Domain typosquatted / fake domains used to trick customers

Say you have a business and a 3rd party registers domains similar to yours and starts trying to trick your customers into paying bills with falsified information.

What would you do in this situation? I'd warn customers, contact the domain registrars and possibly involve the authorities. Any other recommendations?

bills business customers cybersecurity domain domains fake fake domains information party recommendations