How-to Takedown

UDRP Complaint Filing: A Practical Guide for Brand Owners

UDRP is the domain-dispute process that recovers a cybersquatted domain without going to court. It is slower and more expensive than an abuse report, but it is the right tool when a registrar will not act and the squatter will not sell or remove.

April 19, 2026 · 6 min read

TL;DR

  • 1 UDRP is the trademark-based legal path to transfer (not just suspend) a malicious domain to you.
  • 2 Cost: ~$1,500 + attorney time, 45-60 days. Use after registrar abuse reports have been ignored or denied.
  • 3 You must prove three things: identical/confusingly similar to your mark, registrant has no legitimate interest, registered in bad faith.

What it does

UDRP — Uniform Domain Name Dispute Resolution Policy — is ICANN's mandatory arbitration process for cybersquatting disputes. A registered trademark owner can file at WIPO or NAF to ask a panel of arbitrators to transfer a domain from the current registrant. It's the legal mechanism that goes beyond suspension: UDRP gives you ownership.

It's expensive ($1,500-$5,000+ including attorney fees) and slow (45-60 days from filing to decision), so it's not the right first move for most malicious lookalikes. Registrar abuse reports resolve clear phishing in 1-3 days at zero cost. UDRP earns its place when the registrar refuses to act, when you actually want the domain (not just want it offline), or when the case is large enough that the precedent matters.

The win rate is high for clear cases — about 70% across all UDRP filings, much higher with attorney representation against clear trademark violations. The losses cluster around two failure modes: weak trademark grounds (common-law mark on a generic term) and bad-faith findings against the complainant (reverse domain name hijacking).

How it works

  1. 1

    <strong>Confirm trademark grounds first.</strong> A registered trademark in any jurisdiction is the foundation. Common-law marks can work but require evidence of secondary meaning. Without trademark grounds you're filing the wrong process.

  2. 2

    <strong>Pick a provider.</strong> WIPO (wipo.int/amc) has the deepest case law and is the most commonly chosen. NAF and Czech Arbitration Court are alternatives. Filing fees range from $1,500 (single panelist) to $5,000+ (3-panelist for complex cases).

  3. 3

    <strong>Engage an attorney.</strong> Most domain attorneys charge $2,000-5,000 for a UDRP filing. Self-filing has a meaningfully lower win rate; the evidentiary requirements are specific and the panel rewards practiced arguments.

  4. 4

    <strong>Compile the complaint package.</strong> Trademark registration certificate, evidence of the disputed domain's phishing/infringing use (screenshots with timestamps, archive.org captures), evidence of bad-faith registration (registration date after your trademark, similar branding, no legitimate business at the domain).

  5. 5

    <strong>File and wait through the response period.</strong> The registrant has 20 calendar days to respond. About 50% default (no response — automatic finding in your favor). Panel appointed within ~30 days; decision within ~14 days of appointment.

  6. 6

    <strong>Transfer the domain.</strong> If you win, the registrar transfers the domain to your registrar account within 10 business days. Configure it like a defensive registration — no MX, no website, redirect to your real domain.

Common pitfalls

  • <strong>Filing without trademark grounds.</strong> Common-law-only complaints lose at a meaningfully higher rate. If you don't have a registered mark, get one before filing.

  • <strong>UDRP as your first move.</strong> Registrar abuse is free and resolves in days for clear phishing. UDRP is months and $$$. Try the cheap fast path first.

  • <strong>Self-filing complex cases.</strong> If the registrant has any plausible legitimate-interest argument, an attorney's framing matters. Save self-filing for default cases or cases with overwhelming evidence.

  • <strong>Forgetting to preserve infringing content early.</strong> The site might be gone by the time the panel reviews. Screenshot everything at detection time, with timestamps and chain-of-custody.

  • <strong>Risk of RDNH finding.</strong> If the panel decides you filed in bad faith (weak trademark, generic name, intent to grab someone else's domain), they can find Reverse Domain Name Hijacking. That's a black mark in future filings and public databases.