File a UDRP Complaint
The Uniform Domain-Name Dispute-Resolution Policy (UDRP) is an ICANN-mandated arbitration process that lets trademark holders reclaim domain names registered in bad faith, without filing a lawsuit. Proceedings typically take 45–60 days from filing to decision and cost between $1,500 and $5,000 in filing fees depending on the number of domains and panelists.
On this page
When UDRP is (and isn't) appropriate
UDRP is appropriate when:
- You own a registered trademark (or have established common law trademark rights)
- Someone has registered a domain that is identical or confusingly similar to your mark
- The domain was registered primarily to exploit, profit from, or damage your brand
- The domain is being used for phishing, brand impersonation, or cybersquatting
- The registrant has no connection to the name and no legitimate reason to hold it
UDRP is NOT appropriate when:
- The domain uses a generic or descriptive term. For example, filing over "bestshoes.com" when your brand is "Best Shoes Inc." will likely fail if the term is generic
- The domain is a legitimate criticism or fan site. Domains like "brandnamesucks.com" used for genuine noncommercial commentary are generally protected
- The registrant registered the domain before your trademark existed. UDRP requires bad faith registration, which is nearly impossible to prove if the domain predates your mark
- Both parties have plausible rights to the name. UDRP panels will not resolve legitimate business disputes over shared names; those require court action
- You want monetary damages. UDRP can only order domain transfer or cancellation, not financial compensation
- The domain is a ccTLD with its own dispute policy. Some country-code TLDs (e.g., .uk, .au, .eu) have their own dispute resolution procedures that may apply instead
The three elements you must prove
Under UDRP Policy paragraph 4(a), the complainant must establish all three of the following elements. Failing to prove even one results in the complaint being denied.
This is typically the easiest element to satisfy. Typosquats (e.g., "amaz0n.com"), homoglyphs (substituting visually similar characters), and your mark with generic additions (e.g., "brandname-login.com") all qualify. The TLD extension (.com, .net, etc.) is generally disregarded in the comparison. You must demonstrate that you hold rights in the trademark, either through registration with a national trademark office or through established common law use.
The complainant must make a prima facie case, after which the burden shifts to the respondent. The respondent could claim legitimate interests if they: (a) have been commonly known by the domain name, (b) are making a bona fide offering of goods or services before notice of the dispute, or (c) are making legitimate noncommercial or fair use of the domain. Passive holding of a domain with no content, pay-per-click landing pages using your brand keywords, or redirects to competitor sites all suggest no legitimate interest.
Both registration and use must be in bad faith. UDRP Policy paragraph 4(b) lists non-exhaustive examples:
- Registering the domain primarily to sell it to the trademark owner at an inflated price
- Registering to prevent the trademark owner from reflecting their mark in a domain (pattern of conduct)
- Registering primarily to disrupt a competitor's business
- Using the domain to intentionally attract internet users for commercial gain by creating confusion with the complainant's mark
- Using the domain for phishing, malware distribution, or email fraud (strong bad faith indicator)
- Providing false WHOIS information or using a privacy shield to hide identity (supporting evidence of bad faith)
Evidence to prepare
Strong evidence is the single most important factor in a successful UDRP complaint. Gather the following before you begin drafting:
Trademark documentation
- Certificate of trademark registration (from USPTO, EUIPO, or relevant national office)
- Registration number, filing date, registration date, and the class of goods/services
- If relying on common law rights: evidence of use in commerce (marketing materials, sales records, media coverage, social media presence, customer recognition)
Domain and WHOIS records
- WHOIS/RDAP records for the disputed domain (use lookup.icann.org)
- Domain creation date, registrar name, and registrant information (if available)
- Historical WHOIS records showing changes (available via DomainTools or similar)
- DNS records: A, MX, NS, and TXT records showing how the domain is configured
Screenshots and web content
- Screenshots of the disputed domain's website (use the Wayback Machine at web.archive.org if the site has changed or was taken down)
- Side-by-side comparison with your legitimate website showing the similarity
- Screenshots of phishing emails sent from the domain (with full email headers)
- PPC/advertising content on the domain that trades on your brand name
Bad faith indicators
- Communications from the registrant (e.g., offering to sell the domain)
- Evidence the registrant has a pattern of cybersquatting (other UDRP cases they have lost)
- Evidence of phishing activity reported to anti-phishing organizations
- Google Safe Browsing or VirusTotal results flagging the domain as malicious
- PhishFence risk scores and monitoring data for the domain
Communication attempts
- Copies of cease-and-desist letters sent to the registrant (and any responses)
- Records of abuse reports filed with the registrar
- Any demands for payment received from the registrant
Save all evidence with timestamps and archive it in a format suitable for submission (PDF, PNG). UDRP panels rely heavily on documentary evidence since there are no live hearings.
