---
title: "Cybersquatting Hit a Record in 2025: WIPO Overview 3.1"
description: "WIPO handled over 6,200 domain disputes in 2025, a record. Here is what the new Overview 3.1 means for buyers of dictionary-word and brandable domains."
url: https://gritbrokerage.preview.multisites.ai/post/record-cybersquatting-2025-wipo-overview-3-1
publisher: Grit Brokerage
contact: https://gritbrokerage.preview.multisites.ai/contact
offer: https://gritbrokerage.preview.multisites.ai/inquiry
---

[Market insights](https://gritbrokerage.preview.multisites.ai/blog?topic=market-insights)

# Cybersquatting Hit a Record in 2025: WIPO Overview 3.1

WIPO managed over 6,200 domain name cases in 2025, its highest caseload on record. Its updated Overview 3.1, published February 17, 2026, says a dictionary-word domain bought for resale may be fine if the use does not trade on a trademark. Buyers should still check trademarks before they pay.

By Grit BrokerageSep 22, 20264 min read

## How many domain disputes did WIPO handle in 2025?

WIPO managed over 6,200 domain name cases in 2025, the highest caseload it has recorded. In its January 14, 2026 release, WIPO said it has resolved more than 80,000 cases in 25 years. That total includes over 70,000 generic top-level domain cases and nearly 10,000 country-code cases.

The previous year was close behind. WIPO’s report for 2024 counted 6,168 cases. WIPO’s 2025 highlights put the 2025 figure at 6,282, a rise of 1.8%. So the record is a small step up, not a spike. The point for buyers is the level: more than 6,000 filings a year is the new normal.

Most complaints came from the United States, France and the United Kingdom. The cases also included phishing and fraud. In one case, WIPO says the respondent’s domain nearly diverted USD 800,000 to a fraudulent bank account.

## Which country-code domains saw the most cases?

The three busiest country-code domains in 2025 were .CO, .AU and .AI. WIPO’s top 10 list reads: .CO (Colombia), .AU (Australia), .AI (Anguilla), .CN (China), .IO (British Indian Ocean Territory), .MX (Mexico), .CC (Cocos Islands), .ES (Spain), .NL (Netherlands) and .SE (Sweden).

Rank

Extension

Territory

1

.CO

Colombia

2

.AU

Australia

3

.AI

Anguilla

4

.CN

China

5

.IO

British Indian Ocean Territory

WIPO also saw more filings in 2025 for .CO, .AU, .IO, .MX, .IE and .UA. If you buy a [ccTLD](https://gritbrokerage.preview.multisites.ai/glossary/cctld) such as .co, .ai or .io, you are buying in the extensions that draw the most [UDRP](https://gritbrokerage.preview.multisites.ai/glossary/udrp) filings. That does not mean those names are risky. It means trademark owners watch them. Our [comparison of .com, .ai, .io and .co](https://gritbrokerage.preview.multisites.ai/guides/com-vs-ai-vs-io-vs-co) covers the other trade-offs.

## What is the WIPO Overview 3.1?

The WIPO Overview 3.1 is WIPO’s guide to how UDRP panelists have decided common questions. It is not a law. Panelists and parties use it as a reference. WIPO published the update on February 17, 2026, and says it draws on over 1,400 decisions from nearly 300 panelists. The last full edition, version 3.0, came out in 2017.

The update covers many topics. For domain buyers, four matter most:

1.  Dictionary terms and domains bought for resale.
2.  Evidence created with AI tools.
3.  Refiling a case after new evidence appears.
4.  Passive holding, where an owner does nothing with a name.

WIPO also notes that a trademark infringement claim can overlap with a cybersquatting claim under the policy. See our glossary entry on the [WIPO Overview 3.1](https://gritbrokerage.preview.multisites.ai/glossary/wipo-overview-3-1) for a short definition.

## Can a dictionary-word domain bought for resale be taken in a UDRP?

It can, but the resale purchase alone is not the problem. Overview 3.1 clarifies that a domain bought speculatively for resale may not break the policy, as long as the name is not used to trade off a trademark. WIPO lists neutral uses such as hosting links, posting content or a for-sale page.

