Hijack Defender

intent

listing hijacking destroys customer trust and tanks your reviews when unauthorized sellers attach to your Amazon ASIN (or copy your product page on other marketplaces) selling counterfeit, unauthorized, or gray-market goods under your brand name. use this skill to detect hijackers early, build airtight evidence packages, submit enforcement actions through Amazon Brand Registry, send legal cease-and-desist letters, and implement prevention systems (Transparency codes, brand gating) so the same attackers don't return. this skill covers Amazon primarily, but the procedure generalizes to other ecommerce platforms (Shopify, eBay, Walmart).

inputs

Amazon Brand Registry account (required)

• enrollment confirmation; Brand Dashboard access at brand.amazon.com
• your trademark registration number (USPTO or equivalent, depending on region)

Amazon Seller Central account (required)

• seller account with access to your ASINs and listings
• permission to view order history, seller feedback, and the "New & Used" offers panel

monitoring infrastructure (recommended, choose one or more)

• Bindwise, Helium 10 Alerts, or SellerApp account with API keys for real-time seller alerts
• or: manual monitoring cadence (daily for high-volume ASINs, weekly for slower SKUs)
• note: automated tools reduce detection lag from days to minutes

legal resources (optional but strongly recommended for counterfeit enforcement)

• trademark attorney contact (for cease-and-desist review and escalation letters)
• your company's legal template library (or use the template in references)

separate Amazon buyer account (required for test buy step)

• never use your brand Seller Central account; Amazon can trace orders and will flag suspicious behavior
• ship test buy to a neutral address (PO box or colleague's address, not your business location)

supply chain documentation (required if investigating unauthorized resellers)

• authorized reseller list
• distributor agreements with resale restrictions
• invoice records from your manufacturer or authorized distributors

procedure

Step 1: Set up monitoring

establish automated or manual detection before a hijacker appears on your listing.

inputs: amazon seller central access, choice of monitoring tool (or manual schedule)

outputs: monitoring system active; alert rules configured for your highest-value ASINs

1a. if you have a seller monitoring tool (Bindwise, Helium 10, SellerApp):

• log in with your API credentials
• add all ASINs to watch list (prioritize high-volume, high-margin products first)
• set alert threshold to "any new seller" and configure daily digest email
• test alert by having the tool send a test notification

1b. if monitoring manually:

• open your product on Amazon → click "New & Used" offers panel
• record baseline: current seller count, seller names, and prices
• schedule a calendar reminder (daily for high-volume, weekly for slower ASINs)
• use a spreadsheet or Google Sheet to log date, seller count, new seller names, and prices observed

decision point: if you have >100 active ASINs and tight margins, automated monitoring is non-negotiable. manual checks miss fast movers. if you have <20 SKUs or very slow turnover, manual weekly checks are acceptable.

---

Step 2: Identify and classify the hijacker

when a new seller appears or alert triggers, classify the violation type immediately.

inputs: hijacker's seller profile, hijacker's storefront page, your ASIN listing history

outputs: violation classification (counterfeit, unauthorized reseller, listing pirate, or ASIN piggyback); written notes on seller history, location, and pattern

2a. check the hijacker's seller profile:

• note account creation date (new accounts within 60 days are higher risk for counterfeiting)
• review feedback history: look for feedback text that appears copied/generic or from buyers in specific regions
• check their storefront: do they sell similar products? do they have legitimate seller history or is this their only listing?
• identify location: overseas sellers (especially if address is in known counterfeiting regions: southeast Asia, parts of Middle East) are higher risk

2b. classify the violation:

• counterfeit seller: selling fake/replica versions with your brand name visible; packaging, materials, or functionality noticeably different from authentic
• unauthorized reseller: selling genuine product but without authorization; likely acquired through gray-market distributor or liquidation; feedback suggests authentic product
• listing pirate: created a new ASIN that copies your images, title, description, or keyword phrases to intercept your organic search traffic
• ASIN piggyback: attached to your existing ASIN as a third-party seller with no inventory history, just "offer from seller" with no fulfillment track record

2c. check for coordinated attacks:

• if 3+ new sellers appear within 7 days with similar pricing, feedback text, or same shipping region, flag as coordinated counterfeit operation (needed for Amazon Counterfeit Crimes Unit escalation later)

decision point: if the seller has 4+ years of history, positive feedback, and sells from a known distributor region, treat as unauthorized reseller (Step 2b classification). skip the test buy (no need, product is authentic) and go straight to supply chain investigation. if the seller has new account, vague feedback, and suspect region, treat as counterfeiter; proceed to test buy (Step 3).