Choose an ICANN-accredited dispute resolution provider
UDRP complaints must be filed with an ICANN-approved dispute resolution provider. You choose the provider; the respondent does not get to change it. The major providers are:
WIPO Arbitration and Mediation Center
The most widely used UDRP provider worldwide. Handles the highest volume of cases globally. Based in Geneva, Switzerland. Offers online filing through the WIPO eUDRP system. Provides comprehensive case search at wipo.int/amc/en/domains/search. Best for international disputes and well-known brands.
Forum (formerly National Arbitration Forum / NAF)
The second most commonly used provider. Based in Minneapolis, USA. Known for slightly faster processing times. Filing is done through their online portal. Maintains a searchable decision database. Often preferred by US-based complainants.
Based in Prague, Czech Republic. Handles UDRP cases as well as .eu domain disputes. Smaller caseload than WIPO or Forum but fully ICANN-accredited.
Asian Domain Name Dispute Resolution Centre (ADNDRC)
Offices in Beijing, Hong Kong, Seoul, and Kuala Lumpur. Useful for disputes involving registrants in the Asia-Pacific region.
Canadian International Internet Dispute Resolution Centre (CIIDRC)
Based in Ottawa, Canada. The newest ICANN-accredited UDRP provider. Handles gTLD disputes globally.
Filing fees
The complainant pays the full filing fee. If the respondent elects a three-member panel (they have this right), the respondent pays half the difference between the one-panelist and three-panelist fees. Fees vary by provider and number of domains disputed.
| Provider | 1 panelist | 3 panelists | Domains |
|---|---|---|---|
| WIPO | $1,500 | $5,000 | 1–5 domains |
| WIPO | $2,000 | $6,000 | 6–10 domains |
| Forum | $1,300 | $4,000 | 1 domain |
| Forum | $1,600 | $5,000 | 2–5 domains |
Verify current fees before filing. Fees are subject to change. Check the provider's website directly: WIPO fee schedule | Forum fee schedule. Attorney fees, if you hire one, are separate and typically range from $2,000 to $5,000 on top of filing costs.
Step-by-step filing process
1 Conduct a pre-filing assessment
Before investing time and money, evaluate whether your case is likely to succeed:
- Confirm you have a registered trademark or strong common law rights
- Verify the disputed domain is confusingly similar to your mark
- Research the registrant. Do they have a history of cybersquatting? (Search WIPO's decision database for their name or email)
- Consider whether a cease-and-desist letter or registrar abuse report might resolve the issue faster and cheaper
- Assess whether the respondent could have a legitimate claim to the name
2 Draft the complaint
The complaint is a formal document that must follow a prescribed structure. Each provider offers complaint forms and templates. The complaint must include:
- Parties: Full contact information for the complainant. For the respondent, include all information available from WHOIS/RDAP records.
- Domain name(s): The specific domain name(s) in dispute.
- Registrar and WHOIS data: The registrar of record and relevant registration details.
- Trademark rights: Evidence of your trademark registration or common law rights, including registration numbers, dates, and jurisdictions.
- Factual and legal arguments: A detailed narrative addressing each of the three UDRP elements with supporting evidence.
- Remedy requested: Whether you want the domain transferred to you or cancelled.
- Panel preference: Whether you elect a single-member or three-member panel.
- Mutual jurisdiction: Either the location of the registrar (from the WHOIS) or the location of the registrant (from the WHOIS).
- Certification: A statement that the information is accurate, that the complaint is not being made for any improper purpose, and that the assertions are warranted.
WIPO provides a complainant guide and model complaint form. Many companies hire a domain attorney for drafting, which significantly improves success rates, especially for complex cases.
