Follow us on LinkedInfor the latest from Zavior
Zavior
For Business

Do you actually own your social media handles?

No. A social handle is a revocable platform licence, not property, and no register records your claim to it. A registered trademark buys standing for takedowns and verification.

By Glenn Tan · CEO at Zavior - Build Trust Through Certifications | Cyber Security | AI Governance | Data Protection

6 min readInsight
Do you actually own your social media handles?

No. A social handle is a licence from the platform, not property. No register in Singapore or Australia records your claim to @yourbrand, and platforms can suspend, reclaim or reassign it under terms you accepted unread. What a registered trademark buys you is standing: brand-registry programmes and impersonation takedowns are keyed to it.

What is a handle, legally?

A licence granted under the platform's terms of service, revocable and non-transferable. There is no title deed. Search every register Singapore keeps and you will not find an entry recording your right to @yourbrand, because no such register exists here or in Australia.

Compare the rest of the brand stack. Your trademark sits on a public register with your company named as proprietor. Your domain has a registrant record you can point to. Your handle has a row in a platform database, governed by terms the platform wrote and can rewrite.

Founders feel handles as property because the audience is real and the work was real. Five years of posts. A community that answers when you ask it something. All of it built on rented land.

The terms themselves say so, in language nobody reads at signup. The platform can suspend the account, reclaim the handle, or reassign it, and you agreed to all of it the day you ticked the box. This is not platform villainy. It is the ordinary shape of a licence, and every business account on every platform sits on the same clause.

The licence framing predicts what happens in a dispute. The platform applies its own terms, on its own timeline, through its own forms. Courts exist, but the practical forum for nearly every handle fight is the platform's internal process, and that process runs on the platform's rules.

What does a registered mark get you on-platform?

Standing. The major platforms run brand programmes that key verification and enforcement to a trademark registration, and the certificate number is the entry ticket.

  • Meta: impersonation and IP reporting that asks which registered right you are asserting
  • TikTok: brand verification keyed to registration
  • Amazon: a brand registry built around a registered trademark
  • Shopee: a brand programme on the same model, the one closest to home for Singapore sellers

An unregistered brand can still complain, but it queues with everyone else and argues from screenshots. A registered owner walks through a door built specifically for registered owners. The platforms did not design it this way to flatter IP lawyers; a register gives their enforcement teams a fact they can check in minutes.

This is the quiet reason a Singapore registration through IPOS earns its filing fee even for a business that never expects to sue anyone. Most brand enforcement now happens inside platforms, and the certificate is the passport.

How do you fight impersonators fast?

With a pre-built evidence pack: the registration certificate plus a whitelist of your authorised accounts and assets, assembled before any impersonator appears.

The pack has two halves. The certificate proves the right. The whitelist proves the perimeter: these accounts are ours, these logos and product images are ours, and anything else trading under the name is not. An enforcement reviewer who can see both in one submission can act without a second round of questions, and second rounds are where takedowns go to stall.

The whitelist earns a word more, because most companies have never written one. It is a dated list of every account the business actually operates, per platform, with the person responsible named beside each. Compiling it takes an afternoon. Compiling it during an incident takes the same afternoon plus the incident.

Speed is the whole game with impersonation. Every day a fake account runs, it collects your customers' messages and sometimes their money. A takedown filed on day one from a ready pack beats a more polished takedown filed in week three, because the damage is a function of time, and the fake does not wait while you hunt for your certificate.

The pattern holds regardless of the specifics. The companies that clear a fake fast are the ones that filed the complaint the morning they found it, certificate and whitelist already attached. The ones that lose weeks are hunting for the certificate number while the impersonator keeps trading. The difference is never the quality of the writeup. It is whether the pack existed before the incident.

Why do buyers discount platform-only audiences?

Because nothing beside the follower count is owned. In diligence, an audience that exists only as platform accounts is a licence dependent on terms the target company does not control, and buyers price that dependency as risk.

Owned channels change the arithmetic. An email list is an asset the company holds and can move between providers. Traffic to a domain accrues to a name the company controls. The follower relationship, by contrast, lives and dies inside the platform's licence, however large the number attached to it.

A 100,000-follower account with no email list beside it is a rented shopfront with a great queue outside.

The discount is rational, and it is also negotiable. A seller who can show the same audience reachable through an owned channel, with the handle merely the loudest of several doors, has converted a diligence red flag into an ordinary line item.

De-risking is not a platform exit; the reach is real and worth keeping. It means building at least one owned channel beside every rented one and holding the registered mark that gives you standing when the rented one is attacked. Zavior's register lists each handle beside the trademark certificate that anchors it, with the authorised-account whitelist attached, so the evidence pack exists before the impersonator does.

Frequently asked questions

Can you sue over a taken handle?

Rarely over the handle itself, because it is a licence rather than property you hold title to. Claims usually run against the person misusing your name, for trademark infringement or passing off, while the handle's fate is decided inside the platform's own process. The practical first move is the platform's IP complaint channel with your registration attached.

Do platforms honour trademark claims?

Largely, yes. Platform IP policies and brand programmes are built around registered rights, and a certificate moves a complaint into a defined process with a reference number. Claims resting on unregistered goodwill can still be made but sit outside those programmes and travel slower.

How do you de-risk the audience?

Build at least one owned channel beside every rented one: an email list and traffic to a domain the company holds are the standard pair. Register the trademark so verification and takedowns are available the day impersonation starts. Then record handles, domains and certificates in one register so a buyer can see the whole stack at once.

Zavior · Brand Management

Handles, domains and marks only work as one asset when they sit in one place. Zavior organises the whole brand portfolio, the registered trademark, the handles it anchors, the domains and the storefronts, into a single deal-ready register, so the standing you need for a takedown and the ownership picture a buyer checks in diligence come from the same record instead of a scramble.

Start a free trial →

This is general information, not legal advice.

Sources: platform terms of service and IP policies (Meta, TikTok, Amazon, Shopee).

Written by

Glenn Tan

CEO at Zavior - Build Trust Through Certifications | Cyber Security | AI Governance | Data Protection

Share

Let us be your Zavior.

Zavior helps Singapore organizations build cyber resilience aligned to SG Cyber Safe, the PDPA, and ISO 27001.

Continue reading