namech

Last Updated on Oct 25, 2026

Domain Name Disputes: How the UDRP Works, Costs and How to Win

A domain name dispute is a conflict over who has the right to own or use a domain name, most often when a trademark owner believes someone registered a name that copies its brand. Most disputes are settled through the Uniform Domain-Name Dispute-Resolution Policy (UDRP), a fast administrative process that costs from $1,500 in WIPO filing fees for one to five domains and usually finishes within about two months. Court action under laws such as the U.S. Anticybersquatting Consumer Protection Act (ACPA) is the slower, more expensive alternative, but it is the only route to money damages.

This guide explains how domain name disputes work, what each side has to prove, what they cost, and how to avoid one in the first place.

Updated October 2026.

A domain name dispute happens when two parties both claim a right to the same domain name. Only one person or company can register a given domain at a time, so when a name matches a brand, a personal name or a well-known product, conflicts follow.

The most common dispute involves a trademark owner on one side and a domain registrant on the other. The trademark owner says the registrant copied its mark to profit from its reputation. The registrant says it registered the name first, for a legitimate reason. When the registrant has no real reason to hold the name and is exploiting someone else’s brand, the practice is called cybersquatting.

Domain name disputes also include:

  • Typosquatting: registering misspellings of a brand (for example, swapping or doubling a letter) to catch mistyped traffic.
  • Combosquatting: adding a generic word to a brand, such as “login”, “support” or “shop”, often for phishing.
  • Ownership disputes: business partners, former employees or web agencies arguing over who controls a company’s domain. These are usually contract or property questions handled by courts, not by the UDRP.
  • Transfer disputes: disagreements between registrars about an unauthorized transfer, which ICANN handles under a separate Transfer Dispute Resolution Policy.

Domain name disputes are more common than ever. The World Intellectual Property Organization (WIPO) Arbitration and Mediation Center reported that it handled more than 6,200 domain name cases in 2025, its highest annual caseload on record. Over the 25 years since the UDRP launched, WIPO has resolved more than 80,000 cases, including over 70,000 involving generic top-level domains and nearly 10,000 involving country-code domains.

According to WIPO, most complainants come from the United States, France and the United Kingdom. Country-code domains such as .co, .au, .ai and .io were among the most disputed ccTLDs in 2025, which tracks with how popular those extensions have become with startups. WIPO also highlighted phishing and payment fraud cases, including one in which a lookalike domain was used in an attempt to divert about USD 800,000 to a fraudulent bank account.

The Uniform Domain-Name Dispute-Resolution Policy (UDRP) is a policy created by ICANN, the organization that coordinates the domain name system. Every registrar of a generic top-level domain, such as .com, .net, .org or the newer gTLDs, must include the UDRP in its registration agreement. By registering a domain, the registrant agrees to take part in a UDRP proceeding if someone files a complaint.

A UDRP case is handled by an ICANN-approved dispute resolution provider. As of October 2026, ICANN lists five: WIPO, Forum (formerly the National Arbitration Forum), the Canadian International Internet Dispute Resolution Centre (CIIDRC), the Asian Domain Name Dispute Resolution Centre (ADNDRC) and the Czech Arbitration Court. WIPO handles the largest share of cases.

The UDRP process step by step

  1. Complaint: The trademark owner (the complainant) files a complaint with a provider and pays the fee.
  2. Registrar lock: The provider asks the registrar to confirm the registrant’s details and lock the domain so it cannot be transferred during the case.
  3. Commencement: The provider checks the complaint and formally notifies the registrant (the respondent).
  4. Response: Under WIPO’s process, the respondent has 20 days to file a response, with an optional automatic four-day extension.
  5. Panel decision: One or three independent panelists review the written filings. There are no hearings. The panel sends its decision within 14 days of its appointment.
  6. Implementation: If the panel orders a transfer or cancellation, the registrar waits 10 business days before acting. If the respondent files a lawsuit in that window, the transfer is put on hold until the court case ends.

WIPO says a case without procedural problems should normally be completed within two months of receiving the complaint. Proceedings are conducted in the language of the registration agreement unless the panel or the parties decide otherwise.