That is good news for the people who hold real words. It has limits. In a 2025 case, WIPO reports that a respondent said its name combined dictionary words in Greek, Turkish and English as part of a “brandable” portfolio. The panel asked the respondent to show that the name, as a whole, carries a meaning that is independent of the complainant’s mark. In another 2025 case, the choice of .AI tipped the balance for the complainant because .AI formed part of the complainant’s trademark.

The lesson is that context decides. A common word with no mark attached is low risk. A coined or combined name that matches a known brand is not.

## Do AI-generated complaints work?

Not unless a person checks them and backs them with evidence. Overview 3.1 says the credibility of arguments or evidence made with AI tools can depend on whether the prompts, with dates, and their results are included.

WIPO’s 2025 review also cites a panel that set a higher bar for AI-generated complaints or responses. That panel said AI tools “may complement but are not a substitute for professional advice.” It added that AI-generated responses “are unlikely to inspire confidence” unless they are reviewed and verified and supported by evidence. For buyers, this cuts both ways. Panels will look hard at machine-written claims. Do not rely on a machine-written reply if you ever face a claim yourself. Talk to a lawyer.

## How should a buyer check risk before buying?

Run a trademark check before you pay, and keep a record of it. The record shows why you chose the name. Our [guide to trademark and UDRP risk](https://gritbrokerage.preview.multisites.ai/guides/domain-trademark-udrp-risk) walks through the steps. Here is the short version:

1.  Search the [USPTO](https://gritbrokerage.preview.multisites.ai/glossary/uspto) database and the owner’s country registry for the exact word and close variants.
2.  Check the name’s history in the [Wayback Machine](https://gritbrokerage.preview.multisites.ai/glossary/wayback-machine). Look for past brand use or abusive content.
3.  Write down the plain reason you want the name, such as a business plan or brand brief.
4.  Ask the seller about any past disputes, notices or letters.
5.  Use a [third-party escrow](https://gritbrokerage.preview.multisites.ai/guides/domain-escrow) service so payment and transfer happen together.

A clean acquisition from a broker who researches the owner and the name’s history leaves a paper trail. That trail matters if a complaint arrives later. This is general information, not legal advice. For a high-value name or a name close to a known brand, talk to a trademark lawyer first.

## Next step

Thinking about a purchase and want a second pair of eyes on the name’s history? [Contact us about buying](https://gritbrokerage.preview.multisites.ai/contact?interest=buy). We can help you plan the research, the escrow and the transfer.

## Questions this post answers

### How many domain disputes did WIPO handle in 2025?

WIPO reported over 6,200 domain name cases in 2025, its highest caseload on record. Its 2025 highlights put the figure at 6,282, up 1.8% from 6,168 in 2024. WIPO has resolved over 80,000 cases in 25 years.

### What is the WIPO Overview 3.1?

It is WIPO's guide to how UDRP panels decide cases. The updated edition, published February 17, 2026, covers over 1,400 decisions by nearly 300 panelists. Parties use it to write pleadings and panelists use it to support their reasoning.

### Can a dictionary-word domain bought for resale be taken in a UDRP?

It can, but buying a dictionary word for resale is not enough by itself. Overview 3.1 says a speculative purchase may not break the policy if the domain is used in a way that does not trade off a trademark. A for-sale page or neutral content can be such a use.

### Do AI-generated complaints work in a UDRP?

Panels are skeptical. Overview 3.1 says the credibility of AI-assisted arguments or evidence can depend on whether the specific prompts and results are included. A 2025 panel said AI-generated pleadings are unlikely to inspire confidence unless they are checked and backed by evidence.

