›

Automation and takedown mechanics

·

2 min read

What happens when a platform stalls

The sequence when a registrar, host or platform does not respond: block, file, scheduled re-filing, a person, and verification throughout.

What happens when a platform stalls, ChainPatrol Impersonation Institute guide cover
What happens when a platform stalls, ChainPatrol Impersonation Institute guide cover

ChainPatrol Team

Most takedowns resolve on the first filing. The ones that don’t are where vendors differ, because follow-up is tedious and easy to drop. Here is the sequence at ChainPatrol.

When a provider goes quiet
Stalled takedown
1
Block and file
Web assets are blocked, and filings go out in parallel
2
No response
After a few days of silence the filing is marked stale
3
Re-file
Re-sent automatically on a schedule, a limited number of times
4
A person steps in
Staff take over once automation is used up
Operations team
5
Verified
The case stays open until removal is confirmed

Day 0. Web assets are blocked in wallets and browsers. Filings go to the hosting provider, the registrar and the TLD registry, or to the platform under the policy that fits the evidence.

Response window. Providers differ. When no response arrives for a few days, the filing is marked stale.

Re-file. Stale filings are re-sent automatically on a schedule, a limited number of times. A platform that declined under one policy can be re-filed under another, such as trademark.

A person steps in. When automated re-filing is used up, the case stays open for the operations team. Staff can push another provider in the chain, use partner contacts where they exist, or ask the customer for input.

Throughout. The case stays open and visible as still live until removal is verified.

What you can do

  • Keep a letter of authorization current so no filing is delayed for paperwork.

  • Register trademarks in your main markets to open IP routes.

  • Apply for Meta Brand Rights Protection.

  • Tell customers where the real support channel is, so a stalled fake does less damage.

For why some cases run long regardless, see why some phishing takedowns take weeks.

Frequently asked questions

Does a stalled takedown mean customers are exposed?

On web assets, blocking runs from day 0. On social accounts, exposure continues until removal, which is why the lure’s link is blocked even when the account is not. See the account is the lure, the link is the loss.

How long before a person is involved?

When automated re-filing is used up, or sooner if a filing fails or a provider pushes back. The schedule depends on the provider.

Want to see what is already out there? Get a free scan or book a demo.

Fakes of your brand already out there?

ChainPatrol finds them, blocks the links in wallets and browsers, and files the takedowns for you.