--- title: "UDRP and Domain Trademark Risk: How to Buy Safely" description: "UDRP explained: what a complainant must prove, how bad faith is judged, what a case costs, and how to check a domain for trademark risk before you buy." url: https://gritbrokerage.preview.multisites.ai/guides/domain-trademark-udrp-risk publisher: Grit Brokerage contact: https://gritbrokerage.preview.multisites.ai/contact offer: https://gritbrokerage.preview.multisites.ai/inquiry --- # Domain Names and Trademarks: UDRP, Cybersquatting, and How to Buy Safely The UDRP is a fast, low-cost ICANN process that lets a trademark owner ask a panel to transfer a domain name. The owner must prove three things: the name is confusingly similar to its mark, you have no legitimate interest, and you registered and used it in bad faith. Owning a brand word alone is not enough. For owners and buyersUpdated October 14, 202611 min read 01 ## Three elements, all required A complainant must show a confusingly similar name, no rights or legitimate interests, and bad faith registration and use. Failing one element loses the case. 02 ## Transfer or cancel only A UDRP panel can transfer or cancel a domain. It cannot award money or legal fees. 03 ## Resale is not bad faith by itself WIPO panels say buying a name to resell it, even at a profit, is not bad faith unless it targets a trademark owner. 04 ## Court is a separate track Under the US ACPA, a court can award $1,000 to $100,000 per domain name in statutory damages. 05 ## Check before you pay A trademark search, a history check and a clean contract cost far less than a dispute. This guide explains how domain names and trademarks collide, and how to stay on the right side of the line. > **This is not legal advice.** Trademark and domain law depends on your facts, your country and the mark involved. If a dispute is live, or if you plan to build a brand on a name that matches someone’s mark, talk to a trademark lawyer. ## What is the UDRP and how does it work? The UDRP is the Uniform Domain-Name Dispute-Resolution Policy. It is an ICANN policy that lets a trademark owner ask an approved provider to transfer or cancel a domain name. It covers generic extensions such as .com and .net, and some country-code extensions that have adopted it. Registrants agree to it in their registration terms. WIPO is the best-known provider. Its guide says a case with no procedural problems normally finishes within about two months of WIPO receiving the complaint. A panel of one or three people decides the case on written filings. There are no live hearings in the usual case. The process in short: 1. The trademark owner files a complaint with a provider such as WIPO. 2. The provider notifies the registrant, who can file a response. 3. A panel reviews the written filings. 4. The panel orders the name transferred, cancelled, or leaves it alone. 5. The registrar waits ten business days before acting, which gives the loser time to sue. The UDRP is not a court. It cannot award damages or legal fees. The remedy is limited to transfer or cancellation, and the policy says either side can go to court before or after. Plain-English definitions are in our glossary: [UDRP](https://gritbrokerage.preview.multisites.ai/glossary/udrp), [bad faith](https://gritbrokerage.preview.multisites.ai/glossary/bad-faith) and [confusingly similar](https://gritbrokerage.preview.multisites.ai/glossary/confusingly-similar). ## Can a company take my domain because of its trademark? Only if it proves three things, and it must prove all three. Having a trademark that resembles your domain is not enough. Paragraph 4(a) of the policy sets the test: Element What the complainant must show 1\. Confusing similarity The domain is identical or confusingly similar to a trademark or service mark in which the complainant has rights 2\. No legitimate interest You have no rights or legitimate interests in the name 3\. Bad faith You registered the name and are using it in bad faith The first element is a low bar. If the domain contains the mark, a panel usually treats it as confusingly similar. The real fights are over elements two and three. For element two, the policy lists ways to show a legitimate interest. You may have used the name, or made demonstrable plans to use it, for real goods or services before any notice of the dispute. You may be commonly known by the name. Or you may make a legitimate noncommercial or fair use of it. A name made of a common word can be a good defense. WIPO Overview 3.1, section 2.10.1, says registering a dictionary word does not by itself create rights. It also says use that does not trade off the complainant’s mark, even a plain landing page, may support a legitimate interest. Any sign that you targeted the brand weakens that defense. ## What counts as bad faith? Bad faith means you targeted the trademark owner. Paragraph 4(b) lists four examples: - **Resale to the mark owner.