Cybersquatting: How a UDRP Domain Name Dispute Works, and When Buying Is Cheaper

Cybersquatting is registering a domain name that matches somebody else's trademark, in bad faith, usually to resell it to them or to trade off their reputation. In the United States you have two routes against it: a UDRP administrative complaint, which costs $1,500 in WIPO filing fees and takes roughly 45 to 60 days but only transfers or cancels the name, or a federal lawsuit under the Anticybersquatting Consumer Protection Act, which can award $1,000 to $100,000 per domain but costs far more to run. Neither route works if the registration predates your trademark rights, which is why most businesses in this situation end up buying the domain instead.

The situation usually arrives the same way. You announce a company, launch a product, or file a trademark, and within a week somebody has registered the matching .com and pointed it at a page offering to sell it to you for $8,000. Or you discover that a name you have been trading under for two years belongs to a stranger who has never built anything on it. The instinct is to treat this as theft and look for a way to take it back. Sometimes that works. More often the law is narrower than people expect, and the fastest resolution is commercial rather than legal.

What follows is a practical map of the options and their real costs. It is general information about how these systems work, not legal advice, and if money or a live brand is at stake you want a trademark lawyer rather than an article.

What is cybersquatting?

Cybersquatting is the bad faith registration of a domain name that corresponds to somebody else's trademark. The definition turns entirely on intent. Registering coca-cola-deals.com in order to sell it to Coca-Cola is cybersquatting. Registering a generic dictionary word that a company later adopts as a brand is not, even if that company would very much like to have it.

The distinction matters more than any other point in this article, because it is where most complaints fail. Domain investing is a legal business. Somebody can hold a portfolio of ten thousand names, refuse to sell you one at your price, and be doing nothing wrong. The question a panel asks is not whether the holder is being unhelpful. It is whether they registered the name because of your mark.

Volume is genuinely high. The World Intellectual Property Organization handled 6,282 domain disputes in 2025, its highest total on record, up from 4,204 in 2020. Since the system began in 1999, trademark owners have filed more than 80,000 cases with WIPO and recovered more than 143,000 domain names through them. The majority of complaints come from the United States, France and the United Kingdom.

Is cybersquatting illegal in the United States?

Yes, under the Anticybersquatting Consumer Protection Act, which Congress passed in 1999 and which sits inside the Lanham Act. It gives a trademark owner a federal cause of action against somebody who registers, traffics in, or uses a domain name that is identical or confusingly similar to a distinctive mark, with a bad faith intent to profit from it.

The remedy is what makes the ACPA different from the administrative route. A court can order the domain transferred or cancelled, and it can award statutory damages of between $1,000 and $100,000 per domain name in place of proving actual losses. That per-domain figure is why the statute bites hardest against people who registered dozens of variations of the same brand. The trade-off is cost and time: this is federal litigation, so you are looking at a lawyer, a filing, and a timeline measured in many months rather than weeks. If you are weighing it seriously, it is worth reading how federal courts have actually applied it, because the bad faith factors the statute lists have been interpreted quite specifically over twenty-five years.

How does a UDRP domain name dispute work?

The Uniform Domain Name Dispute Resolution Policy is an administrative process every registrar of a generic extension is contractually bound to honor. You file a complaint with an approved provider, most commonly WIPO, the registrar locks the domain so it cannot be transferred away mid-case, a panelist reads both sides on the papers, and a decision comes back. There are no hearings, no discovery and no witnesses.

To win, you have to prove all three of the following. Not two. All three.

Element	What you must show	Where complaints usually fail
1. Confusing similarity	The domain is identical or confusingly similar to a trademark or service mark in which you have rights	Rarely fails, but you need actual trademark rights, registered or established through use, not just a company registration
2. No rights or legitimate interests	The holder has no legitimate claim to the name	Fails when the holder is using it descriptively, was known by that name, or the string is a common word
3. Bad faith registration and use	The name was both registered in bad faith and is being used in bad faith	Fails whenever the registration predates your trademark rights, because nobody can register in bad faith against a mark that did not yet exist

That third element is conjunctive, and it ends more cases than the other two combined. If somebody registered the name in 2014 and you started trading under it in 2023, you will lose, however inconvenient the situation is. The name was not registered to target you, because in 2014 there was no you to target.

The one remedy available is transfer or cancellation of the domain. A UDRP panel cannot award you money, cannot order the holder to stop anything else, and cannot punish them.

How much does a UDRP cost and how long does it take?

WIPO publishes its fee schedule, and these are the filing fees only. Your lawyer's time is separate and is usually the larger number.

Case type	WIPO filing fee	Who pays
1 to 5 domain names, single panelist	$1,500	Complainant
6 to 10 domain names, single panelist	$2,000	Complainant
1 to 5 domain names, three-member panel	$4,000	Split if the respondent elects the three-member panel
6 to 10 domain names, three-member panel	$5,000	Split if the respondent elects the three-member panel
Priority service, decision within one month of commencement	$4,000	Complainant
Respondent request to expedite a standard single-panel case	$2,500	Respondent

A standard case runs roughly 45 to 60 days from filing to decision. WIPO introduced the priority service in 2026 for complainants who need a ruling inside a month, which matters when a squatted domain is actively intercepting customers during a launch. Fees were verified in August 2026 and WIPO updates them, so confirm the current schedule before you budget.

