UDRP: How a Domain Gets Taken From You

You can lose a domain without selling it, without letting it expire, and without doing anything you thought was wrong. A trademark holder files a complaint, an arbitration panel reviews it, and the name transfers to them.

This is the risk that turns a $12 mistake into a genuinely expensive one, and it's worth understanding before you register anything brand-adjacent.

What UDRP is

The Uniform Domain-Name Dispute-Resolution Policy is an arbitration process every domain registrant agrees to as a condition of registration. You accepted it when you registered your first name, whether or not you read it.

It exists because taking someone to court over a domain is slow and expensive across borders. UDRP is faster and cheaper — for the complainant. Cases are decided by a panel, usually on written submissions, typically within a couple of months.

The three things a complainant must prove

To win, they must establish all three:

1. The domain is identical or confusingly similar to a mark they have rights in. Not just their exact brand — close variants count, including typos.

2. You have no rights or legitimate interests in the name. Legitimate interests include using it for a genuine business before any dispute, being commonly known by that name, or making legitimate non-commercial or fair use.

3. You registered and are using it in bad faith. Both parts. This is where most cases turn.

Failing any one of the three means the complaint fails.

What "bad faith" looks like

The policy lists circumstances that indicate bad faith, and they map uncomfortably well onto careless domain investing:

• Registering primarily to sell it to the trademark owner or a competitor for more than your out-of-pocket costs
• Registering to prevent the owner from reflecting their mark in a domain
• Registering to disrupt a competitor's business
• Using it to attract traffic by creating confusion with their mark

That first one deserves a hard look. Registering a name because a specific company will have to buy it from you is precisely the pattern the policy targets. There's a real line between "this name suits a category of business" and "this name is that company's brand and they'll need it."

What happens if you lose

The domain is transferred to the complainant, or canceled. You get nothing — not your registration cost, not what you paid at auction, not the years of renewals.

You may also have spent money defending it. Filing fees are paid by the complainant, but if you respond properly you'll likely want legal help, and that isn't cheap relative to most domains' value.

There's also a separate US statute, the ACPA, under which cybersquatting can carry statutory damages — a considerably worse outcome than simply losing the name. Court is rarer than UDRP, but it exists.

Reverse domain hijacking

It runs the other way too. Reverse Domain Name Hijacking is when a trademark holder abuses the process to grab a domain they have no legitimate claim to — typically a generic word they happen to have trademarked in one narrow category.

Panels can and do make a formal RDNH finding against complainants. It's a reputational black mark rather than a penalty, but it does mean holding a generic dictionary word is not automatically indefensible just because someone has trademarked it somewhere.

If you own a genuinely generic term, registered before their mark, with no targeting of their business, you have a real defense.

How to never be in this position

Almost all UDRP exposure is avoidable at the point of registration.

Search before you register. Every time.

• The USPTO trademark database, and your national equivalent
• Plain Google for the exact phrase
• OpenCorporates for registered companies using the name

Don't register:

• Any existing brand, however small or foreign
• Typos or near-misses of known brands — this is the clearest possible bad-faith signal
• Brand + generic word combinations (nikeshoes, teslaparts)
• Celebrity or public figure names
• Names where your entire thesis is "company X will need this"

Do register:

• Generic and descriptive terms
• Combinations of common words with no single owner
• Names where many businesses could plausibly want it — that plurality is itself a defense

The useful test

Before registering, ask: if I had to explain to a panel why I registered this, would my answer sound legitimate?

"It's a descriptive phrase that suits any roofing company" is a good answer.

"It's very close to a well-known brand and I figured they'd want it" is a confession.

If a complaint arrives

• Don't ignore it. Non-response makes losing far more likely.
• Read it properly. They must prove all three elements; identify which one is weakest.
• Get advice if the domain has real value. UDRP has its own case law and an experienced practitioner matters.
• Consider settling if their claim is strong — transferring voluntarily may be cheaper than losing after paying to defend.
• Don't panic if the name is genuinely generic. Legitimate registrations do win, and RDNH findings exist for a reason.

The proportionate view

Most investors never face a UDRP complaint, because most never register brand-adjacent names. The risk is close to zero if your portfolio is generic and descriptive terms.

It becomes real the moment you start registering names because a specific company will want them — which is also, not coincidentally, the strategy that sounds cleverest to beginners. A trademark search takes two minutes and eliminates nearly all of the exposure.