** You registered or acquired the name mainly to sell it to the trademark owner or a competitor for more than your documented out-of-pocket costs. - **Blocking.** You registered it to stop the owner from using its mark in a domain, and you have done this repeatedly. - **Disruption.** You registered it mainly to disrupt a competitor’s business. - **Commercial confusion.** You used it to attract visitors for gain by creating confusion with the mark. The list is not complete. Panels also look at the timing of the registration, the website content, the extension, and whether you ignored obvious signs the name was someone’s brand. Two points matter for anyone who buys and sells names. **Resale is not automatically bad faith.** WIPO Overview 3.1, section 3.1.1, says registering a domain for later resale, even for profit, is not bad faith by itself. The analysis is fact-specific. Panels treat a “legitimate speculation” defense with skepticism when the mark is highly distinctive or famous. Offers to sell above your costs must target a trademark owner to count under the policy. **Timing matters.** Under section 3.8.1, a registration that predates the complainant’s trademark rights normally cannot be bad faith. There are exceptions in section 3.8.2, such as registering a name right after a merger announcement, using insider knowledge, or registering after a product launch gets press. Panels have also updated their views recently. WIPO published Overview 3.1 on February 17, 2026. It is built on more than 1,400 decisions and refines the earlier 3.0 text. It adds guidance on the credibility of AI-assisted arguments and evidence, and on consolidating cases. Our post on [record cybersquatting and Overview 3.1](https://gritbrokerage.preview.multisites.ai/post/record-cybersquatting-2025-wipo-overview-3-1) covers what changed. ## What is reverse domain name hijacking? Reverse domain name hijacking, or RDNH, is when a complainant uses the UDRP in bad faith to try to take a domain from its rightful holder. A panel that finds it declares the complaint an abuse of the process. Under UDRP rules the complainant must undertake that the complaint is brought in good faith. WIPO Overview 3.1, section 4.16, lists grounds panels have cited: - The complainant knew it could not meet any of the three elements. - It should have known, based on facts it could have checked before filing. - It ignored well-established precedent. - It submitted false or incomplete evidence. - It did not disclose that the case was a refiling. - It filed after failing to buy the domain, with no plausible legal basis. - Its complaint rested on bare allegations with no evidence. Losing a case is not RDNH on its own. The UDRP itself adds no money penalty, though WIPO notes some national courts can impose one. If a company tried to buy your name, failed, and then filed a complaint, point this out. See [reverse domain name hijacking](https://gritbrokerage.preview.multisites.ai/glossary/reverse-domain-name-hijacking). ## How much does a UDRP case cost and how long does it take? A UDRP case costs the complainant USD 1,500 in WIPO fees for one to five domains and one panelist. It takes about two months when nothing goes wrong. WIPO publishes the fee schedule. Domains in complaint One panelist Three panelists 1 to 5 USD 1,500 USD 4,000 6 to 10 USD 2,000 USD 5,000 More than 10 Set with WIPO Set with WIPO The registrant pays no WIPO fee unless it asks for a three-member panel. The fee schedule page shows a 2002 validity header, so check the current schedule on WIPO’s site before relying on it. Those are only the filing fees. Most complainants and many respondents hire lawyers, and those fees are separate. The panel cannot order the losing side to pay costs or damages. On volume, WIPO reported more than 6,200 domain name cases in 2025, its highest caseload on record. Over 25 years, it has handled more than 80,000 cases. Most complaints came from the United States, France and the United Kingdom. ## What is the difference between UDRP, URS, and an ACPA lawsuit? The UDRP can transfer or cancel a name. The URS only suspends one. The ACPA lets a US court award damages and order transfer. All three target bad-faith use of someone else’s mark in a domain, but they differ in speed, cost and power. UDRP URS ACPA lawsuit Where Approved provider such as WIPO Approved URS provider US federal court Applies to Generic extensions, including .com Domains under ICANN gTLD registry agreements, including new gTLDs approved after 2012 Domains tied to a US court’s jurisdiction Remedy Transfer or cancel Suspension for the rest of the registration Transfer, forfeiture, cancellation, plus damages Money awarded No No Yes: $1,000 to $100,000 per domain name in statutory damages Speed About two months Faster than UDRP Months to years Best for Most disputes Clear-cut infringement Serious cases, or when a name is outside UDRP reach **The URS.