Paragraph 4(a) of the UDRP requires the complainant to prove all three of these elements:

  1. The domain name is identical or confusingly similar to a trademark or service mark in which the complainant has rights.
  2. The registrant has no rights or legitimate interests in the domain name.
  3. The domain name was registered and is being used in bad faith.

If any one of the three is missing, the complaint fails. A complainant with a registered trademark usually clears the first element easily. The second and third elements are where most cases are won or lost.

Paragraph 4(b) of the UDRP lists four examples of bad faith registration and use. The list is not exhaustive, but panels rely on it heavily:

  • The registrant acquired the domain mainly to sell it to the trademark owner or a competitor for more than its documented out-of-pocket costs.
  • The registrant registered the domain to block the trademark owner from using it, as part of a pattern of such conduct.
  • The registrant registered the domain mainly to disrupt a competitor’s business.
  • The registrant uses the domain to attract visitors for commercial gain by creating confusion with the complainant’s mark, for example with lookalike pages, pay-per-click ads or counterfeit products.

Panels also treat phishing, email impersonation and fraud as clear evidence of bad faith, and they increasingly see lookalike domains used for invoice scams.

Paragraph 4(c) of the UDRP gives registrants three main ways to show rights or legitimate interests in a domain name:

  • Before receiving any notice of the dispute, the registrant used the domain, or made demonstrable preparations to use it, for a bona fide offering of goods or services.
  • The registrant is commonly known by the domain name, even without owning a trademark.
  • The registrant makes a legitimate noncommercial or fair use of the domain, such as genuine criticism or commentary, without intent to mislead consumers for gain.

Registering a dictionary word for its ordinary meaning is not bad faith on its own. Timing matters too. If the domain was registered before the complainant’s trademark rights existed, it is usually hard to show bad faith registration.

If a panel finds that a trademark owner brought a complaint knowing it could not succeed, it can declare Reverse Domain Name Hijacking. That finding is a public reprimand, not a financial penalty, but it can deter abusive complaints.

UDRP costs are low compared with litigation. These are WIPO’s published UDRP fees, paid by the complainant:

Case sizeSingle panelistThree-member panel
1 to 5 domain names$1,500$4,000
6 to 10 domain names$2,000$5,000
More than 10 domain namesSet in consultation with WIPOSet in consultation with WIPO

Respondents can request a three-member panel, in which case they pay half of the higher fee. Lawyer fees are extra and are not recoverable in a UDRP case. The panel can only transfer the domain, cancel it or deny the complaint. It cannot award money or legal costs.

Court cases cost far more. In the United States, ACPA lawsuits involve discovery, depositions and attorney time that can run well into five or six figures. Because of that gap, it rarely makes sense to fight over a low-value domain in court when the UDRP or a negotiated purchase is available.

The UDRP is the main tool, but not the only one. The right route depends on the domain extension, the remedy you want and how strong your case is.

Uniform Rapid Suspension (URS)

The Uniform Rapid Suspension System is a faster, cheaper procedure built for clear-cut cybersquatting in the new gTLDs introduced since 2013 and some other TLDs whose registries adopted it. It does not apply to .com. The complainant must prove its case by clear and convincing evidence, a higher bar than the UDRP. The only remedy is suspension: the domain points to an informational page until it expires. The domain is not transferred to the complainant.

Country-code domain policies

Country-code domains (ccTLDs) such as .uk, .ca, .de or .au set their own rules. Some use the UDRP or a local variant, often administered by WIPO, while others run separate systems with different evidence standards and remedies. Always check the registry’s dispute policy before filing.

Court action under the ACPA

In the United States, the Anticybersquatting Consumer Protection Act of 1999 (15 U.S.C. § 1125(d)) lets trademark owners sue anyone who registers, traffics in or uses a domain name confusingly similar to a distinctive mark with a bad faith intent to profit. Courts can order the domain transferred and can award statutory damages of $1,000 to $100,000 per domain name. When the registrant cannot be found, the ACPA allows an in rem action against the domain itself, filed where the registry or registrar is located.

