Key points
- The UDRP lets a trademark owner recover a domain name registered and used in bad faith, without a lawsuit.
- You must prove three elements: the domain is identical or confusingly similar to your mark, the holder has no rights or legitimate interests, and the domain was registered and is being used in bad faith.
- The only remedies are transfer or cancellation of the domain. Money damages are not available.
- Most cases are decided on written submissions, often about two months after filing.
When the UDRP is the right tool
The Uniform Domain-Name Dispute-Resolution Policy (UDRP) was adopted by ICANN to address cybersquatting: registering a domain that uses someone else's trademark to profit from it. Every registrar of .com, .net, .org and other generic top-level domains requires its customers to agree to the UDRP, and a number of country-code domains have adopted it too.
The UDRP is often a good fit when a domain is being used to:
- Impersonate your business, run a fake store, or send phishing emails
- Show pay-per-click ads that trade on your brand
- Redirect visitors to a competitor
- Hold your brand for ransom, with an offer to sell it back to you
- Exploit typos of your brand name (typosquatting)
It is not designed for genuine disputes between two businesses that each have a legitimate claim to a name, or for trademark infringement claims unrelated to domain registration. Those matters usually belong in court or before a trademark office.
The three elements you must prove
1. Identical or confusingly similar to your trademark
You must show rights in a trademark or service mark. A registration, in the United States or elsewhere, is usually the simplest proof. Unregistered (common law) rights can also qualify, but you'll need evidence that the mark has come to identify your business, such as sales, advertising, and media coverage. Panels typically compare the mark to the domain side by side, ignoring the extension (.com, .net), and a domain that contains your mark with an added word, like "shop" or "login," is often found confusingly similar.
2. No rights or legitimate interests
You make an initial showing that the domain holder has no legitimate reason to hold the domain: they aren't known by that name, you never authorized them, and they aren't using it for a genuine business or fair-use purpose. The burden then shifts to the holder to show otherwise.
3. Registered and used in bad faith
The UDRP gives examples of bad faith, including registering a domain primarily to sell it to the trademark owner, to block the owner from using its mark in a domain as part of a pattern of such conduct, to disrupt a competitor, or to attract internet users for commercial gain by creating confusion with the mark. Timing matters: if the domain was registered before you had trademark rights, bad faith is usually difficult to prove.
Before filing: what to gather
- Your trademark registrations, or evidence supporting common law rights and when they began
- WHOIS or registration data for the domain, including the registration date
- Dated screenshots of the website, any ads, and any redirects
- Copies of emails, offers to sell, or phishing messages linked to the domain
- Any history between you and the domain holder
Avoid making offers to buy the domain before getting advice. Negotiations aren't always a mistake, but how they are handled can affect the evidence in a later complaint.
How a UDRP case proceeds
- Filing: the complaint is filed with an approved provider, such as the World Intellectual Property Organization (WIPO) or the Forum. Provider fees depend on the number of domains and whether one or three panelists decide.
- Registrar lock: the provider asks the registrar to confirm the registrant's details and lock the domain so it can't be transferred during the case. If the holder used a privacy service, the registrar's disclosure may allow the complaint to be amended.
- Response: the domain holder generally has 20 days from formal commencement to respond.
- Decision: a panel of one or three independent experts decides, usually without hearings.
- Implementation: if transfer is ordered, the registrar implements it after 10 business days unless the holder shows it has filed a court action in the appropriate jurisdiction.
Common mistakes that sink complaints
- Filing against a domain registered before your trademark rights existed
- Relying on assertions instead of dated evidence
- Filing against a business with a plausible, legitimate use of a common or descriptive word
- Overreaching, which can lead a panel to find Reverse Domain Name Hijacking against the complainant
How we help
Solace Law evaluates whether a UDRP complaint is likely to succeed, gathers the evidence, drafts and files the complaint, and coordinates the domain recovery with your broader trademark strategy. Learn more about our UDRP domain dispute services, or read UDRP vs. ACPA Lawsuit if you're weighing court action.
This article is general information about U.S. intellectual property law and the UDRP, not legal advice, and reading it does not create an attorney-client relationship. Outcomes depend on specific facts and on the panel or court deciding the matter. Solace Law does not guarantee any particular result and does not advise on foreign law.