3 Submit the complaint and pay the filing fee
Filing with WIPO (eUDRP):
- Create an account at the WIPO eUDRP portal
- Complete the online complaint form with all required fields
- Upload supporting annexes (trademark certificates, screenshots, WHOIS records)
- Submit electronically and pay by credit card or wire transfer
- WIPO will review the complaint for administrative compliance within 5 days
Filing with Forum:
- Access the Forum online filing system
- Complete the complaint form and attach all exhibits
- Submit online and pay the filing fee
- Forum conducts an administrative compliance check
4 Administrative compliance review
The provider reviews your complaint for completeness and compliance with UDRP rules. If there are deficiencies (missing information, incorrect format, unpaid fees), you will have 5 days to correct them. If the deficiencies are not corrected, the complaint is deemed withdrawn without prejudice, meaning you can refile later.
5 Notification and response period
Once the complaint passes administrative review:
- The provider notifies the domain registrar, who confirms the WHOIS data and places a lock on the domain (preventing transfer or deletion during proceedings)
- The provider sends the complaint to the respondent (domain registrant)
- The respondent has 20 calendar days from the date of notification to submit a response
- The respondent may request a 4-day extension for exceptional circumstances
- If the respondent does not reply, the panel will decide based solely on the complaint (this typically favors the complainant)
6 Panel appointment
Within 5 days after the response period closes, the provider appoints the panel. If both parties selected a single panelist, one is appointed from the provider's list. If either party elected a three-member panel, each party nominates candidates and the provider selects three panelists from the combined lists, with one designated as the presiding panelist.
7 Panel decision
The panel reviews all submissions and evidence. There are no live hearings or oral arguments; everything is decided on the papers. The panel issues its decision within 14 days of appointment. The decision will either order the domain transferred to the complainant, order the domain cancelled, or deny the complaint.
8 Implementation
The decision is published and sent to both parties, the registrar, and ICANN. If the complainant wins, the registrar waits 10 business days before implementing the transfer. During this window, the respondent can file a lawsuit in a court of mutual jurisdiction to prevent the transfer. If no lawsuit is filed, the registrar transfers (or cancels) the domain.
Timeline of proceedings
| Stage | Duration | Running total |
|---|---|---|
| Complaint filing and fee payment | Day 0 | Day 0 |
| Administrative compliance review | ~5 days | Day 5 |
| Notification to respondent (commencement) | ~3 days | Day 8 |
| Response period | 20 days | Day 28 |
| Panel appointment | 5 days | Day 33 |
| Panel deliberation and decision | 14 days | Day 47 |
| Implementation waiting period | 10 business days | Day 61 |
| Total (typical) | 45–65 days | |
After the decision
If you win: domain transfer process
- The decision is sent to the registrar with instructions to transfer (or cancel) the domain
- The registrar waits 10 business days for the respondent to file a court challenge
- If no lawsuit is filed, the registrar initiates the transfer to your registrar account
- You may need to create an account with the current registrar, or request the domain be moved to your preferred registrar
- Once transferred, immediately update WHOIS information, point DNS to your servers, and consider enabling domain lock
- Register defensive variants of the domain to prevent repeat squatting
If you lose
- UDRP decisions are final and cannot be appealed within the UDRP system
- You can file a lawsuit in court seeking transfer of the domain. The court is not bound by the UDRP decision
- You can file a new UDRP complaint if you have new evidence or legal grounds, though panels may consider this an abuse of the process
- Review the panel's reasoning carefully. It may reveal weaknesses in your case that a court filing or different strategy could address
If the respondent files a court challenge
- The respondent has 10 business days after the decision to file a lawsuit in a court of mutual jurisdiction
- If a lawsuit is filed, the domain transfer is stayed until the court resolves the matter
- The respondent must provide the provider with documentation of the filed lawsuit
- Court proceedings can take months or years and involve significantly higher costs
Notable UDRP cases
These cases illustrate how UDRP panels apply the three elements in practice:
Facebook v. Domains By Proxy (facebok.com)
Result: Transfer ordered. Classic typosquat case. The domain was a single-character misspelling of facebook.com and was used to display pay-per-click advertisements. The panel found the domain was confusingly similar, the respondent had no legitimate interest, and using a typosquat for PPC revenue constituted bad faith.