** The Uniform Rapid Suspension system is built for “clear-cut” cases. The only remedy is suspension of the name for the rest of the registration period, which the winner can extend for one year at commercial rates. A registrant has 14 days to respond. The UDRP remains the main route for most .com disputes. See [URS](https://gritbrokerage.preview.multisites.ai/glossary/urs) in the glossary. **The ACPA.** The Anticybersquatting Consumer Protection Act is codified at 15 U.S.C. 1125(d). A person is liable if they had a bad faith intent to profit from a mark and registered, trafficked in or used a domain that is identical or confusingly similar to a distinctive mark, or confusingly similar or dilutive of a famous one. A court looks at nine non-exclusive factors. They include whether the registrant had its own rights in the name, any prior bona fide use, whether it offered to sell the name without using it, and a pattern of buying many names that match other people’s marks. The statute has a safe harbor. Bad faith cannot be found where the person believed, and had reasonable grounds to believe, that the use was fair or otherwise lawful. A plaintiff can choose statutory damages of $1,000 to $100,000 per domain name instead of actual damages. A mark owner who cannot find or sue the registrant can sometimes bring an in rem action against the domain itself. This is the point where you need a lawyer. See [ACPA](https://gritbrokerage.preview.multisites.ai/glossary/acpa) and [cybersquatting](https://gritbrokerage.preview.multisites.ai/glossary/cybersquatting) for plain definitions. ## Does the Booking.com ruling change anything? It changes what can be a trademark, not what counts as bad faith. In _USPTO v. Booking.com_ (June 30, 2020), the Supreme Court held that a “generic.com” term is generic only if consumers understand it that way. It rejected a near-automatic rule that any generic word plus .com is generic. So a name like a plain-word .com can sometimes carry trademark rights if buyers see it as one company’s brand. The Court also said such marks are narrow. A weak mark is hard to enforce, confusion must be likely for infringement, and classic fair use still protects honest descriptive use. For buyers and sellers of premium names, this cuts both ways. A one-word .com can be a real brand asset. A company with rights in a similar mark may also object to your use. Our post on the [Supreme Court ruling](https://gritbrokerage.preview.multisites.ai/post/supreme-court-rules-generic-word-com-can-be-trademarked) gives the investor view. ## How do I check a domain for trademark risk before buying? Run a short, repeatable check on every name before you pay. It will not remove all risk. It will catch the obvious problems. 1. **Search the USPTO database.** Look for registered and pending marks that contain or resemble the name. The USPTO says a comprehensive clearance search is wise before you file, and that confusion risk is the most common ground for refusal. 2. **Compare the goods and services.** The USPTO says similar marks can coexist when the goods or services are unrelated. Ask what else a customer would expect you to sell, and what competitors offer. 3. **Search outside the US.** If you will sell in Europe or elsewhere, check those registers too. A trademark right is national or regional. 4. **Check the name’s history.** Look at past content in the Wayback Machine and at the current site. A history of use for a brand name raises risk. See [domain history](https://gritbrokerage.preview.multisites.ai/glossary/domain-history). 5. **Look for names that exist because of a brand.** Typos, a mark plus a keyword, and a name registered right after a product launch carry the most risk. 6. **Ask the seller direct questions.** Has anyone sent a complaint or a demand letter? Is the name in any dispute? Put the answers in the contract. 7. **Use a lawyer for brand-critical names.** If this name will be your company’s identity, a trademark review is cheap insurance. For sellers, the same risk runs in the other direction. If you hold a name that matches a well-known mark, expect a letter. Do not offer it to the mark owner at a high price without legal advice, because that is the first example of bad faith in paragraph 4(b). ## How do I buy a domain safely and protect myself? Use escrow, a written agreement and warranties, and know who you are dealing with. A trademark claim after purchase is far easier to handle when the contract anticipated it. - **Use a third-party escrow service.** Money should go to a neutral party until the domain is in your registrar account. Read our guide to [domain escrow](https://gritbrokerage.preview.multisites.ai/guides/domain-escrow). - **Get a seller warranty.