Domain Name Disputes | Mister Wolf Law

Someone registered a domain name that matches your brand. Maybe it redirects to a competitor. Maybe it hosts a parked page full of pay-per-click ads. Maybe it just sits there, doing nothing, while your customers type it into their browsers and land on a blank screen. You want it back. The question is how.

The Uniform Domain-Name Dispute-Resolution Policy (UDRP) is the fastest and most cost-effective path for many trademark owners. ICANN adopted the UDRP in 1999 to give trademark holders a focused process for recovering domain names registered in bad faith. The process often takes about two to three months from complaint to transfer, costs a fraction of federal litigation, and produces a binding result on the domain registrar.

I’m Evan Dotta, a partner at Mister Wolf P.C. I’ve handled UDRP proceedings and domain dispute litigation as part of our intellectual property law practice for brand owners across Southern California. Here’s how the UDRP works, when it’s the right tool, and when you need to skip it and go straight to federal court.

What is the UDRP and how does it work?

The basic framework

The UDRP is a mandatory administrative policy included in registration agreements for ICANN-accredited registrars. It covers .com, .net, .org, and other generic top-level domains (gTLDs), plus many country-code TLDs that have adopted the UDRP or a local variant. When you register a covered domain name, you agree to submit to UDRP proceedings if a trademark holder files a complaint.

The complaint is filed with an approved dispute resolution provider. The two most commonly used providers are the World Intellectual Property Organization (WIPO) Arbitration and Mediation Center and the National Arbitration Forum (Forum). WIPO handles the majority of international cases. Forum handles a significant share of U.S. cases.

WIPO’s statistics tell the story of how prevalent these disputes are. Its public domain-dispute dashboard tracks annual UDRP filings across legacy and newer gTLDs, and the caseload remains high because online commerce keeps expanding and new domain extensions give squatters more targets.

Filing Fees

The cost depends on how many domain names are at issue and whether you want a single panelist or a three-member panel.

Single panelist, 1-5 domain names: $1,500 at WIPO; Forum fees vary by provider schedule
Three-member panel, 1-5 domain names: $4,000 at WIPO; Forum fees vary by provider schedule
Additional domain names increase the fee

The respondent (the domain holder) pays nothing unless they request a three-member panel, in which case they pay half the panel fee.

Most complainants choose a single panelist unless the case is complex or they expect the respondent to put up a strong fight. The single-panelist option is faster and cheaper, and UDRP panels transfer the domain to the complainant in roughly 85% to 90% of decided cases. That win rate reflects the fact that most UDRP cases involve clear-cut cybersquatting.

What three elements do you need to prove?

The three-part test

To succeed in a UDRP proceeding, the complainant must prove all three of the following elements:

1. The domain name is identical or confusingly similar to a trademark in which the complainant has rights.

This is usually the easiest element to prove. If your trademark is “ACMEBRAND” and the domain is acmebrand.com, they’re identical. If the domain is acme-brand.com or acmebrandstore.com, it’s confusingly similar. Panels disregard the top-level domain (.com, .net, etc.) for this analysis.

You don’t need federal registration to satisfy this element. Common law trademark rights are sufficient, though they require more evidence: use in commerce, consumer recognition, advertising spend, and similar indicators. A USPTO registration makes this element straightforward.

2. The respondent has no rights or legitimate interests in the domain name.

The complainant makes a prima facie case, and then the burden shifts to the respondent to show they have a legitimate interest. Legitimate interests include using the domain for a bona fide offering of goods or services (before notice of the dispute), being known by the domain name, or making a legitimate noncommercial or fair use.

If the respondent is a competitor using the domain to sell competing goods, that’s not a legitimate interest. If the respondent is a domainer who registered the name speculatively and is offering it for sale, that’s not a legitimate interest either. If the respondent is an individual or business actually known by the name and using it for a genuine purpose, they may have a defense.

3. The domain name was registered and is being used in bad faith.

Both registration and use must be in bad faith. UDRP paragraph 4(b) lists four circumstances that show bad faith:

Registering the domain primarily for the purpose of selling it to the trademark owner at a price exceeding the registrant’s out-of-pocket costs
Registering the domain to prevent the trademark owner from reflecting its mark in a domain name, as part of a pattern of such conduct
Registering the domain primarily to disrupt the business of a competitor
Using the domain to intentionally attract internet users for commercial gain by creating confusion with the complainant’s mark

These four aren’t exhaustive. Panels can find bad faith based on other circumstances. Passive holding can constitute bad faith use if the circumstances suggest the domain was registered with a trademark owner’s mark in mind. The panel evaluates all the evidence together.

What does a UDRP case look like from start to finish?

Timeline and procedure

Here’s the typical sequence:

Complaint filed. The complainant files with WIPO or Forum, pays the fee, and submits evidence for all three elements.
Administrative review (3-5 days). The provider checks compliance and contacts the registrar to verify data and lock the domain.
Complaint forwarded to respondent. The respondent has 20 calendar days to respond.
Panel appointed (within 5 days of response deadline). A single panelist or three-member panel is assigned.
Decision issued (within 14 days of panel appointment). The panel issues a written decision granting or denying the complaint.
Implementation (10 business days after decision). If the complainant wins, the registrar transfers the domain after a 10-business-day waiting period. The respondent can file a federal lawsuit during this window to prevent the transfer.

Total timeline: 60 to 75 days from filing to transfer. That’s far faster than federal litigation, which takes 12 to 24 months or longer.

