How-to Takedown

Filing a UDRP complaint to recover a domain

When abuse reports fail, UDRP is the trademark-based path to transfer a malicious domain to you. The full filing walkthrough.

45-60 days · ~$1,500 + attorney time

TL;DR

  • 1UDRP is the trademark-based legal path to transfer (not just suspend) a malicious domain to you.
  • 2You must prove three things: identical/confusingly similar to your mark, registrant has no legitimate interest, registered in bad faith.
  • 3Cost: ~$1,500 + attorney time, 45-60 days. Use after registrar abuse fails or when you want the domain itself.

What UDRP does and doesn't do

The Uniform Domain Name Dispute Resolution Policy (UDRP) is ICANN's mandatory arbitration process for cybersquatting. Filing a UDRP complaint at a provider like WIPO or the National Arbitration Forum lets you ask a panel of arbitrators to transfer a domain from the current registrant to you, based on trademark rights. It's the legal mechanism that goes beyond suspension: UDRP gives you ownership of the domain.

UDRP is slower and more expensive than a registrar abuse report (45-60 days, ~$1,500 in filing fees plus attorney time vs hours and free), so it isn't the right tool for every malicious lookalike. Use it when (a) the domain is clearly trademark-violating, (b) the registrar is uncooperative or has refused abuse reports, AND (c) you actually want the domain rather than just wanting it offline.

You have to prove three things to win: the domain is identical or confusingly similar to your registered trademark; the current registrant has no legitimate interest in the name; AND it was registered in bad faith. Missing any one of those three means the complaint fails and the domain stays with the registrant.

How to file

  1. 1

    Confirm your trademark first. A registered trademark in any jurisdiction is the baseline. Common-law marks (unregistered but used in commerce) can work but require more evidence. Without trademark grounds, UDRP isn't an option — consider trade-secret or unfair-competition litigation instead.

  2. 2

    Pick a provider. WIPO (wipo.int/amc/en/domains) is the most common; NAF (adr.forum) and Czech Arbitration Court (adr.eu) are alternatives. WIPO has the deepest case law database — useful for finding precedents to cite.

  3. 3

    Draft the complaint with an attorney. The complaint must address each of the three UDRP elements with specific evidence. Most domain-name attorneys charge a flat fee in the $2,000-5,000 range for a UDRP filing. Self-filing is possible but the success rate is meaningfully lower.

  4. 4

    File with evidence. Screenshots of phishing/infringing content, evidence the registrant knew of your trademark (registration date AFTER your trademark, similar branding on the page), evidence of harm. WIPO's filing wizard walks through the structure.

  5. 5

    Wait through the response period. The registrant has 20 days to respond. About 50% don't respond at all (default judgment in your favor is common). The panel is appointed within ~30 days and decides within ~14 days of appointment.

  6. 6

    Transfer the domain. If the decision is in your favor, the registrar transfers the domain to your registrar account within 10 business days. You become the legal owner; configure it as you would any defensive registration.

Common pitfalls

  • Filing without trademark grounds. Without a registered (or strong common-law) trademark you can't win a UDRP. Common-law-only complaints lose much more often than registered-mark complaints.

  • Using UDRP as your first move. Registrar abuse is free and resolves in 1-3 days for clear phishing. UDRP is 45-60 days and $1,500+. Try the cheap fast path first; reserve UDRP for when it fails or when you actually need the domain.

  • Self-filing the complaint. The UDRP elements have specific evidentiary requirements that attorneys understand and panels reward. Self-filed complaints win less than half as often as attorney-filed ones.

  • Forgetting to preserve the infringing content. By the time the panel reviews your case, the website might be gone. Document everything early — full-page screenshots with timestamps, archive.org captures, the WHOIS history at time of filing.

  • Underestimating reverse-domain-name-hijacking (RDNH) findings. If the panel decides you filed in bad faith (no real trademark conflict, just want a generic name), you can be found guilty of RDNH. This is a black mark in future UDRP filings and shows up in public databases.