Brand Protection
We find fakes of your brand, and get them taken down.
For banks, telcos, insurers, super funds and brands that scammers copy. Sixth spots websites using your name the day they're set up, has AI check each one, and asks the company hosting a fake to take it down. A person approves every request.
-
yourbank-secure-login[.]comAI: confirmed fake.Takedown requested.Running now
-
yourbank-verify-id[.]net
-
y0urbank-help[.]com
-
yourbank-loans[.]info
Why now
The new codes will ask you to watch, and to act fast.
Under the draft Scams Prevention Framework codes, banks and telcos will have to watch the internet for anyone pretending to be their brand and promptly ask for those fake websites to be removed. The codes start no earlier than 31 March 2027.
Sixth does that watching today, sends the removal requests, and keeps a dated record of every step, so you can show your board and your regulator what was found and done.
What you get
What runs today, and what comes next.
Running today
- Lookalike WatchWe compare every new website with 156 Australian brands and flag the copies the day they're set up.
- AI verdictsAI sets real copies of you apart from namesakes and empty addresses, so your team only sees the fakes.
- TakedownsWe ask the company hosting a fake, and the one its address was bought from, to remove it, and follow up until it's gone. AI reads their replies.
- Alerts with the evidenceAn email to your team for each confirmed fake, with the screenshot and a PDF of the evidence.
- Blocking listYour firewall or DNS filter fetches a live list of your confirmed fakes from a private link and blocks them. Each case shows when your tools last fetched it.
- Monthly recordEmailed to you as a PDF on the 1st of each month, for your board and regulator: what we found, what we asked to be removed, and how long each fake stayed up. Built for the Scams Prevention Framework.
- Logins for your teamYour people sign in with their own email to see every confirmed fake of your brand, its evidence and progress, this month's numbers and your monthly records. They can tell us a site is yours or ask about a case.
Being built with our founding clients
- Inbox WatchScam emails kept out of your staff's inboxes, and any email pretending to be you added to the evidence. In watch-only trials on both now.
- Social and app watchFake social media profiles and copycat apps, found and scored by AI.
- Customer Reports deskYour customers will forward scams to an address with your name on it and get an answer in about a minute.
- Scam phone numbersThe phone numbers scammers use in your name, ready to report to the phone companies.
- Who sends email as youReports your email providers already keep (DMARC), sent to Sixth, so you see every service sending email in your name and anyone faking it.
- Self-serveYour own team deciding cases in the Sixth console, if you choose self-serve. Today our analysts work every case.
- Takedowns in your name PlannedRequests sent in your organisation's name under a letter of authority, and trade-mark requests against lookalikes before anything harmful goes live.
- AI in Australia PlannedWe'll run our AI models through AWS in Sydney and Melbourne, so what they read stays in Australia. Today they run outside Australia, mainly in the United States.
- Industry sharing PlannedEvery confirmed fake shared through the anti-phishing industry's exchange, so email providers and security companies block it too.
What a finding looks like
Evidence you can act on.
Every confirmed fake comes with the facts its host needs to take it down, and the facts your team needs to warn customers: when it appeared, what the page asks people to type, and where it sends what they type.
Nothing reaches your team until the AI is confident and a person has checked it. In our latest test on 157 cases our reviewers had already decided, the AI agreed with them 95.5% of the time and dismissed none of the 25 real fakes (October 2026).
- domain
- yourbank-secure-login[.]com
- first seen
- when it got its security certificate, 09 Oct 2026 03:14 AEDT
- registered
- 2 days earlier
- page
- copy of your sign-in page, asks for password
- form sends to
- another web address, not yours
- hosting
- provider and abuse contact identified
- action
- takedown requested 03:31, removed 11:52
Every case is decided in the Sixth console, by AI and a person. See how it works
The bundle
Brand Protection, as a starting point
Brand Protection is a Sixth account, Lookalike Watch with our analysts working every case, 15 takedowns a month, and social and app watch. Prefer your own team to work the cases? Choose the self-serve version of Lookalike Watch instead. Prices are monthly, in Australian dollars, excluding GST.
Brand Protection
Setup A$290 plus A$1,500 per brand. Add or remove any module.
- Sixth account
- Lookalike Watch, managed
- 15 takedowns a month
- Social and app watch Pilot
Add any module
- Takedowns in your name Planned
- A$300 each
- Lookalike dispute request Planned
- A$450 each
- Formal domain dispute Planned
- By quote
- Scam phone numbers Pilot
- A$190 / month per brand
- Customer Reports desk Pilot
- A$850 / month
- Inbox Watch Pilot
- Pricing to be announced, per mailbox
Founding clients keep their price for 12 months. Every module and its price.
Alongside your provider
Already have a takedown provider?
Sixth will be able to work alongside them as an independent check. Each month you'd see the fakes we found, how long each took to come down, and which ones stayed up.
Pilot By quote
Partner offers
Protecting your customers too
Banks and telcos will be able to offer Sixth's protection to their own business and personal customers, under their own name.
Planned By quote
Waitlist
Join the Brand Protection waitlist
Leave your work email. We'll offer you a place before Brand Protection opens to everyone, at founding-client pricing. You'll get one email now to confirm, and nothing more until then.