Success rates look encouraging until you understand what drives them. Roughly 5 percent of WIPO disputes are denied and about 15 percent settle before a decision is issued. That leaves a high transfer rate, but it reflects self-selection rather than a low bar: trademark lawyers decline the weak cases, so the ones that reach a panel are mostly the clear ones. Your own odds depend entirely on the three elements above, not on the aggregate statistic.

What happens if you file and lose

You lose the filing fee and the domain stays where it is. In a worse case, the panel finds reverse domain name hijacking, which is the formal term for using the UDRP in bad faith to try to take a name you have no right to. It is aimed squarely at companies that adopt a brand matching a domain somebody has held for years and then try to litigate it away rather than pay for it.

Panels issued an RDNH finding in about 1.3 percent of decisions across all providers in the second quarter of 2025, so it is uncommon. There are no damages attached to it and no bar on filing again. The consequence is reputational: the finding sits in a public decision under your company's name permanently, and domain investors circulate the list.

When buying the domain is cheaper than fighting for it

This is the part nobody wants to hear and it is usually correct. Compare the three routes honestly.

Route	Typical direct cost	Time	What you get	Works when
Buy the domain	Hundreds to low five figures	Days to a few weeks	The name, with certainty	Almost always, if the holder will sell
UDRP complaint	$1,500 filing plus legal fees	45 to 60 days	Transfer or cancellation only	Clear bad faith targeting your existing mark
ACPA lawsuit	Substantial legal fees	Many months	Transfer plus $1,000 to $100,000 per domain	Serious, repeated, provable squatting worth pursuing

If a holder is asking $3,500 for a name and a UDRP would cost you $1,500 in fees plus several thousand in legal time, with a genuine chance of losing on element three, the arithmetic favors buying it. You also get the name in a week rather than two months, and you avoid the possibility of spending the money and still not having it. Work out what the name is actually worth to you before you decide, and check it against an independent appraisal rather than the seller's number.

Legal action is the right call in a narrower set of cases: somebody has registered a batch of variations on your brand, they are running ads or phishing on them, they have a documented history of doing this, or the asking price is so far above market that paying it would invite the same thing again next quarter.

What is typosquatting, and does the UDRP cover it?

Typosquatting is registering deliberate misspellings of a well-known domain: a doubled letter, a dropped vowel, a transposed pair, or a swapped extension. The intent is to capture the fraction of traffic that mistypes the real address, then monetize it through ads, affiliate redirects, or in the worst cases credential phishing and invoice fraud against the brand's own customers.

It is covered, and it tends to be one of the more straightforward categories to win. A misspelling of an established trademark is confusingly similar almost by definition, the holder rarely has any legitimate interest in a string that is only meaningful as an error, and bad faith is easy to demonstrate when the page carries ads for the brand's competitors. Brands that get hit repeatedly usually respond by defensively registering the obvious variants themselves, which is cheaper per name than any dispute.

What to do first if somebody has registered your business name

Before you talk to anybody, spend twenty minutes establishing the facts. Almost every bad decision in this area comes from acting on an assumption about who holds the name and why.

1. Find out who holds it and since when. Run the name through ICANN's free lookup at lookup.icann.org. The creation date is the single most important fact you will find, because a registration predating your trademark rights removes the legal route entirely. Our guide to finding out who owns a domain covers what is public and what is redacted.
2. Establish what trademark rights you actually have. A state business registration is not a trademark. Rights come from a federal registration or from demonstrable use in commerce. Without them, element one fails before you start.
3. Look at what the domain is doing. A parked page with generic ads, a page offering it for sale to you specifically, an active competing business, or nothing at all. These point to very different conclusions, and screenshots taken now are evidence later.
4. Get a valuation before you get a quote. If you decide to buy, knowing the market range first stops you anchoring on the seller's opening number.
5. Approach through a third party if the name matters. An enquiry from your company email tells the holder exactly how much you need it, and the price moves accordingly. This is standard practice on buying a domain somebody else owns, not a trick.
6. Take advice before you send a demand letter. An aggressive letter to a holder with a legitimate claim can harden a $2,000 negotiation into a refusal to sell at any price, and it can be quoted back at you in an RDNH finding.

How to stop it happening again

The cheapest protection is timing. Register your domains before you announce the name, not after. Trademark filings are public, and there are people who monitor new applications specifically to register the matching domains. The gap between filing and announcing is the window that gets exploited.

Beyond that, defensive registration is cheap relative to a dispute. Take the .com, the extension your customers actually expect, and the one or two misspellings a normal person would produce. That is a few hundred dollars a year against a $1,500 filing fee plus counsel. If you are still naming and have not committed yet, checking what is available across extensions before you settle on a name is far cheaper than solving it afterward, and a domain name generator that checks availability live will steer you toward names that are genuinely free rather than ones you will have to fight for.

NameBest is a name generator, not a law firm, and not a registrar or a marketplace either. We can generate a name nobody holds and tell you roughly what class it sits in. We do not file disputes and we cannot advise you on your trademark position. For that, find a lawyer who does domain work specifically, because the field is narrow and the general commercial litigator down the road probably has not read a UDRP decision.