---

Step 3: Conduct a test buy (counterfeit classification only)

test buy is the strongest evidence for counterfeit enforcement. skip this step if you classified as unauthorized reseller or if you're confident product is authentic.

inputs: separate Amazon buyer account (not your brand account); budget for product cost + shipping; neutral delivery address; camera or smartphone for photos

outputs: order confirmation number; tracking number; delivery photos; side-by-side product comparison photos; physical product and packaging (retained for legal/escalation use)

3a. place the test buy:

• log into your separate buyer account (not your Seller Central account)
• add hijacker's product to cart; use current price
• at checkout: ship to neutral address (PO box, colleague's address, or third-party logistics warehouse, NOT your business address; Amazon can correlate address to your seller account)
• complete order; screenshot or save order confirmation with order ID

3b. upon delivery:

• photograph package exterior (unopened) with date visible in frame
• open package and photograph contents: all packaging materials, inserts, product, labels, QR codes, serial numbers
• photograph side-by-side comparison: hijacker's product vs. one of your authentic units (lay them flat, same lighting, clear view of packaging differences, color accuracy, print quality, material feel)
• note physical differences: weight (use a scale if available), packaging material type, logo sharpness, font consistency, sticker placement, missing authenticity cards or holograms, smell/chemical odor (common sign of counterfeits), functionality (does it work as advertised?)

3c. organize evidence:

• create a folder: hijack-[seller-name]-[date]/
• store: order ID screenshot, tracking number, all photos, and physical product in a secure location (you may need this for legal action)
• label photos clearly: packaging-comparison-hijacker-vs-authentic.jpg, product-internals-hijacker.jpg, etc.

edge case: if the product arrives damaged or the seller refunds your order before delivery, note the refund in your evidence file; this is suspicious behavior common among counterfeiters trying to avoid enforcement.

edge case: if the product is authentic, stop here and reclassify as unauthorized reseller. go to Step 2b decision point.

---

Step 4: Build your evidence package

compile all documentation before submitting any enforcement action. incomplete packages get rejected; complete packages resolve in 1-5 days.

inputs: test buy photos and order confirmation (if counterfeit); your ASIN listing; your trademark registration; hijacker's seller name/ID; your authentic product invoice or manufacturer certification

outputs: numbered evidence package file (PDF or Google Doc); organized photos with captions; all documentation in one folder

4a. collect required documents:

1. screenshot of hijacker's offer (include: seller name, current price, "Sold by [Name]" field, product title, any seller badges; capture full view of offer, not cropped)
2. screenshot of your original listing showing you as the brand owner/manufacturer (go to your ASIN → your seller offer → capture "Sold by [Your Brand]")
3. test buy order confirmation and tracking number (screenshot from your buyer account order history)
4. test buy photos: package unopened, package opened, product close-up, side-by-side comparison vs. authentic unit (minimum 4 photos, high resolution, well-lit)
5. your trademark registration number and certificate (or Brand Registry enrollment confirmation)
6. manufacturing invoice or authenticity certification from your official supplier (shows you are the legitimate brand owner)
7. if investigating MAP violation: screenshots showing authorized resellers' pricing vs. hijacker's price, and your published MAP (minimum advertised price) policy document

4b. organize into a single document:

• create a Google Doc or PDF titled [Brand Name] - Hijack Evidence Package - [Date]
• add a summary page: date discovered, seller name/ID, violation type, brief description of product and violation
• insert each evidence item with a caption explaining what it shows and why it matters
• number all evidence items (Evidence #1, Evidence #2, etc.) for reference in your enforcement report

4c. quality check:

• every photo must be legible at original resolution (not compressed)
• every screenshot must include date metadata (visible in screenshot or as file property)
• every text document must be complete and not redacted
• do not include unrelated photos or documents (keeps package concise)

edge case: if your trademark registration is pending (not yet issued), Brand Registry IP reports may be delayed. use this time to gather additional evidence (repeat test buy with a second hijacker account, or escalate directly to Amazon Seller Support instead of Brand Registry).