LEGO v. domain holder (legoland.com)
Result: Transfer ordered. Despite the domain being registered in 1995 before LEGO's major online presence, the panel found the respondent acquired it knowing of the LEGO trademark and used it to attract visitors seeking LEGO products. Demonstrated that even early registrations can constitute bad faith when a well-known mark is involved.
Sucks cases (e.g., walmartcanadasucks.com)
Result: Varies, often denied. Panels have recognized that "brand + sucks" domains may constitute protected free speech and criticism. Outcomes depend heavily on whether the site is genuinely used for commentary versus redirecting to competitors or parking pages. Demonstrates the limits of UDRP for criticism sites.
Telstra Corporation v. Nuclear Marshmallows (telstra.org)
Result: Transfer ordered. Landmark case establishing that passive holding of a domain (no active website) can still constitute bad faith use. The panel considered the fame of the Telstra mark, the lack of any possible good faith use, and the respondent's concealed identity. This case is frequently cited in UDRP proceedings involving inactive domains.
Search past UDRP decisions at WIPO Domain Name Decision Search to find cases similar to yours.
Alternatives to UDRP
Uniform Rapid Suspension (URS)
A faster and cheaper alternative introduced for new gTLDs (.app, .shop, .online, etc.). URS is not available for legacy TLDs like .com, .net, or .org. Key differences from UDRP:
- Filing fee is approximately $375–$500 (significantly cheaper than UDRP)
- Faster resolution: determination within approximately 20 days
- Higher burden of proof: requires "clear and convincing evidence" (vs. preponderance in UDRP)
- Remedy is suspension only (the domain is redirected to an informational page), not transfer
- Suspension lasts for the remaining registration period
- Filed through the Forum URS system or ADNDRC
Registrar abuse report
For domains actively used for phishing or malware, a registrar abuse report can achieve suspension within 24–72 hours at no cost. This does not result in domain transfer but can stop immediate harm. Often the best first step while preparing a UDRP complaint.
Court action (federal lawsuit)
In the United States, the Anticybersquatting Consumer Protection Act (ACPA, 15 U.S.C. §1125(d)) allows trademark owners to sue in federal court. Key differences from UDRP:
- Can award monetary damages (up to $100,000 per domain under ACPA)
- Allows for in rem actions against the domain itself when the registrant cannot be identified
- Court decisions are binding and enforceable, unlike UDRP which is contractual
- Significantly more expensive ($10,000–$100,000+ in legal fees) and slower (months to years)
- Best reserved for cases involving significant financial harm, serial cybersquatters, or when you need damages
Cease-and-desist letter
A formal letter from your attorney demanding the registrant stop using the domain and transfer it. This costs only attorney fees ($500–$2,000) and resolves many cases without formal proceedings. However, it can backfire: it alerts the registrant to the domain's value and may prompt them to demand a higher price. Best used when the registrant appears to be an individual (not a professional squatter) who may not realize they are infringing.
Negotiated purchase
Sometimes the most practical option is to simply buy the domain. Use a domain broker or escrow service (like dan.com or Escrow.com) to negotiate anonymously. While it may feel unfair to pay a cybersquatter, it can be faster and cheaper than UDRP, especially if the asking price is under $1,500.
You may still have common law trademark rights if your brand has acquired distinctiveness through use in commerce. UDRP panels have accepted common law rights claims, but the evidence bar is higher. You will need to demonstrate:
- Continuous use of the mark in commerce over a meaningful period
- Evidence of consumer recognition (customer volume, media mentions, social media following)
- Marketing and advertising expenditures associated with the mark
- Any secondary meaning the mark has acquired in your industry
For the strongest UDRP case, file for trademark registration with your national trademark office (e.g., USPTO in the US) before or concurrently with your UDRP complaint. Even a pending application strengthens your position.
PhishFence monitors for lookalike domains targeting your brand and generates evidence packages that support UDRP filings. Our domain risk scores, similarity analysis, DNS monitoring history, and timestamped screenshots provide the documented evidence that UDRP panels need. View your monitored domains to see if any warrant a UDRP complaint.