Domain Name Disputes

A cybersquatted domain rarely needs a federal lawsuit to resolve — it needs a properly documented UDRP complaint filed with the right provider, in the right form, before the registrant has a chance to move it. Getting that sequence right is what separates a domain recovered in six weeks from one still sitting with the wrong registrant a year later.

Confirm You Have Standing to File

Step One — before anything is filed

When a third party has registered a domain name that incorporates your trademark, often the fastest and most cost-effective way to obtain a transfer of that domain is an administrative proceeding under ICANN’s Uniform Domain Name Dispute Resolution Policy (UDRP). Every registrant of a .com, .net, .org, or other generic top-level domain has contractually agreed to submit to this procedure as a condition of registration.

The UDRP itself is a single, uniform policy. What differs is the dispute resolution provider administering the case — most often the WIPO Arbitration and Mediation Center in Geneva, or Forum (formerly the National Arbitration Forum) in Minneapolis. Our Miami trademark attorneys have filed and won cases before both.

A UDRP complaint can only be brought by a party that holds rights in a trademark or service mark. Before anything is filed, we confirm the client can satisfy this threshold requirement, because a complaint filed without adequate trademark rights will be denied and may result in a finding of reverse domain name hijacking.

• Registered trademarks: A Principal Register registration (U.S. or foreign) is prima facie evidence of rights and satisfies this element without further proof. Supplemental Register registrations carry little weight, since they reflect no finding of distinctiveness.
• Florida state registrations: A Florida trademark registration under Fla. Stat. Ch. 495 is helpful evidence but, standing alone, is generally not sufficient — state registrations issue without substantive examination, so panels expect supporting evidence of use and consumer recognition.
• Unregistered (common law) marks: Panels recognize common law rights, but the complainant must prove the mark has become a distinctive identifier — duration and nature of use, sales and advertising figures, media coverage, and consumer surveys are all relevant. The more descriptive the mark, the more evidence is required.
• Personal names: Protected under the UDRP only if actually used as a trademark in commerce — fame alone is not enough.
• Timing of rights: For the first element, it doesn’t matter whether the domain was registered before the complainant’s trademark rights arose. For bad-faith registration, the registrant generally must have been aware of the mark when it registered the domain — if the domain predates the mark, a UDRP complaint will almost always fail, and an ACPA lawsuit based on a later bad-faith re-registration may be the better vehicle.

Build the Evidence for All Three Elements

Step Two — there is no discovery, no hearing, and no live testimony

The complainant bears the burden of proving each of the following, and panels decide the case on the papers alone — so the evidence must be assembled before filing.

• The domain name is identical or confusingly similar to the complainant’s mark. The top-level extension is disregarded, as are hyphens, plural forms, and generic or descriptive additions (“official,” “store,” geographic names). A domain containing the entire mark, or its dominant portion, ordinarily satisfies this element. Typosquats and homoglyphs also qualify.
• The registrant has no rights or legitimate interests in the domain name. Because this requires proving a negative, the complainant need only make a prima facie showing, after which the burden shifts to the registrant. We typically document that the registrant is not licensed, is not commonly known by the name, is not making a bona fide offering, and is not making legitimate noncommercial or fair use.
• The domain name was registered and is being used in bad faith. Both registration and use must be in bad faith. Evidence includes offers to sell the domain above out-of-pocket costs, a pattern of registering trademark-based domains, use to divert traffic or for phishing/malware, concealed contact information, and the fame of the mark. Even a domain resolving to nothing can satisfy this element under the “passive holding” doctrine.

Pre-filing investigation

Before filing, we typically obtain current and historical WHOIS records (including archived records predating GDPR redaction, where available), dated screenshots of the website — including Wayback Machine archives — DNS and MX records showing whether the domain is configured for email, evidence of the registrant’s other domain registrations, and copies of any correspondence with the registrant. A pre-filing demand letter is optional: it can produce a voluntary transfer, but it also gives the registrant an opportunity to move the domain, and any response — such as an offer to sell — becomes useful evidence of bad faith.

Preparing and Filing the Complaint

Step Three — required contents, and choosing WIPO or Forum

The UDRP Rules (Paragraph 3) prescribe the required contents of a complaint, and each provider’s Supplemental Rules add formatting requirements. A compliant complaint must identify the complainant, the respondent, each disputed domain and its registrar, and the trademark(s) at issue; describe the merits of each of the three elements with reference to the Rules and prior panel decisions; specify the remedy sought; elect a single- or three-member panel; disclose any related legal proceedings; submit to a Mutual Jurisdiction for any court challenge; include the required certification; and annex all documentary evidence with an indexing schedule.