---

Step 5: Submit Amazon Brand Registry IP report

submit your formal enforcement request through Amazon's Brand Registry system.

inputs: evidence package from Step 4; Amazon Brand Registry account; trademark registration number; hijacker's seller name and ASIN

outputs: case reference number from Amazon; automated confirmation email; Amazon's response (typically 1-5 business days)

5a. navigate to brand.amazon.com:

• log in with your Brand Registry account
• click "Report a Violation" or "IP Accelerator" (varies by region)
• select violation type: "Counterfeit" if product is fake; "Trademark Infringement" if brand name misused but product authenticity unclear; "Unauthorized Seller" if authorized reseller selling on unauthorized ASIN

5b. fill out the report form:

• ASIN of the hijacked listing
• seller name and seller ID (copy from their storefront)
• violation description: "This seller is offering counterfeit [product name] without authorization. I have conducted a test purchase (Order ID [XXX]) and confirmed the product differs materially from authentic units in packaging, materials, and quality."
• attach evidence package (upload all photos and documents from Step 4)
• include your trademark registration number
• mark as "Priority" if counterfeit involves product safety risk (electronics, supplements, children's items)

5c. submit and document:

• screenshot the submission confirmation page showing case reference number
• save the reference number in your spreadsheet for follow-up
• you'll receive a confirmation email within 1 hour

timeline: Amazon reviews counterfeit reports within 1 business day if backed by test buy; 2-5 days for trademark or unauthorized seller reports. if you don't receive a response within 7 business days, escalate (Step 7).

decision point: if you have a test buy, submit "Counterfeit" and expect resolution in 1-3 days. if you don't have a test buy (e.g., you classified as unauthorized reseller), submit "Unauthorized Seller" and expect 3-5 days, but resolution is less certain without physical evidence.

edge case: if Amazon rejects your initial report citing "insufficient evidence," do not re-submit immediately. wait 2 business days, then submit a fresh report with additional detail. Amazon's system sometimes has false rejections.

---

Step 6: Send a cease-and-desist letter

in parallel with the Brand Registry report, send legal notice directly to the hijacker. this creates documentation for escalation and may prompt faster voluntary removal.

inputs: cease-and-desist template (references/cease-and-desist-template.md); hijacker's seller contact info; your legal team or trademark attorney (optional but recommended for counterfeiters)

outputs: cease-and-desist letter sent to hijacker; copy retained in your records; escalation documentation if needed

6a. obtain hijacker's contact info:

• go to hijacker's storefront on Amazon
• click the seller name (top of their storefront)
• click "Ask Seller a Question" or "Contact Seller" button
• this opens Amazon's messaging system (messages go to their seller account, not direct email, but Amazon retains records for legal purposes)

6b. draft the letter using your template (or references/cease-and-desist-template.md):

• state your legal rights: "I am the registered trademark owner of [Brand Name] under registration #[XXX]."
• describe the violation specifically: "You are offering counterfeit products using my registered trademark without authorization. I have conducted a test purchase (Order #[XXX] dated [date]) and confirmed the product is not genuine."
• include timeline: "You must remove this offer within 48 hours of receipt of this notice. failure to comply will result in [legal action / escalation to Amazon / law enforcement reporting]."
• sign the letter with your name and title (e.g., "Brand Manager, [Your Company]"); if using attorney, sign as "On behalf of [Your Company], represented by [Attorney Name]"
• do not make threats (legal consequences are expected; threats of violence are not)

6c. send via Amazon messaging:

• paste the letter text into the "Ask Seller a Question" message box (or attach as text file if option exists)
• note the message ID or screenshot the sent message for records
• amazon messages create a legal paper trail; they're admissible in court proceedings

6d. optional: escalate to attorney letter:

• if the hijacker doesn't respond within 48 hours and is US-based, have a trademark attorney send a formal cease-and-desist letter via certified mail (much heavier legal weight; required if you escalate to federal court)
• cost: $300-800 for attorney-drafted letter; essential for organized counterfeit operations

timeline: send this letter immediately after submitting Brand Registry report (same day or next morning). if hijacker removes offer within 48 hours, you're done. if not, proceed to Step 7.

decision point: if hijacker is overseas and new account, a cease-and-desist may not be effective (language barrier, non-US jurisdiction), but send it anyway for documentation. if hijacker is US-based or established seller, a legal letter from an attorney carries weight and often triggers rapid removal.

---

Step 7: Escalate if needed (48-72 hours post-initial action)

if Amazon's initial enforcement action is rejected, delayed, or if the hijacker returns after removal, escalate.

inputs: case reference number from Step 5; evidence package; attorney contact; escalation documentation

outputs: escalated case with Amazon; external legal action initiated (if needed)

7a. assess the situation (check 48 hours after submitting Brand Registry report):

• best case: Amazon confirms removal; hijacker's offer no longer visible on ASIN. monitor listing for 30 days to ensure no return.
• acceptable case: Amazon confirms investigation underway; case shows "pending" status. wait 3 more days; follow up with case reference number.
• problem case: Amazon rejects report or goes silent (no response after 5 business days); hijacker's offer still live.

7b. if rejection or silence, re-submit with stronger evidence:

• reply to Amazon's rejection email (if you received one) with additional documentation
• re-submit Brand Registry report with expanded evidence package: add second test buy (different account, same hijacker), add close-up photos of specific counterfeit markers (font differences, material flaws, missing security features), add your manufacturing invoices showing legitimate product sourcing
• include note: "This is an escalated submission due to initial rejection. I have provided additional physical evidence from two independent test purchases and manufacturing documentation."

7c. if hijacker is part of organized ring, escalate to Amazon Counterfeit Crimes Unit:

• email: counterfeitcrimes@amazon.com (or region-specific equivalent)
• include: case reference number, evidence that 3+ accounts are coordinated (same shipping region, copied feedback, same price point within 48 hours), your test buy evidence, summary of removal requests already filed
• amazon routes these to a specialized team with authority to take down related accounts proactively

7d. if hijacker is US-based, escalate to federal trademark infringement:

• contact a trademark attorney; have them send a formal cease-and-desist letter via certified mail (much heavier than Amazon messaging)
• letter should cite your trademark registration, describe counterfeiting, and state intent to pursue federal injunction if offer is not removed within 30 days
• cost: $400-1,000; required for serious counterfeit operations or repeat offenders
• attorney can also file a DMCA takedown if hijacker has copied your copyrighted images or text verbatim

7e. if hijacker returns after initial removal:

• repeat Step 3 (new test buy) and Step 5 (new Brand Registry report) with updated evidence
• in second report, note: "This seller previously had offer removed via case #[XXX] dated [date]. They have re-listed counterfeit product under new seller account [new account name/ID]. This indicates organized resale operation."
• amazon escalates repeat offenders faster

timeline:

• rejection response: re-submit within 24 hours
• silence (no response after 5 days): escalate to Counterfeit Crimes Unit on day 6
• return of hijacker after removal: re-file on day 1 of detection (same day as monitoring alert)

decision point: if hijacker is overseas with new account, counterfeit Crimes Unit escalation is more effective than attorney letter (jurisdiction). if hijacker is US-based or repeat offender, attorney letter + federal escalation path is necessary.

---

Step 8: Implement prevention measures (post-removal)

after hijacker is removed, close the loop by making future hijacking harder.

inputs: Amazon Transparency program enrollment (optional); brand gating request form (Brand Registry); authorized reseller list; MAP policy documentation

outputs: Transparency codes applied to future production; brand gating approval; authorized reseller communications sent

8a. enroll in Amazon Transparency (product-level prevention):

• go to brand.amazon.com → Transparency program
• select ASINs to enroll (prioritize high-value, high-margin, counterfeit-prone products)
• cost