages on an unauthorised domain.
“The copy may look highly convincing, particularly when it appears during a major humanitarian emergency and is promoted through social media, messaging apps or phishing emails,” he said.
“Donors can then be directed to fraudulent payment facilities, cryptocurrency wallets or forms designed to capture personal and financial information.”
Shakir said the consequences can be significant, with supporters potentially losing money or having their data stolen.
Meanwhile, the targeted charity faces reputational damage, additional enquiries and the cost of investigating and removing the fraudulent material, he warned.
“Most seriously, money intended for vulnerable communities may never reach them,” Shakir wrote.
Website cloning ‘not only an IT problem’
Shakir said IRW has published fraud warnings, identified official donation channels and established a portal where suspicious fundraising activity can be reported.
The charity has also acted to protect its trademarks and sought the removal of impersonating websites and content.
Shakir said “public warnings remain important while that process is under way, as closing a malicious website isn’t always immediate and offenders can quickly move to another domain”.
“Ultimately, website cloning isn’t only an IT problem,” he said. “It’s a safeguarding, fundraising and reputational risk.
“Our experience shows that effective protection requires early detection and vigilance, decisive takedown action and clear communication with supporters and stakeholders.
“Charities cannot prevent every attempted impersonation, but they can make fraudulent activity easier to identify, faster to disrupt and less likely to succeed.”