The evidence that wins cases

Strong UDRP complaints include:

Proof of trademark rights: registration certificate, use evidence, dates
Screenshots of the disputed domain and its current use
WHOIS records showing registration date and registrant
Evidence of bad faith: offers to sell, pattern of cybersquatting, use for competing or deceptive content
Communications between parties, especially payment demands

One client had a domain squatter register a variation of their company name and use it for a parked page with pay-per-click ads linking to competitors. The squatter also registered variations of two other brands: a clear pattern. We filed with WIPO. The squatter didn’t respond, and the panel transferred all three domains within 68 days.

If you suspect trademark infringement via domain registration, run a WHOIS lookup right away. Document the registrant, registration date, and how they’re using the domain. Take timestamped screenshots. This evidence goes straight into a UDRP complaint or federal lawsuit.

What is reverse domain name hijacking?

The risk of filing weak claims

The UDRP cuts both ways. If a panel finds you brought a case in bad faith when you knew you had no valid claim, they can declare reverse domain name hijacking (RDNH). It’s a public finding recorded in the published decision. It damages your credibility in future disputes and tells the legal community you overreached.

RDNH findings are rare, but they follow patterns: the complainant chases a generic term or common word the respondent legitimately owns, files despite knowing the respondent has a strong defense, or uses the UDRP to pressure a holder rather than fight real cybersquatting.

Before filing a UDRP complaint, honestly assess your chances on all three elements. If the domain uses generic terms and the respondent runs a legitimate business with it, you’ll likely lose and might face an RDNH finding.

When should you use the ACPA instead of the UDRP?

Federal court as an alternative

The Anticybersquatting Consumer Protection Act (15 U.S.C. Section 1125(d)) gives trademark owners a federal cause of action against cybersquatting. The ACPA offers money damages, broader discovery, and binding judicial precedent: advantages the UDRP lacks.

A plaintiff must prove the defendant had a bad faith intent to profit from registering, trafficking, or using a domain identical or confusingly similar to a distinctive or famous mark. The statute lists nine factors courts weigh for bad faith intent (Section 1125(d)(1)(B)(i)).

Statutory damages under the ACPA

The main advantage of the ACPA is statutory damages. Under Section 1117(d), a successful plaintiff can choose statutory damages of $1,000 to $100,000 per domain. No need to prove actual damages. For a cybersquatter with 10 infringing domains, potential exposure runs $10,000 to $1 million.

The ACPA’s damages are a stronger deterrent than the UDRP, which only transfers or cancels the domain with no monetary recovery. If you want to punish a cybersquatter, not just recover the domain, the ACPA is the right tool.

UDRP vs. ACPA: how to choose

Here’s what I tell clients:

Choose the UDRP when:

Speed matters and you want the domain transferred quickly
The case is straightforward (clear trademark, clear bad faith)
You don’t need money damages
The respondent is located in a foreign jurisdiction where enforcing a U.S. court judgment would be difficult
Budget is limited ($1,500 to $4,000 vs. $50,000+ for federal litigation)

Choose the ACPA (federal court) when:

You want money damages, not just the domain
The cybersquatter has a pattern of registering infringing domains and you want to stop all of them at once
You need discovery to identify the squatter (UDRP provides limited discovery; federal court has full subpoena power)
The respondent has assets in the United States
You want to establish judicial precedent that deters future squatters

Consider both when:

You file the UDRP for speed, while simultaneously preparing or filing a federal complaint for damages. The two proceedings can run in parallel, though the federal court can stay the case pending the UDRP outcome, or vice versa.

The Central District of California hears many ACPA cases, especially from LA and Orange County businesses. For more on brand defense, see our post on trademark infringement on social media. Local judges know domain dispute law and have ruled on interactions between UDRP and ACPA cases.

Before you file, check the squatter’s registration history via WHOIS and DomainTools. If they own multiple domains with well-known trademarks, document them all. A pattern strengthens both UDRP and ACPA cases.

What about new gTLDs and domain disputes?

The expanding domain space

Hundreds of new generic top-level domains (.shop, .app, .tech, .xyz, .brand) have opened doors for cybersquatters. A trademark owner with .com registered might find squatters in .store, .online, .io, and other extensions.

The UDRP applies to new gTLDs just like legacy domains. New gTLDs also fall under ICANN’s Uniform Rapid Suspension (URS) system, a faster alternative for straightforward cases. The catch: URS suspends rather than transfers domains, and requires clear and convincing evidence rather than the UDRP’s lower practical burden.

The gTLD boom means more to monitor and more squatting to fight. Defensive registration across all gTLDs is expensive and unrealistic for most businesses. Targeted monitoring and fast enforcement usually work better.

How do you protect your brand from domain squatters?

A practical protection plan

We recommend a three-part domain protection strategy:

Register strategically. Grab .com, .net, and relevant gTLDs for your industry. Tech companies should add .tech and .io. E-commerce means .shop and .store. You don’t need everything, just what customers will actually try.
Monitor continuously. Set up alerts for new domains with your trademark. MarkMonitor, CSC Digital Brand Services, and Clarivate’s CompuMark watch thousands of TLDs automatically.
Enforce promptly. The longer a squatter holds a domain, the stronger their position. They develop content to claim legitimate use or sell to a third party, both of which complicate things. Act within weeks, not months.

If someone registered a domain with your trademark and you want it back, gather evidence: WHOIS records, screenshots of the current content, any correspondence with the registrant, and your trademark certificate. Take that to a Los Angeles intellectual property lawyer to decide between UDRP, ACPA, or both. The choice depends on whether you prioritize speed, damages, or both, and where the registrant sits.

Domain Name Disputes: The UDRP Process for Trademark Owners