** The agreement should say the seller has title, has received no claims, and is not in a dispute over the name. - **Verify the seller.** Match the registrant to the person you are paying. See [find a domain owner](https://gritbrokerage.preview.multisites.ai/guides/find-domain-owner) and [domain sale scams](https://gritbrokerage.preview.multisites.ai/guides/domain-sale-scams). - **Keep a paper trail.** Record why you chose the name and the business plan you have for it. This helps with the legitimate interest element if a complaint arrives. - **Use the name for a real purpose.** Panels weigh genuine, good-faith use. Parking a name on a page full of ads for the mark’s industry is how registrants lose. - **Consider a broker for hard cases.** A broker handles outreach, and the legal contract stays with your lawyer. Some buyers prefer to stay anonymous so the owner does not raise the price. Our [stealth acquisition](https://gritbrokerage.preview.multisites.ai/glossary/stealth-acquisition) service does this. Grit Brokerage routes every sale through a third-party escrow company. We are brokers, not lawyers, and we do not give legal advice. ## What if I get a UDRP complaint or a demand letter? Do not ignore it. A default makes it much easier for the complainant to win, and the clock is short. Take these steps in order: 1. **Read the notice closely.** Note the provider, the case number and the response deadline. 2. **Do not sell or move the domain in a hurry.** Moving a name during a case can look like an attempt to dodge the process. Ask your lawyer first. 3. **Call a lawyer who handles domain disputes.** A good response can often be filed for a fraction of the cost of losing a good name. 4. **Gather your evidence.** Collect proof of when you got the name, why you chose it, how you use it, and any plans you made. 5. **Decide whether to settle.** Some owners sell or license the name instead of fighting. Compare that against the cost of a response. 6. **Know the court option.** After a loss, you have ten business days to file a lawsuit to stop the registrar from implementing the order. ## Next step Thinking about buying or selling a name that may overlap with a brand? Tell us about it before money moves. We will point you to the right guide, escrow and counsel, and we will not guess on legal questions. [Contact Grit Brokerage](https://gritbrokerage.preview.multisites.ai/contact) or read how we [sell domains](https://gritbrokerage.preview.multisites.ai/selling-domains) and help [buyers](https://gritbrokerage.preview.multisites.ai/buying-domains). You can also learn how brokers charge in [domain broker fees](https://gritbrokerage.preview.multisites.ai/guides/domain-broker-fees). ## Frequently asked questions ### What is the UDRP? The UDRP, or Uniform Domain-Name Dispute-Resolution Policy, is the ICANN process for resolving trademark disputes over domain names. A trademark owner files a complaint with an approved provider such as WIPO. A panel decides, usually within about two months, whether to transfer the name, cancel it, or deny the complaint. ### Can a company take my domain because of its trademark? Only if it proves all three UDRP elements, including that you registered and used the name in bad faith. A trademark that matches your domain is not enough. If you registered a common word for its ordinary meaning and did not target the brand, the complaint should fail. ### How much does a UDRP case cost? At WIPO, a single-panelist case with one to five domains costs the complainant USD 1,500 in fees. A three-member panel costs USD 4,000. The respondent pays nothing unless it asks for a three-member panel. Lawyer fees are extra, and the panel cannot order the loser to pay them. ### What is reverse domain name hijacking? Reverse domain name hijacking means a complainant used the UDRP in bad faith to try to take a domain from its holder. A panel can declare it. Panels cite reasons such as filing when the complainant knew it could not win, or filing after a failed attempt to buy the name. ### What is the difference between the UDRP, the URS and an ACPA lawsuit? The UDRP is an administrative case that can transfer or cancel a name. The URS is a faster process for clear-cut cases and can only suspend a name. The ACPA is a US federal lawsuit that can award damages and order transfer. Court is slower and costs more. ### How do I check a domain for trademark risk before buying? Search the USPTO trademark database and the marks in other countries where you will trade. Look at the goods and services the mark covers. Check the name's history and how the current owner uses it. For anything you plan to build a brand on, ask a trademark lawyer to review it. ## Terms on this page - [Anticybersquatting Consumer Protection Act](https://gritbrokerage.preview.multisites.ai/glossary/acpa) - [Rights