Several early cases set the tone for how courts and panels handle domain conflicts:

– candyland.com: Hasbro, owner of the Candy Land board game trademark, obtained a court order in the 1990s stopping an adult entertainment company from using the domain, one of the first cases to treat a domain as a trademark issue. – mcdonalds.com: A journalist registered the domain in 1994 to show how unprepared big brands were for the web. He handed it over after McDonald’s agreed to make a charitable donation. – peta.org: A registrant used the domain for a parody site called “People Eating Tasty Animals”. A U.S. federal appeals court ruled in 2001 that the registration infringed the PETA trademark and violated the ACPA. – madonna.com: In 2000, a WIPO panel ordered the domain transferred to the singer after finding it had been used for an adult site, an early high-profile UDRP decision. ## How can you avoid a domain name dispute?

Whether you are registering a domain or protecting a brand, a few checks up front prevent most problems.

If you are registering a new domain

  • Search trademark databases, such as the USPTO’s Trademark Search system or WIPO’s Global Brand Database, before you commit to a name.
  • Run a domain name check across extensions and use Namechk to see whether the same name is already used as a username on social networks, which is often a sign of an existing brand.
  • Avoid names that copy or closely imitate a known brand, including misspellings and brand-plus-keyword combinations.
  • If you need fresh ideas that are less likely to collide with existing marks, try the domain name generator.
  • Keep evidence of when and why you chose the name, such as business plans or early versions of your site.

If you are protecting a brand

  • Register your core brand on the main extensions you care about, plus obvious misspellings if typosquatting is a risk. Our guide to top-level domains explains which extensions matter.
  • Turn on auto-renew and registrar lock so your domains do not expire and get snapped up.
  • Monitor new registrations that contain your brand, especially lookalikes used for phishing.
  • Keep domains registered in the company’s name, not an employee’s or agency’s account, to avoid ownership disputes later.

A UDRP complaint is a good fit when you own a trademark, the domain clearly copies it, and the owner is using it to profit from confusion, sell it to you or run a scam. Many trademark owners file these themselves using WIPO’s model complaint, although an experienced domain lawyer improves the odds in contested cases.

A lawyer and possibly a lawsuit make more sense when you need money damages, when the dispute involves a contract or business partnership, or when the domain is valuable enough to justify the cost. For a weak case, where the domain was registered before your trademark existed or uses a common word, consider buying the domain through an escrow service instead.

What is a domain name dispute?

A domain name dispute is a conflict over who has the right to own or use a domain name. Most involve a trademark owner who says a registrant copied its brand in bad faith, known as cybersquatting. These disputes are usually resolved through the UDRP administrative process or, less often, through a court case under laws such as the U.S. Anticybersquatting Consumer Protection Act.

How long does a UDRP case take?

A UDRP case normally takes about two months from the date the provider receives the complaint, according to WIPO. The respondent has 20 days to reply, the panel issues its decision within 14 days of appointment, and the registrar then waits 10 business days before transferring or cancelling the domain, in case the losing registrant files a lawsuit.

How much does it cost to file a UDRP complaint?

At WIPO, a UDRP complaint covering one to five domain names costs $1,500 with a single panelist or $4,000 with a three-member panel. Six to ten domains cost $2,000 or $5,000. Lawyer fees are extra and cannot be recovered, because UDRP panels can only transfer or cancel domains, not award money.

Can I get money damages through the UDRP?

No. A UDRP panel can only order the domain transferred to the complainant, cancel it, or deny the complaint. It cannot award damages or legal costs. Trademark owners in the United States who want money must sue under the Anticybersquatting Consumer Protection Act, which allows statutory damages of $1,000 to $100,000 per domain name.

What is the difference between the UDRP and the URS?

The UDRP can transfer a domain to the trademark owner and applies to all generic top-level domains, including .com. The Uniform Rapid Suspension System (URS) is faster and cheaper but only suspends the domain until it expires, requires clear and convincing evidence, and applies mainly to new gTLDs, not to .com.

Can someone take my domain if I registered it first?

Registering first is a strong defense but not an absolute one. A trademark owner must prove the domain is confusingly similar to its mark, that you have no legitimate interest in it, and that you registered and used it in bad faith. If your registration predates the trademark or you use the name for a genuine business, a UDRP complaint will usually fail.

What is reverse domain name hijacking?

Reverse domain name hijacking is when a trademark owner uses the UDRP in bad faith to try to take a domain from its legitimate owner, for example by filing a complaint it knows cannot succeed. A panel can formally declare reverse domain name hijacking in its decision. The finding is public but carries no fine or damages under the UDRP itself.

shape