UDRP Explained: What Domain Investors Need to Know
WIPO handled a record 6,200 UDRP cases in 2025 — the most ever filed in a single year. Trademark owners transferred 79% of disputed domains without going to court. Here is exactly how the process works, what puts a domain at risk, and what you can do to protect your portfolio.
What UDRP is
The Uniform Domain-Name Dispute-Resolution Policy (UDRP) is the administrative procedure ICANN mandates for resolving disputes between trademark owners and domain registrants. It is not a court — it is a fast-track arbitration designed specifically for cybersquatting cases.
UDRP was created in 1999 to give trademark owners a way to reclaim domains without going through expensive and slow national courts. A complaint costs the filer roughly $1,500–3,000 depending on the provider and number of panelists. The process runs entirely in writing, usually concludes in 60 days, and produces a binding decision — with no monetary damages, only transfer or cancellation of the domain.
The respondent (domain owner) can challenge the decision in a national court afterward, but very few do. The cost and complexity of court litigation makes UDRP effectively final in most cases. Understanding how panels decide is therefore essential for any domain investor holding names that could attract trademark scrutiny.
2025 case data and trends
The Global Domain Report 2026 by Sedo and InterNetX provides the clearest current picture of UDRP volume and outcomes.
6,200
WIPO cases in 2025
All-time record
79%
Transferred
Complainant wins
5%
Denied
Respondent wins
16%
Other outcome
Settled / withdrawn
Volume has grown every year since 2020, driven by two factors: filing costs have remained low while domain values have risen, making UDRP economically attractive for trademark owners. The 79% transfer rate means that once a complaint is filed, the domain owner loses in roughly four out of five cases.
UDRP cases by extension — 2025
Source: Global Domain Report 2026, Sedo/InterNetX
The .co and .io numbers deserve attention. Both are ccTLDs with large investor communities. .co had 132 disputes (the highest of any ccTLD in 2025) and .io had 72. Investors holding keyword names in these extensions face meaningful UDRP exposure — especially names that contain brand terms or product keywords used by funded companies.
How the process works
UDRP proceedings run through accredited dispute resolution providers — WIPO handles the large majority of global cases. The timeline is fixed and relatively fast compared to litigation.
- 1
Complaint filed
The trademark owner (complainant) files a written complaint with a UDRP provider — typically WIPO. The complaint must name the domain, identify the trademark, and argue all three required elements. Filing fee: $1,500 for a single panelist, $4,000 for three.
- 2
Registrar notification and domain lock
The provider notifies the registrar, which locks the domain — preventing transfer or deletion during the proceedings. The registrar provides the respondent's contact details. The domain continues to function normally during the process.
- 3
Respondent notification — 20-day window
You receive formal notification via email to your registered contact address. You have 20 calendar days to file a Response. This is a hard deadline. Missing it almost always results in a default decision in the complainant's favor — panels rarely grant extensions.
- 4
Panel appointed
The provider appoints one or three panelists (the complainant can request three, paying the additional fee). Three-panelist panels are statistically more likely to find for the respondent — the decision requires a majority, which introduces more variance.
- 5
Decision issued
The panel issues a written decision, typically within 14 days of the Response deadline. The outcome is either transfer of the domain to the complainant, cancellation, or denial of the complaint. There is no appeal within UDRP — the losing party's only recourse is national court within ten business days of the decision.
Keep contacts current: UDRP notification goes to the email address in your WHOIS record. If that address is outdated or a dead inbox, you will miss the 20-day response window. Registrars consider delivery to the registered address sufficient notice regardless of whether you read it.
The three elements complainants must prove
A complainant must prove all three elements to win. Failing to establish any single one results in denial. In practice, the first element is almost always proven — the third (bad faith) is where most contested cases are decided.
Identical or confusingly similar to a trademark
Easy to proveThe domain must be identical or confusingly similar to a trademark the complainant owns. Adding generic words (brandshop.com, brandapp.io) does not break similarity — panels routinely find confusing similarity when the trademark is the dominant element of the domain. The complainant only needs a registered trademark in any jurisdiction.
No rights or legitimate interests in the domain
Burden shiftsThe complainant makes a prima facie case that you have no legitimate interest. The burden then shifts to you to prove otherwise. Legitimate interests include: being commonly known by the domain name, making fair use or non-commercial use, or using the domain for a bona fide offering of goods or services before notice of the dispute. Generic dictionary words are a strong defense here — you can legitimately register "cloud.io" for its generic meaning even if a company uses "Cloud" as a brand.
Registered and used in bad faith
Most contestedBoth conditions apply: the domain must have been registered in bad faith AND used in bad faith. This is a conjunctive test — panels can infer use from passive holding in some circumstances, but generally need evidence of both. This is the element where respondents most often win, and where the quality of your Response matters most.
What panels consider bad faith
The UDRP policy lists specific circumstances panels consider evidence of bad faith. Understanding these in concrete terms is more useful than the abstract legal language.
Offering the domain for sale to the trademark owner at above-cost price
Very highIf you email a company offering to sell them their own brand name, or if you list it publicly with a high price shortly after registration, panels treat this as the clearest indicator of bad faith intent.
Preventing the trademark owner from using their mark in a domain
HighHolding a domain identical to a trademark — especially with no legitimate use — with the apparent purpose of blocking the trademark owner is bad faith. Panels examine the pattern: if you own multiple domains corresponding to trademarks, this pattern is strong evidence.
