How to File a UDRP Domain Dispute

A UDRP complaint has four moving parts: confirming the domain’s extension falls under the policy, choosing an approved provider, annexing documentary evidence for all three policy elements, and filing electronically. The proceeding is decided entirely on the written record with no hearings, and the outcome within about two months is transfer, cancellation, or denial of the complaint.

When to pursue an administrative domain dispute

When an infringing domain registration cannot be resolved through voluntary negotiation or by reporting domain abuse to the registrar, the UDRP offers an expedited administrative remedy for cybersquatting. The proceeding is decided by independent panelists accredited by approved dispute resolution providers, primarily the World Intellectual Property Organization (WIPO) and Forum.

Unlike hosting or registrar takedowns that merely take content offline, a successful UDRP outcome transfers legal ownership of the domain directly to the trademark owner.

The three mandatory policy elements under Paragraph 4(a)

To succeed in a UDRP proceeding, the complainant must prove all three elements concurrently:

1. Identical or confusingly similar mark

You must demonstrate established trademark rights, either through registered marks (such as USPTO, EUIPO, or national offices) or recognized common-law usage. The comparison evaluates whether the alphanumeric string of the domain incorporates the mark with minor typographic variations, prefixes, suffixes, or typosquatting patterns.

2. No rights or legitimate interests

You must establish a case that holds up on its face (prima facie) that the registrant has no legitimate business association with the name. The registrant has not been commonly known by the name, holds no trademark licenses, and is not making a legitimate non-commercial or fair use of the domain.

3. Registered and used in bad faith

Both bad-faith registration and bad-faith use must be demonstrated. Evidence supporting bad faith includes:

• Acquiring the domain primarily to sell or rent it to the trademark owner at a price exceeding documented out-of-pocket costs.
• Preventing the trademark owner from reflecting the mark in a corresponding domain.
• Disrupting the business of a competitor.
• Using the domain to attract internet users for commercial gain by creating a likelihood of confusion (such as parking landers with competitor links or affiliate portals).
• Inactivity or passive holding when combined with concealment of registrant identity or lack of plausible legitimate purpose.

Step 1: Verify jurisdiction and dispute rules

Before drafting, confirm the applicable policy for the domain extension:

• Generic TLDs (.com, .org, .net, new gTLDs): Mandatory ICANN UDRP applies automatically via the registrar agreement.
• Country-code TLDs (ccTLDs): Consult the WIPO ccTLD database. Some registries follow the UDRP directly (.co, .ai, .me), .io uses a WIPO-administered variant requiring bad faith in either registration or use rather than both, and others require registry-specific procedures (Nominet DRS for .uk, CDRP for .ca, auDRP for .au).

For a clear-cut case on a new gTLD, ICANN’s Uniform Rapid Suspension (URS) is a faster, cheaper proceeding worth knowing about. The tradeoff is the remedy: URS only suspends the domain for the rest of its registration term and never transfers ownership, so it stops an active phishing site but leaves the name in the registrant’s hands.

Step 2: Select an approved dispute resolution provider

ICANN has accredited several dispute resolution service providers:

• WIPO Arbitration and Mediation Center (WIPO AMC): The largest international provider with established jurisprudence and an indexed database of decisions.
• Forum (formerly National Arbitration Forum): Widely used in North America with streamlined online filing workflows.

Step 3: Compile the factual evidence package

UDRP complaints rely on documentary evidence attached as annexes. Relevant technical observations include:

• Certified trademark certificates: Official register extracts demonstrating priority dating prior to the domain creation timestamp.
• Historical RDAP / whois records: Documenting the exact registration date, registrar, and privacy proxy usage.
• Site observation captures: Unedited full-page captures showing parking links, pay-per-click directories, or unauthorized brand references.
• DNS and MX records: Evidence of active mail exchange records configured to send deceptive email from the domain.
• Communication logs: Unsolicited offers to sell the domain name at inflated valuations.

For recently detected lookalikes, the free domain watch report lists every matching registration observed in the last 30 days.

Step 4: Filing and procedure

The complaint is submitted electronically to the chosen provider and served concurrently on the respondent and registrar. The registrar then locks the domain against unauthorized transfer during the proceeding. The respondent receives 20 calendar days to submit a formal response.

A single panelist typically renders a written decision within 14 days of appointment. If the panel orders transfer, the registrar waits 10 business days and then implements the change, unless the respondent documents that it has filed a lawsuit against the complainant in a court of mutual jurisdiction. Mutual jurisdiction means the court location the complainant pre-commits to in the complaint, typically where the registrar’s principal office or the registrant’s listed address sits.