or legitimate interests](https://gritbrokerage.preview.multisites.ai/glossary/rights-or-legitimate-interests) - [Reverse domain name hijacking](https://gritbrokerage.preview.multisites.ai/glossary/reverse-domain-name-hijacking) - [Generic top-level domain](https://gritbrokerage.preview.multisites.ai/glossary/gtld) - [Uniform Rapid Suspension](https://gritbrokerage.preview.multisites.ai/glossary/urs) - [Confusingly similar](https://gritbrokerage.preview.multisites.ai/glossary/confusingly-similar) - [Stealth acquisition](https://gritbrokerage.preview.multisites.ai/glossary/stealth-acquisition) - [WIPO Overview 3.1](https://gritbrokerage.preview.multisites.ai/glossary/wipo-overview-3-1) - [Wayback Machine](https://gritbrokerage.preview.multisites.ai/glossary/wayback-machine) - [Domain history](https://gritbrokerage.preview.multisites.ai/glossary/domain-history) ## Sources 1. [ICANN: Uniform Domain-Name Dispute-Resolution Policy](https://www.icann.org/resources/pages/policy-2012-02-25-en) 2. [ICANN: FAQs for Complainants and Respondents Regarding URS Proceedings](https://itp.cdn.icann.org/en/files/registry-operators/urs-complainants-respondents-faqs-23-04-2025-en.pdf) 3. [WIPO: Guide to the UDRP](https://www.wipo.int/amc/en/domains/guide/) 4. [WIPO: Schedule of Fees under the UDRP](https://www.wipo.int/amc/en/domains/fees/) 5. [WIPO: WIPO Jurisprudential Overview 3.1](https://www.wipo.int/en/web/amc/domain-name-disputes/overview/index) 6. [WIPO: 2025 Marks Record-Breaking Year for WIPO Domain Name Disputes](https://www.wipo.int/en/web/amc/w/news-domain-name-disputes/2026/news_0001) 7. [Cornell Law School: 15 U.S.C. 1125 (ACPA at subsection (d)) and 15 U.S.C. 1117(d)](https://www.law.cornell.edu/uscode/text/15/1125) 8. [USPTO: Likelihood of confusion](https://www.uspto.gov/trademarks/search/likelihood-confusion) Written by the Grit Brokerage team and checked against the sources above on October 14, 2026. Registry rules, fees and prices change. This guide is general information, not legal or tax advice. ## Keep reading - [Cybersquatting Hit a Record in 2025: WIPO Overview 3.1WIPO managed over 6,200 domain name cases in 2025, its highest caseload on record. Its updated Overview 3.1, published February 17, 2026, says a dictionary-word domain bought for resale may be fine if the use does not trade on a trademark. Buyers should still check trademarks before they pay.](https://gritbrokerage.preview.multisites.ai/post/record-cybersquatting-2025-wipo-overview-3-1) - [Domain Broker Fees and Commissions: What You Will Actually PayDomain brokers usually charge a commission on the sale price, often in the range of 10% to 30% depending on the model. Some add an upfront fee, such as GoDaddy's $99.99 for buyers. Escrow adds a separate fee. Each broker sets its own terms, so ask for them in writing.](https://gritbrokerage.preview.multisites.ai/guides/domain-broker-fees) - [How Domain Escrow Works (and Why Every Deal Should Use It)Domain escrow means a neutral third party holds the buyer's money until the domain is transferred to the buyer. The buyer pays the escrow agent, the seller moves the domain, the buyer confirms, and then the agent pays the seller. Neither side has to trust the other with money or the name.](https://gritbrokerage.preview.multisites.ai/guides/domain-escrow) - [Domain Sale Scams: How to Spot Fake Buyers, Appraisal Scams, and Fake EscrowIn a domain appraisal scam, a fake buyer says they will pay the appraised value, then asks you to buy an appraisal from a service they name. The buyer owns that service. You pay a fee and never hear from them again. A real buyer makes an offer and does not ask you to pay for anything first.](https://gritbrokerage.preview.multisites.ai/guides/domain-sale-scams) - [How to Find Out Who Owns a Domain Name (WHOIS, RDAP, and Privacy)Search the domain in ICANN Lookup, which uses RDAP, the system that replaced WHOIS for most domains. Since GDPR, most records hide the owner's name and show a relay email or web form instead. Use that relay, the website, or a broker to reach the owner.](https://gritbrokerage.preview.multisites.ai/guides/find-domain-owner) - [Supreme Court Rules Generic Word + .COM Can Be TrademarkedIn an 8-1 decision in USPTO v. Booking.com B.V., the Supreme Court held that Booking.com may register a federal trademark even though the term booking is generic. Grit Brokerage sees this as a big win for owners of one word .com domains and expects higher prices and demand.](https://gritbrokerage.preview.multisites.ai/post/supreme-court-rules-generic-word-com-can-be-trademarked) ## Buying or selling a domain? Call, text or email. Responsiveness is our trademark, and a broker answers, not a form robot. [Talk to a broker](https://gritbrokerage.preview.multisites.ai/contact) [Call (442) 500-GRIT](tel:+1-442-500-4748)