UDRP Explained for Domain Investors (and How to Avoid One)
What a UDRP complaint is, the three elements a complainant must prove, what bad faith looks like, and the pre-purchase checks that keep an investor clear.
Mark FultonOct 14, 12:00 AM UTC8 min read
The UDRP is the arbitration process a trademark owner uses to take a domain name away from its registrant without going to court. To win, the complainant has to prove three things: the domain is identical or confusingly similar to a mark they hold rights in, you have no rights or legitimate interests in the name, and it was registered and is being used in bad faith. If they prove all three, the panel orders the name transferred or cancelled. It cannot award money, so the loss is the domain and what you paid for it. Buying and reselling domains is not the trigger. Aiming a name at someone else’s brand is. This is general information, not legal advice.
Most domain investors will never see a UDRP complaint, and the ones who do usually earned it at the moment they registered or bought the name. That is good news, because it means the risk is almost entirely controllable. It lives in the screening you do before the bid, not in anything you do afterward.
I’ve spent twenty years around domain names, and the thing that keeps surprising newer investors is how mechanical the process is. It is not a courtroom. There is no hearing, no testimony, and a fixed set of questions a panelist works through on paper. Once you know those questions, you can run them against a name yourself, in a couple of minutes, before you spend a dollar. That is what this guide is for.
What is the UDRP and who runs it?
The Uniform Domain-Name Dispute-Resolution Policy is a legal framework created by WIPO and adopted by ICANN in 1999. Every accredited registrar is bound by it, and anyone who registers a domain in a gTLD such as .com or .net agrees to it as part of the registration. According to WIPO’s own Guide to the UDRP, it exists for disputes about abusive registration and use of domain names, and WIPO’s Arbitration and Mediation Center is the leading provider that administers cases.
The practical flow is short. A complainant files and pays a fee. For a case with one to five domains decided by a single panelist, WIPO lists that fee at USD 1,500. You, as the respondent, have 20 days from the start of the proceeding to file a response, with an automatic four-day extension available on request. You pay nothing unless you ask for a three-member panel. If you do not respond at all, you are in default, and WIPO still appoints a panel that decides on the complaint alone. Absent exceptional circumstances, the panel sends its decision to WIPO within 14 days of being appointed.
That timeline is why a UDRP feels sudden. A notice arrives, a deadline starts, and the whole thing can be over inside a couple of months. The defense you did not prepare in advance is the one you are writing in a hurry.
What are the three elements a complainant must prove?
Paragraph 4(a) of the policy sets out all three, and the complainant carries the burden on each. Miss one and the complaint fails.
| Element | What the complainant must show | What usually decides it |
|---|---|---|
| 1. Similarity | The domain is identical or confusingly similar to a trademark or service mark in which they have rights | Usually the easy one for them. A registered mark plus a name that contains it is often enough to clear this bar |
| 2. No legitimate interest | You have no rights or legitimate interests in the name | Whether you use the name for something real, or whether it is simply a descriptive word you hold for sale |
| 3. Bad faith | The name was registered and is being used in bad faith | Your intent at the moment you acquired it, and what you did with it afterward |
Element one is a low threshold and element three is where cases are won and lost. Notice the word “and” in the third element: the registration and the use both have to be in bad faith. That detail is what protects a lot of ordinary investors, and it is also why what you do with a name after you own it matters.
What does bad faith actually look like?
The policy lists four example circumstances in paragraph 4(b) that a panel will treat as evidence of bad faith. In plain terms:
- Registered primarily to sell to the mark owner. You got the name mainly to sell it to the trademark owner, or a competitor, for more than your out-of-pocket costs.
- A pattern of blocking. You registered the name to keep the owner from having a matching domain, and you have done it to more than one brand.
- Disrupting a competitor. The name was registered mainly to interfere with a competitor’s business.
- Trading on confusion. You are using the name to pull in visitors for commercial gain by creating a likelihood of confusion with the complainant’s mark.
Here is the part investors most need to hear. WIPO’s Overview of WIPO Panel Views on Selected UDRP Questions says that panels have generally found the practice of registering a domain for later resale, including at a profit, does not by itself support a finding of bad faith. Reselling is the business. What turns it into a problem is the specific target: whether the name is a typo of a famous mark, a brand plus a keyword, or something with no plausible meaning other than someone’s company.
One more rule matters for anyone who buys at auction rather than registering fresh. The same overview says that if you acquire a name after the complainant’s trademark rights exist, the panel looks at the circumstances on the date you acquired it, whatever the original creation date was. Buying a name that is already years old does not clean its history. The acquisition date is your date.
The three-element test on a hypothetical name
Here is the test run on two made-up names, so you can see the reasoning a panel follows. Neither is a real case.
| Step | brightharbor.com (two common words, no known brand) | acmepayroll-login.com (a made-up brand plus a keyword) |
|---|---|---|
| Similarity | Only if someone holds a mark in “Bright Harbor” for a related field. Common words often have none | Contains the full brand name. Almost certainly cleared by the complainant |
| Legitimate interest | Strong argument: it is a combination of ordinary words, held for sale or development | Weak. There is no reason to hold that name except to reach that brand’s customers |
| Bad faith | Hard for a complainant to show. Nothing about the name or its use points at them | Easy to show. A “login” style name is built to capture traffic meant for the brand |
| Verdict | Complaint likely fails | Transfer likely ordered |
The lesson is that element one tells you almost nothing, element two is where descriptive names get their protection, and element three is the whole fight. If you can say honestly that nothing about the name points at one specific company, you are on the right side of it. For a deeper look at why plain-word names tend to hold up, read why dictionary word domains hold their value.
What is reverse domain name hijacking?
