← Back to Blog
Brand Protection April 19, 2026 6 min read

UDRP Complaint Filing: A Practical Guide for Brand Owners

UDRP is the domain-dispute process that recovers a cybersquatted domain without going to court. It is slower and more expensive than an abuse report, but it is the right tool when a registrar will not act and the squatter will not sell or remove.

UDRP stands for Uniform Domain-Name Dispute-Resolution Policy. It is the arbitration process ICANN mandates for every gTLD registration, and it is the mechanism brand owners use to recover a cybersquatted domain without filing a lawsuit. Filing a UDRP is slower than a registrar abuse report and more expensive, but when an abuse report has failed and the squatter is actively monetizing the domain, UDRP is the right tool.

When UDRP is the correct escalation

Three conditions have to be present for a UDRP filing to make sense:

  1. The disputed domain is identical or confusingly similar to a trademark you own. Registered trademarks are strongest; unregistered common-law marks can work but raise the evidentiary bar.
  2. The current registrant has no legitimate interest in the domain. They are not using it for a bona fide business, their own name, or a non-commercial fair use.
  3. The domain was registered and is being used in bad faith. Parking it for ad revenue that trades on your brand, holding it for resale to you at an inflated price, or using it for phishing all count.

All three have to be shown. Miss any one and the panel will deny the complaint. This is why UDRP is not the right tool for a first-time typosquat that has not yet been monetized. Wait until you have evidence of bad-faith use, or escalate through a registrar abuse report first.

The filing path

Most brand owners file with WIPO (the World Intellectual Property Organization) or The Forum (formerly the National Arbitration Forum). WIPO is the more common choice for international brands. The filing fee starts around $1,500 USD for a single-domain dispute with a single panelist, and scales with the number of domains and panelists.

The filing itself is a written complaint. You submit evidence of your trademark, evidence of the respondent's lack of legitimate interest, and evidence of bad faith. The respondent has 20 days to reply. A panelist decides on the record within another 14 days of the reply deadline. Decisions are either "transfer to complainant," "cancel," or "denied."

Typical timelines from filing to decision are 45 to 60 days. After a transfer decision, the registrar is ordered to transfer the domain to you within another 10 business days.

What makes a strong complaint

Panels have seen thousands of boilerplate filings. The complaints that win are specific, evidence-heavy, and short. A strong filing includes:

If you have a prior abuse report the registrar declined, attach that too. It strengthens the bad-faith element by showing the respondent refused a reasonable resolution.

What UDRP is not

UDRP does not award damages. It transfers or cancels the domain. If you want monetary relief (lost business, legal fees, statutory damages for cybersquatting), you have to file under the Anticybersquatting Consumer Protection Act (ACPA) in US federal court. That is a different process, more expensive, and slower. Most brand owners skip it and settle for recovering the domain via UDRP.

UDRP also does not cover ccTLDs. If the squatted domain is a country-code TLD (.uk, .de, .co, .io, etc.), each ccTLD has its own dispute mechanism. ICANN's UDRP applies only to gTLDs (.com, .net, .org, and most new gTLDs). Check the registry's policy first.

Practical tradeoff

For most lookalike domains, a registrar abuse report takes 24 to 72 hours and costs nothing. UDRP takes 45 to 60 days and costs $1,500 plus attorney time. Reserve UDRP for cases where the domain has high business value, the abuse report was rejected or ignored, or the squatter is actively using the domain for phishing at scale. Our abuse report guide covers the faster path; come back to this guide when that path has failed.

Protect your brand from lookalike domains

PhishFence monitors your domain for typosquats, homoglyphs, and phishing sites — and alerts you before your customers are targeted.

Start Free Monitoring