How to Recover a Domain Name from a Typosquatter or Cybersquatter
What is Typoquatting and Cybersquatting?
Every established brand eventually faces the same problem. Someone notices that your brand draws a lot of attention, and they want to capitalize on it by creating a website that either uses your trademark or something confusingly similar to it, like a misspelling, in the web address. Sometimes the squatter parks the domain on a page full of advertisements that generate revenue every time a confused customer clicks through. Sometimes the domain hosts a phishing site designed to harvest credentials from employees or customers who think they are logging into your platform. Sometimes the squatter does nothing at all, content to hold the domain until you offer to buy it back at a marked-up price.
The instinct of many business owners is to call their litigation counsel and ask about a lawsuit. That instinct is usually wrong.
UDRP vs. Federal Court Litigation Under the ACPA
Federal court litigation under the Anticybersquatting Consumer Protection Act (ACPA) is available, but it is slow, expensive, and often impractical when the registrant is overseas or hiding behind a privacy service. There is a faster and far cheaper alternative most business owners have never heard of: the Uniform Domain Name Dispute Resolution Policy, known as the UDRP.
Uniform Domain Name Dispute Resolution Policy (UDRP): A Faster Alternative to a Cybersquatting Lawsuit
The UDRP is an arbitration procedure that every domain registrar in the world is contractually required to honor. When you register a domain through GoDaddy, Namecheap, Hostinger, or any other ICANN-accredited registrar, you agree that if a trademark owner files a UDRP complaint against you, an arbitration panel can order your domain transferred or cancelled. The process is administered by a handful of approved providers, most prominently the World Intellectual Property Organization (WIPO) in Geneva. There is no court, no discovery, no in-person hearing, and no need for the registrant to be served in the traditional sense. The entire proceeding is conducted by written submission, typically resolves within two to three months, and produces a published decision that the registrar implements automatically.
Three Elements You Must Prove to Win a UDRP Domain Dispute
To prevail, a trademark owner must establish three elements.
- The disputed domain must be identical or confusingly similar to a mark in which the complainant has rights. A federal trademark registration is the cleanest way to establish those rights, but common law rights based on actual use can also suffice.
- The registrant must lack any legitimate interest in the domain. This element shifts to the registrant once the complainant makes a prima facie showing, and registrants who default, as they frequently do, almost always lose on this point.
- The registrant must have registered and used the domain in bad faith. Typosquatting cases, where the disputed domain is an obvious misspelling of an established mark, typically satisfy this element because there is no plausible innocent explanation for the registration.
What Does a UDRP Complaint Cost?
The economics favor the trademark owner. WIPO charges a filing fee of $1,500 USD for a single-panelist case involving up to five domains. Legal fees vary, but a straightforward typosquatting complaint can typically be prepared and filed for a fraction of what a federal court filing fee, service of process, and initial pleadings would cost in an ACPA case. When the complaint succeeds, the registrar transfers the domain directly to the trademark owner, usually within ten business days of the decision becoming final.
Once transferred, the domain is the trademark owner’s to manage as it sees fit. Most clients redirect the traffic to their legitimate website to capture customers who mistyped the URL, then hold the domain defensively to ensure it cannot be reacquired by another bad actor. There are no damages available under the UDRP, but for most brand owners the goal is recovering the domain and stopping the harm, not extracting money from a squatter who likely has none anyway.
How to File a UDRP Complaint
A few practical considerations matter when deciding whether to file a UDRP complaint.
- Strong cases involve distinctive marks rather than descriptive or generic terms. KODAK, and PFIZER are easy. GENERAL or PREMIUM are not.
- The mark should predate the domain registration, and the domain should bear an obvious relationship to the mark, whether through direct copying, common misspellings, or the addition of generic terms.
- The registrant’s conduct matters, too. A domain used for an active phishing site, a pay-per-click parking page targeting the trademark owner’s industry, or an offer to sell the domain to the trademark owner all support bad faith. A domain held passively for years without any apparent use can also support bad faith, particularly when the mark is well known and there is no plausible legitimate purpose for the registration.
The UDRP is not a substitute for a comprehensive brand protection program, but it is the workhorse remedy for the most common online infringement problem brand owners face. For companies that have never run a domain enforcement program, the first step is usually an audit. A modest amount of investigation typically reveals a surprising number of typosquatted variants of any well-known brand, some dormant, some monetized, some actively malicious. From there, an enforcement plan can be calibrated to the actual problem: priority targets that warrant immediate UDRP action, lower-priority registrations that can be watched or addressed in batches, and longer-term monitoring to catch new registrations as they appear.
The Cost of Domain Enforcement Inaction
For brands operating online, domain enforcement is no longer optional. The cost of inaction is measured in diverted traffic, customer confusion, phishing risk, and erosion of the trademark rights that should anchor the brand. The cost of a well-run enforcement program is modest by comparison, and the legal tools to support it are mature, predictable, and effective.
Working With a Domain Dispute Attorney
WilliamsMcCarthy LLP represents trademark owners in UDRP proceedings before WIPO and the Forum, as well as in related federal court litigation. For more information about domain enforcement options for your business and trademark matters, contact Joel M. Huotari at jhuotari@wilmac.com or (815) 987-8982.

Joel M. Huotari is a partner at the law firm of WilliamsMcCarthy LLP. He is licensed in Illinois and Wisconsin. He is a former federal law clerk in the Northern District of Illinois. His practice areas include trademark, copyright, trade secrets, commercial litigation, defamation, and other matters:
Joel M. Huotari, Partner
WilliamsMcCarthy LLP
Email: jhuotari@wilmac.com
Phone: (815) 987-8982



