In general, I would say impersonating a criminal in order to get into an organization isn't bad. Generic impersonations can also work as well, but it starts to

In general, I would say impersonating a criminal in order to get into an organization isn't bad. Generic impersonations can also work as well, but it starts to get fuzzy there. Impersonating an NGO could still harm other completely unrelated NGOs. Then you get into impersonating a known entity and you have the potential to cause real damage. I don't want someone impersonating me or my family, that could cause a real, lasting damaging impact even if just by a bad reputation. I can certainly understand a company having the same thoughts and issues. That's why banks spend money on fighting phishing attacks, someone leveraging a banks branding to hurt consumers hurts the reputation regardless of the bank's lack of involvement.