Multiple domain names held by the same registrant can be covered by a single complaint. Where a cybersquatter has used aliases or privacy services, both providers allow a complainant to argue the registrations are under common control and should be consolidated. The proceeding is conducted in the language of the registration agreement, though a complainant may request English where the website content, correspondence, or burden of translation supports it — an issue that arises frequently and must be addressed in the complaint. Other ICANN-approved providers include the Czech Arbitration Court, the Canadian International Internet Dispute Resolution Centre, and the Asian Domain Name Dispute Resolution Centre, though U.S. complainants rarely use them absent a regional connection.

File, Pay the Fee, and Lock the Domain

Step Four — the lock is one of the UDRP’s most valuable features

The complaint is filed electronically with the chosen provider along with a fixed fee, which is not refunded if the complainant loses and is not recoverable from the respondent. Within two business days of the provider’s verification request, the registrar must confirm the registrant’s identity and contact details — including data hidden behind a privacy or proxy service — and lock the domain so it cannot be transferred, deleted, or modified for the duration of the proceeding. This lock prevents the registrant from “cyberflying” the domain to evade the proceeding.

Because registrar verification frequently reveals a registrant name different from the redacted public WHOIS record, the provider will invite the complainant to file an amended complaint naming the true registrant — a routine step that does not require a new fee.

The Proceeding

Step Five — the timeline is set by the Rules and is largely the same at both providers

In practice, an uncontested single-panelist case is usually decided in about six to eight weeks from filing, and the domain is in the complainant’s control within roughly two to three months. Contested cases, three-member panels, language disputes, and supplemental filings extend the timeline modestly.

• Default: Most respondents do not file a Response. A default does not automatically result in a transfer — the panel still must find all three elements proven — but it allows the panel to draw reasonable inferences from silence.
• Supplemental filings: Neither the Policy nor the Rules give a right to reply. Forum allows one Additional Submission per party for a fee; WIPO accepts unsolicited filings only in exceptional circumstances.
• Settlement: The parties may settle at any time, and both providers will suspend the proceeding to permit a settlement transfer.
• Expedited processing at WIPO: Effective March 2026, WIPO offers priority processing for single-panelist cases involving up to five domains, targeting a decision within roughly one month, for a USD 4,000 fee.

The Decision and Implementation

Step Six — transfer, cancellation, or denial

If the complaint succeeds, the panel orders the domain transferred (or cancelled, though transfer is almost always the better choice, since cancellation returns the domain to the public pool). The registrar implements the transfer after ten business days unless the respondent provides documentation that it has filed suit against the complainant in a court of Mutual Jurisdiction, in which case the registrar holds the domain pending the outcome of the litigation.

If the complaint is denied, the domain remains with the registrant. The decision does not bind any court, and the complainant remains free to pursue an ACPA action in federal court — but a denial is published and may be cited by the registrant in later proceedings, so the decision to file should follow a candid assessment of the merits. All decisions from both providers are published and searchable, so a prior finding of bad faith against a registrant becomes public evidence usable in future cases.

What the UDRP Cannot Do

Its limits are deliberate

Defending a UDRP Complaint

For registrants who receive one

We also represent domain name registrants who receive a UDRP complaint. A registrant has only twenty days to respond, and a well-prepared Response can defeat a complaint by showing legitimate interests — a bona fide business, a personal or business name, a generic or descriptive term, a criticism or fan site, or a domain registered before the complainant’s mark existed — or by demonstrating that the complainant is attempting to seize a domain to which it has no superior right. Where the complaint is abusive, we ask the panel for a finding of reverse domain name hijacking. If a transfer is ordered, the registrant must file suit within ten business days to prevent implementation, and we evaluate whether an ACPA declaratory judgment action is warranted.

Because the UDRP is a fixed-fee, paper-based procedure, we are able to quote most single-panelist cases on a flat-fee basis that includes the pre-filing investigation, preparation of the complaint and annexes, any amended complaint required after registrar verification, and management of the case through implementation of the transfer.

Full Capability

Our Domain Name Dispute Services Include