Using the domain for PPC ads in the trademark owner's industry
HighParking a domain and serving competitor ads in the same industry as the trademark directly profits from the owner's reputation. This is explicitly listed as bad faith use and is easily documentable.
Typosquatting
Very highDeliberate misspellings of a trademark — gooogle.com, amaz0n.io — are among the easiest bad faith cases to prove. Panels have consistently found for complainants here.
Knew of the trademark at registration
MediumIf the trademark was famous or well-known in your jurisdiction at the time you registered the domain, panels infer you knew of it. "I didn't know" is not a strong defense for globally recognized brands.
The clearest way to avoid bad faith findings: register generic dictionary words, invented/brandable names with no trademark conflicts, and do not park domains with competitor ads. A domain investor who follows these rules has genuine defenses against UDRP complaints even for names that trigger complaints.
How to protect your portfolio
UDRP risk is manageable with consistent habits at the acquisition stage. Most successful domain investors follow these practices as standard.
Low-risk portfolio practices
- +Check USPTO, EUIPO, and WIPO trademark databases before every acquisition above $100
- +Register generic dictionary words, not brand-adjacent terms
- +Use clean parking or a for-sale lander — avoid competitor PPC categories
- +Document your acquisition rationale — keep notes on why you registered a name
- +Keep all contact information in WHOIS current so you do not miss notifications
- +For domains above $5,000, ask a UDRP attorney for a quick opinion before buying
High-risk behaviors to avoid
- −Registering brand + generic word combinations (brandapp, brandhq, brandstore)
- −Typosquatting or near-identical variations of known brands
- −Parking domains with PPC ads in the brand's exact industry
- −Mass-registering variations of a single trademark
- −Offering to sell a domain back to a brand at a high price unprompted
- −Holding domains in extensions the brand actively uses (.ai, .io, .co)
Practical tip: A professional domain for-sale lander signals that you are a legitimate domain investor, not a cybersquatter. Panels consider the nature of domain use in bad faith determinations — a clean lander with a stated asking price is meaningfully better evidence than a PPC parking page or a blank domain.
If you receive a complaint
Receiving a UDRP complaint does not mean you will lose the domain. But how you respond in the first 72 hours matters significantly.
Do not transfer or delete the domain
Once a complaint is filed, any attempt to transfer or delete the domain while proceedings are active can be treated as bad faith. The domain is effectively locked by the registrar anyway — but do not try to work around it.
Note the response deadline immediately
You have 20 calendar days from formal notification. Calendar it the moment you receive the complaint. Missing this deadline is the most common way respondents lose winnable cases.
Consult a UDRP attorney
If the domain is worth more than the cost of legal help, get advice. UDRP-specialized attorneys charge $2,000–6,000 for Response preparation. For a $10,000+ domain, this is worth it. For a $500 domain, you may need to weigh the economics.
Consider requesting a three-panelist panel
Three-panelist panels have historically been more favorable to respondents than single-panelist panels. The additional cost is paid by the complainant if they requested three, or split if you request it. For a meritorious defense, three panelists give you more variance — which is in your favor when the single-panelist default is likely transfer.
Gather your evidence
Document everything relevant to legitimate interest: when you registered the domain, what comparable generic names have sold for, whether you have used or developed the domain, any prior offers or correspondence. Your Response needs to tell a coherent story of why you had legitimate interest at the time of registration.
FAQ
Can I sell a domain while a UDRP complaint is active?
No. The registrar locks the domain the moment a complaint is filed, preventing any transfer. Attempting to circumvent this is considered bad faith and will be noted in the panel's decision.
Does UDRP apply to all domain extensions?
UDRP applies to all gTLDs (.com, .net, .org, .shop, .ai, etc.) and many ccTLDs that have adopted it voluntarily or created equivalent policies. Some ccTLDs have their own dispute procedures — .uk has Nominet's DRS, for example. Check the specific extension's registry policy.
What is the difference between UDRP and ACPA?
UDRP is the administrative arbitration process — fast, cheap, no monetary damages. ACPA (Anti-Cybersquatting Consumer Protection Act) is a US federal law allowing trademark owners to sue in court for up to $100,000 in statutory damages per domain. The two are separate — a company can use UDRP to get the domain and separately sue under ACPA for damages.
Does privacy protection on WHOIS help avoid UDRP?
No. When a UDRP complaint is filed, the registrar is required to reveal the registrant's contact information to the provider. Privacy protection does not shield you from UDRP — it only hides your details from public WHOIS queries.
Can I win a UDRP as a domain investor?
Yes — the 5% denial rate in 2025 represents real cases where respondents prevailed. The strongest defenses are: the name is a generic dictionary word with no dominant trademark use, you have a documented history of legitimate domain investment, or the complainant's trademark was filed after your domain registration.
What happens if I ignore a UDRP complaint?
The panel issues a default decision, which is almost always transfer to the complainant. There is no automatic win for respondents in default — the panel still reviews the complaint on its merits — but without a Response, your side of the story is not on record. Default is rarely the right choice unless the domain has no value worth defending.
A clean lander is part of your legal defense
Panels consider domain use in bad faith determinations. A professional for-sale page is better evidence of legitimate investor intent than a parking page.
Browse all templates →