## Sources

1.  [WIPO: 2025 Marks Record-Breaking Year for WIPO Domain Name Disputes (January 14, 2026)](https://www.wipo.int/amc/en/domains/news/2026/news_0001.html)
2.  [WIPO: WIPO ADR Highlights 2025](https://www.wipo.int/amc/en/news/2026/news_0001.html)
3.  [WIPO: Updated WIPO Overview 3.1 (February 17, 2026)](https://www.wipo.int/en/web/amc/w/news-domain-name-disputes/2026/news_0004)
4.  [WIPO: Domain Name Report 2024, UDRP case filings remain strong (January 15, 2025)](https://www.wipo.int/amc/en/domains/news/2025/news_0001.html)

## Terms in this post

-   [Country code top-level domain](https://gritbrokerage.preview.multisites.ai/glossary/cctld)
-   [Generic top-level domain](https://gritbrokerage.preview.multisites.ai/glossary/gtld)
-   [WIPO Overview 3.1](https://gritbrokerage.preview.multisites.ai/glossary/wipo-overview-3-1)
-   [Wayback Machine](https://gritbrokerage.preview.multisites.ai/glossary/wayback-machine)
-   [Cybersquatting](https://gritbrokerage.preview.multisites.ai/glossary/cybersquatting)
-   [Domain name](https://gritbrokerage.preview.multisites.ai/glossary/domain-name)
-   [Trademark](https://gritbrokerage.preview.multisites.ai/glossary/trademark)
-   [A record](https://gritbrokerage.preview.multisites.ai/glossary/a-record)

## Keep reading

-   [Domain Names and Trademarks: UDRP, Cybersquatting, and How to Buy SafelyThe UDRP is a fast, low-cost ICANN process that lets a trademark owner ask a panel to transfer a domain name. The owner must prove three things: the name is confusingly similar to its mark, you have no legitimate interest, and you registered and used it in bad faith. Owning a brand word alone is not enough.](https://gritbrokerage.preview.multisites.ai/guides/domain-trademark-udrp-risk)
-   [.com vs .ai vs .io vs .co: How to Choose a Domain Extension.com is still the safest default because buyers, investors and email systems expect it. Choose .ai if your product is AI and you accept higher renewals. Choose .io for developer tools with some registry risk. Choose .co mainly as a cheaper fallback. Whatever you pick, try to own the .com too.](https://gritbrokerage.preview.multisites.ai/guides/com-vs-ai-vs-io-vs-co)
-   [How Domain Escrow Works (and Why Every Deal Should Use It)Domain escrow means a neutral third party holds the buyer's money until the domain is transferred to the buyer. The buyer pays the escrow agent, the seller moves the domain, the buyer confirms, and then the agent pays the seller. Neither side has to trust the other with money or the name.](https://gritbrokerage.preview.multisites.ai/guides/domain-escrow)
-   [Supreme Court Rules Generic Word + .COM Can Be TrademarkedIn an 8-1 decision in USPTO v. Booking.com B.V., the Supreme Court held that Booking.com may register a federal trademark even though the term booking is generic. Grit Brokerage sees this as a big win for owners of one word .com domains and expects higher prices and demand.](https://gritbrokerage.preview.multisites.ai/post/supreme-court-rules-generic-word-com-can-be-trademarked)
-   [Domain Broker Fees and Commissions: What You Will Actually PayDomain brokers usually charge a commission on the sale price, often in the range of 10% to 30% depending on the model. Some add an upfront fee, such as GoDaddy's $99.99 for buyers. Escrow adds a separate fee. Each broker sets its own terms, so ask for them in writing.](https://gritbrokerage.preview.multisites.ai/guides/domain-broker-fees)
-   [Domain Lease-to-Own and Payment Plans: How They WorkDomain lease to own lets a buyer pay for a domain in monthly installments. The domain stays locked, held by the platform or an escrow service, until the last payment. The buyer can usually use it during the plan. After the final payment, ownership transfers. Terms differ by provider, so read the agreement.](https://gritbrokerage.preview.multisites.ai/guides/domain-lease-to-own)

## Buying or selling a domain?

Call, text or email. Responsiveness is our trademark, and a broker answers, not a form robot.

[Talk to a broker](https://gritbrokerage.preview.multisites.ai/contact) [Call (442) 500-GRIT](tel:+1-442-500-4748)
