UDRP Explained: What Every Domain Investor Must Know

The UDRP (Uniform Domain-Name Dispute-Resolution Policy) is the single most important legal framework in domain investing. Understanding it can be the difference between keeping a valuable domain and losing it to a corporate complainant — or walking into a cybersquatting case unknowingly. ## What Is the UDRP? The UDRP is ICANN's mandatory dispute resolution policy that allows trademark holders to challenge domain registrations they believe infringe on their rights. It applies to all gTLDs (.com, .net, .org, and most new gTLDs) and many ccTLDs. Rather than filing a lawsuit, a trademark holder files a complaint with an accredited dispute resolution provider (WIPO or NAF). A panel of one or three arbitrators reviews written submissions from both sides and issues a binding decision — typically within 60 days. ## The Three Elements a Complainant Must Prove To win a UDRP case, a complainant must prove all three of the following: **1. The domain is identical or confusingly similar to a trademark in which the complainant has rights.** The complainant must show they have trademark rights (registered or common law) AND that the domain matches or closely resembles that trademark. Generic domain names — even if they happen to match a brand name — often survive here because the trademark is too weak or descriptive. **2. The registrant has no legitimate rights or interests in the domain.** The registrant can defeat this element by showing: - They used the domain for a bona fide business before notice of the dispute - They are commonly known by the domain name - They are making fair, non-commercial use of the domain Generic and descriptive domain names typically qualify as legitimate interests. **3. The domain was registered and is being used in bad faith.** Both conditions must be true — registered in bad faith AND used in bad faith. This is why the timing of registration matters. If the domain was registered before the trademark existed, bad faith cannot be established. Indicators of bad faith include: registering to sell to the trademark owner at a profit, registering primarily to disrupt a competitor, or intentionally attracting users by creating confusion with a trademark. ## What Is Reverse Domain Name Hijacking (RDNH)? RDNH is when a trademark holder files a UDRP complaint they know (or should know) has no merit — essentially trying to use the process to steal a legitimate domain. If a UDRP panel finds the complainant filed in bad faith, it can declare RDNH. This doesn't result in financial penalties, but it is a public embarrassment for the complainant and their legal team. Domain investors who own generic or descriptive domains are common RDNH targets. Large corporations sometimes file meritless complaints hoping domain owners won't respond (a non-response is essentially a default loss). **Always respond to a UDRP complaint, even if you believe it's baseless.** ## How to Protect Yourself **Register generic, not trademarked.** The safest domains are common English words with no specific brand association. "Lawyer.com" is legally bulletproof. "McDonald's-Deals.com" is not. **Check trademarks before registering.** Use the USPTO database (USPTO.gov/trademarks) and WIPO's Global Brand Database to check for active trademark registrations in relevant classes. A trademark in Class 36 (financial services) doesn't necessarily preclude registration of a domain in an unrelated industry — but it's a risk worth assessing. **Document your intent.** If you register a domain with a legitimate business purpose, document it. Emails, business plans, and contemporaneous records of your use intent can be decisive in a UDRP proceeding. **Research the WIPO Case Database.** WIPO publishes all UDRP decisions publicly. Search for decisions involving similar domains or complainants in your industry to understand how panelists rule on comparable facts. **Use a real registrar.** Avoid obscure offshore registrars that don't respond to legal notices or have poor support. Reputable registrars properly notify registrants of UDRP proceedings, ensuring you have time to respond. ## If You Receive a UDRP Complaint 1. Don't panic — you have 20 days to respond. 2. Read the complaint carefully. Identify the trademark, when it was registered, and when you registered the domain. 3. Consider consulting a domain attorney — many specialize in UDRP defense. 4. Submit a detailed response addressing all three elements. Courts and panels look unfavorably on non-responses. 5. Check the WIPO case database for precedents with similar facts. The UDRP is a powerful tool used both legitimately (against actual cybersquatters) and abusively (against legitimate domain investors). Understanding the rules keeps you on the right side of both.