The UDRP Rules define it as using the policy in bad faith to attempt to deprive a registered domain holder of a domain name. If a panel finds a complaint was brought in bad faith, it declares so in its decision, and WIPO’s overview notes that the mere lack of success of a complaint is not enough on its own to earn that finding. It is more than a footnote: it puts on the public record that the complainant overreached.
Keep your expectations realistic, though. WIPO’s guide is explicit that a panel cannot award money judgments or lawyers’ costs. An RDNH finding vindicates you without paying you back. It is a reason to fight a weak complaint on principle, not a reason to expect a payout.
What happens if you lose, and can you fight it?
If the panel orders transfer or cancellation, the registrar implements the decision ten business days after it receives the notice, unless it gets proper documentation within that window that you are challenging the decision in court. The UDRP does not close the courthouse door: paragraph 4(k) preserves your right to take the dispute to a court of competent jurisdiction. The catch is the ten-day clock. If you want the option, you have to act quickly and file the right paperwork.
There is also a separate track to remember. In the United States, a trademark owner can sue under the Anticybersquatting Consumer Protection Act instead, and that is a court case with court remedies. Another reason to keep the screening upstream.
The checks that keep you clear before you buy
Everything above points to the same conclusion: the cheap place to solve this is before the bid. This is the routine I would run on any name that reads even slightly like a brand:
- Search the exact string in trademark databases. Use the USPTO trademark search for U.S. marks and check variants, plurals and typos. My full routine is in the domain trademark check guide.
- Read the name’s past. A quick pass through the Wayback Machine shows whether the name used to be a real company. A lapsed brand can still be an enforceable one.
- Walk from brand-plus-keyword names. If the name is a famous brand with a word attached, or a deliberate misspelling of one, pass. No bid is cheap enough.
- Be honest about what you will do with it. A name held for the open market, or a simple for-sale landing page, is a different posture from a page that mimics a company or runs ads against its brand terms.
- Keep your own records. Note why you bought each name and what you checked. If a complaint ever arrives, a dated record of your reasoning is the best evidence you will have.
These checks fit naturally into the same pass as your history and backlink screens. The broader filter they sit inside is covered in how to find valuable expired domains, and for what to avoid doing at the auction itself, see domain auction sniping mistakes and the plain-English definition of domain sniping.
Volume is the practical obstacle. Thousands of names end in the Namecheap Market’s daily batch, and you cannot hand-screen them all. PounceDomains watches the aftermarket around the clock, applies the filters you set, and surfaces the candidates with the data you need, so the few names that deserve a trademark look reach you first. The decision to buy or walk stays yours.
The bottom line
A UDRP is a paper process with three questions, and the one that decides it is bad faith at the moment you acquired the name. Investing in domains is not the trigger, and WIPO’s own panel overview says resale for profit is not bad faith by itself. Names that point at a specific brand are the trigger. Screen for that before every bid, keep a record of your reasoning, and the odds of ever receiving a complaint drop close to nothing. Start free with PounceDomains and let the discovery filters bring you the names worth checking. If you do get a notice, talk to an attorney the same day, because the deadlines are short.
Frequently asked questions
What happens if I lose a UDRP?
The panel orders the domain transferred to the complainant or cancelled. It cannot award money judgments or lawyers' fees, according to WIPO's own guide, so the loss is the name and whatever you paid to acquire it. The registrar carries out the order ten business days after it is notified, unless you file proof within that window that you have taken the dispute to court. A UDRP loss is not the end of the legal road, but you have to move fast to keep the name in place.
Can I be sued for owning a domain?
Yes, in principle. The UDRP is an administrative process and does not stop a trademark owner from going to court instead, and in the United States the Anticybersquatting Consumer Protection Act is a separate statute with its own remedies. Merely owning a generic word or a name nobody holds a mark in is not a problem. The exposure comes from registering or buying a name that targets someone's brand. This is general information, not legal advice, so talk to an attorney about a specific name.
Is it bad faith to buy a domain just to resell it?
No. WIPO's published overview of panel views says the practice of registering a domain name for resale, even at a profit, does not by itself support a finding of bad faith. What changes the picture is who you aim the resale at. If the name matches someone's trademark and the evidence suggests you acquired it to sell to that owner or a competitor, panels read it as bad faith. Reselling a dictionary word to the open market is a different thing.
Does it matter that I bought the domain at auction instead of registering it new?
Panels look at the circumstances on the date the current owner acquired the name, not when it was first created. If the trademark already existed when you bought, your acquisition is judged on what you knew and what the name pointed at. An auction win is an acquisition, so the screening has to happen before the bid, not after the invoice.
What is reverse domain name hijacking?
It is the UDRP Rules' term for using the process in bad faith to try to take a domain from its legitimate holder. If a panel decides the complaint was brought in bad faith, it must declare so in its decision. A failed complaint alone is not enough to earn that finding. It is a public, reputational mark against the complainant, not a payout to you, because panels cannot order costs.

Mark Fulton
Developer & Founder of PounceDomains · 20+ year domain investor
Mark Fulton is a 20+ year domain investor and the developer and founder of PounceDomains. He has spent two decades buying, building, and flipping domain names, and built PounceDomains himself to automate the hunt for undervalued domains on the Namecheap aftermarket.
Keep reading
Does Domain Age Matter for SEO? The Honest 2026 Answer
Does domain age matter for SEO? Google says no. What older domains carry (links, history, demand) is what you should price when bidding. A side-by-side example.
How to Spot a PBN Domain in Under Five Minutes
How to spot a PBN domain before you bid: the archive, backlink and WHOIS tells a 20-year investor checks, and when a network past is survivable.
Snipe these domains automatically
PounceDomains watches Namecheap Market 24/7, scores every ending-soon domain with AI, and bids on the winners. Free to start.
Start sniping free