What Cybersquatting Is

Cybersquatting is registering a domain name that contains someone else's trademark, with bad-faith intent — usually to sell it back to the rights-holder, mislead users, or harm the brand. It has been a recognized problem since the mid-1990s, and there is a formal international process for resolving it.

The process is called the UDRP — the Uniform Domain-Name Dispute-Resolution Policy. ICANN created it in 1999. Every gTLD registrar agrees to enforce its rulings as a condition of accreditation. That means a UDRP decision against a domain holder is binding without going to court.

When UDRP Applies

UDRP applies to most gTLDs (.com, .net, .org, .info, and many new gTLDs). Many ccTLDs have their own equivalent processes (Nominet's DRS for .uk, AusRegistry for .au, etc.) — similar in spirit but with country-specific rules.

To win a UDRP case, the complainant must prove all three of the following:

  1. The domain is identical or confusingly similar to a trademark in which the complainant has rights.
  2. The current holder has no legitimate rights or interests in the name.
  3. The domain was registered AND is being used in bad faith.

All three are required. Failing to prove any one of them means the complaint fails.

What "Bad Faith" Looks Like

The UDRP defines specific markers of bad faith:

  • Registering primarily to sell the domain to the trademark holder for more than out-of-pocket costs.
  • Registering to prevent the trademark holder from using their mark in the corresponding domain.
  • Registering primarily to disrupt a competitor's business.
  • Using the domain to attract users for commercial gain by creating confusion with the trademark.
  • Registering many domains containing well-known trademarks (a pattern of squatting).

The respondent's defense usually argues legitimate interest — a planned business, a fan site, a generic dictionary use, or being a reseller of the trademark holder's products with proper authorization.

Where Cases Are Filed

Several arbitration providers handle UDRP cases. The biggest:

  • WIPO (World Intellectual Property Organization): the largest. Most cases land here.
  • The Forum (formerly NAF): US-based, second-largest.
  • CAC and ADNDRC: European and Asian alternatives.

Each provider has slightly different filing fees and panelist pools, but the process and the standards are the same.

The Cost

UDRP filing fees in 2026:

  • Single domain, single panelist: $1,500 (WIPO) — fastest and cheapest path.
  • Single domain, three panelists: $4,000 (WIPO) — used for high-stakes cases or when a more deliberate panel is preferred.
  • Multiple domains, single panelist: sliding scale, typically $1,500–4,500.
  • Legal representation: optional, but most complainants use a trademark or domain lawyer. Add $2,000–10,000 in legal fees depending on complexity.

Total realistic cost for a straightforward case with counsel: $3,500–8,000. Without counsel: $1,500–2,500.

Compare to negotiating to buy a squatted domain — premium .com squatters routinely demand $10,000–500,000. UDRP is dramatically cheaper when it applies.

The Timeline

From filing to decision, UDRP cases typically take 45–60 days:

  1. Day 0: Complaint filed and fee paid.
  2. Day 1–3: Provider notifies the registrar. The domain is locked from transfer during proceedings.
  3. Day 3–5: Respondent is formally notified.
  4. Day 5–25: Respondent has 20 days to file a response.
  5. Day 25–35: Panelist(s) appointed.
  6. Day 35–55: Panel reviews the case. May request additional submissions.
  7. Day 55–60: Decision issued.
  8. Day 60–70: If complaint succeeds, the registrar transfers the domain (or cancels the registration).

The respondent has 10 business days to file a court action contesting the decision. Most do not — once a UDRP loss is published, leverage shifts and most squatters move on.

What Happens If You Win

The panel can order one of two outcomes:

  • Transfer: the domain is transferred to the complainant. Most common when the complainant has clear trademark rights.
  • Cancellation: the registration is canceled and the domain returns to the available pool. Less common — usually requested when the complainant does not actually want the name, only wants the squatter to stop.

What Happens If You Lose

Losing a UDRP does not prevent legal action in court. You can still pursue trademark infringement claims through the regular legal system. But:

  • UDRP losses are part of the public record.
  • Court action is dramatically more expensive (usually $50,000+ in legal fees).
  • Outcomes are no more favorable than UDRP for legitimate trademark holders — the standards are similar.

The honest read: if you lose UDRP, your case was probably weak. Going to court rarely changes the underlying fact pattern.

When NOT to File a UDRP

  • You do not have a registered trademark. Common-law trademark rights can sometimes work, but registered marks make the case dramatically stronger. If you have no trademark, file one first.
  • The domain holder has a plausible legitimate use. A domain matching a generic dictionary word, used for an unrelated business, will not lose UDRP. The squatting must be both targeted and bad-faith.
  • The domain holder is also a trademark holder in a different geography. Two parties can both legitimately own the same trademark in different countries; UDRP cannot resolve who "deserves" the domain in those cases.
  • Reverse domain hijacking risk. If you are accused of using UDRP to muscle a legitimate domain holder, the panel may rule against you with explicit findings of bad faith complaint. This is rare but reputationally damaging.

The Practical Path

  1. Confirm you have a registered trademark in at least one major jurisdiction.
  2. Document the squatting: take screenshots, save WHOIS records, archive any extortionary emails.
  3. Send a polite cease-and-desist letter through counsel. Maybe 30% of cases resolve here without UDRP.
  4. If unresolved, file UDRP with WIPO. Choose single-panelist for cost efficiency unless the case is genuinely complex.
  5. Wait 45–60 days. If you have a clear case, you will win and the domain will be transferred.

Prevention: Cheaper Than Recovery

Filing UDRP is a recovery mechanism. Prevention is cheaper:

  • Register your trademark variants proactively (.com, .net, .org, common typos).
  • Enroll your trademark in the Trademark Clearinghouse so you get notified when matching domains are registered in new gTLDs.
  • Use brand-monitoring tools that watch new domain registrations matching your brand.
  • Act early — the longer a squatter holds a domain, the harder the recovery becomes.

UDRP is a powerful, well-tested tool. It works as designed, and for legitimate trademark holders, it is the right answer to most squatting situations. But the strongest position is the one where you never need it.