Domain Name Disputes and Cybersquatting

The short answer, expanded

The law treats a domain name registered to exploit someone else's brand differently from a domain that happens to resemble it. Two systems exist to deal with the first kind. The Uniform Domain Name Dispute Resolution Policy, which every registrar is bound to follow under its ICANN agreement, offers a fast, document-only proceeding whose only remedy is transfer or cancellation. The Anticybersquatting Consumer Protection Act, section 43(d) of the Lanham Act, offers a federal lawsuit with transfer, damages and fees on the table. Owners choose between them based on what they need: the name back quickly, or compensation and a judgment.

Both systems share a core requirement. You must have trademark rights in the name, and the registrant must have acted in bad faith. A business that cannot show either has a different problem, usually a legitimate competitor with a similar name, which is a trademark question covered in trademark infringement basics.

Do you have trademark rights in the name?

Registering a company with the Texas Secretary of State creates no trademark. Rights come from using a distinctive name in commerce to identify your goods or services, and a federal registration strengthens and extends them. Both the UDRP and the federal Act ask whether the domain is identical or confusingly similar to a mark in which you have rights, and the federal Act asks whether the mark was distinctive at the time the domain was registered. A business with a descriptive name, or one that adopted its name after the domain was registered, starts at a disadvantage in both forums.

Gather the proof of use now: dated advertising, invoices, your first website capture, and any registration certificate. The date your rights began is often the deciding fact.

The UDRP: fast, cheap, transfer only

Under paragraph 4(a) of the Policy, a complainant must prove three things: the domain is identical or confusingly similar to a trademark or service mark in which the complainant has rights; the registrant has no rights or legitimate interests in the domain; and the domain has been registered and is being used in bad faith. All three are required.

Paragraph 4(b) lists circumstances that evidence bad faith, including registering the domain primarily to sell it to the mark owner or a competitor for more than out-of-pocket costs, registering it to block the owner from reflecting its mark in a domain as part of a pattern, registering it to disrupt a competitor's business, and using it to attract users for commercial gain by creating a likelihood of confusion with the mark. Paragraph 4(c) lists what counts as a legitimate interest: bona fide use or demonstrable preparations to use the domain for goods or services before notice of the dispute, being commonly known by the name, or legitimate noncommercial or fair use without intent to mislead or tarnish.

The proceeding is conducted in writing before a panel appointed by an approved provider; the WIPO Arbitration and Mediation Center is the most used. There is no discovery and no hearing. Under paragraph 4(i) the only remedies are cancellation of the domain or its transfer to the complainant. No damages, no fees, no injunction against future conduct. Under paragraph 4(k) either party may still go to court before or after the proceeding, and if the panel orders transfer, the registrar waits ten business days before implementing it so that the registrant can file suit; a timely lawsuit suspends the transfer until the court rules or the case is dismissed or settled.

The federal claim: the Anticybersquatting Consumer Protection Act

Under 15 U.S.C. § 1125(d)(1), a person is liable to the owner of a mark if, without regard to the goods or services of the parties, that person has a bad faith intent to profit from the mark and registers, traffics in or uses a domain name that is identical or confusingly similar to a mark that was distinctive when the domain was registered, or identical, confusingly similar to or dilutive of a mark that was famous at that time.

Section 1125(d)(1)(B)(i) gives the court nine non-exclusive factors for bad faith. They include whether the registrant has any trademark rights in the name; whether the domain is the registrant's own legal name or a name commonly used to identify it; the registrant's prior bona fide use of the domain for goods or services; bona fide noncommercial or fair use of the mark at the site; intent to divert consumers from the owner's site in a way that harms the goodwill of the mark, for commercial gain or to tarnish it; an offer to sell the domain for financial gain without having used it, or a pattern of such conduct; false or misleading contact information when registering, or a pattern of it; registering multiple domains that are identical or confusingly similar to others' marks; and how distinctive or famous the mark is. Section 1125(d)(1)(B)(ii) adds a safe harbor: bad faith is not found where the registrant believed, and had reasonable grounds to believe, that its use of the domain was fair or otherwise lawful.

The remedies are broader than the UDRP's. Under § 1125(d)(1)(C) the court may order forfeiture or cancellation of the domain or its transfer to the mark owner. Under 15 U.S.C. § 1117(d) the owner may elect, instead of actual damages and profits, statutory damages of not less than $1,000 and not more than $100,000 per domain name, as the court considers just. The general Lanham Act remedies, including injunctions under § 1116 and attorney's fees in exceptional cases under § 1117(a), apply as well; they are described in remedies in a trademark case under the Lanham Act.

When the registrant is anonymous or abroad: the in rem action

Cybersquatters often hide behind privacy services or false contact details, or sit in countries where a judgment is unenforceable. Section 1125(d)(2) answers this with an in rem action against the domain name itself, filed in the federal district where the registrar, registry or other domain name authority is located, if the owner either cannot obtain personal jurisdiction over a would-be defendant or cannot find that person after due diligence, including sending notice to the registrant's listed address and publishing notice as the court directs. The remedies in an in rem case are limited to forfeiture, cancellation or transfer of the domain; there are no damages because no person is before the court.

Choosing between the UDRP and a lawsuit

In practice the UDRP fits the common case: a parked or redirecting domain, an anonymous registrant, and an owner who wants the name and nothing more. The lawsuit fits the case where the registrant is a known competitor, the harm is real and measurable, a pattern of registrations suggests a professional squatter, or the owner needs an injunction covering future conduct. Some owners file the UDRP first and sue only if the registrant contests the transfer in court.

Example

Suppose a Dallas accounting firm has used an invented name since 2014 and holds a federal registration. In 2026 it finds that the .com version of its name, which it never bought because it uses .cpa, has been registered by an unknown party, shows pay-per-click links to other Dallas accountants, and is listed for sale at a five-figure price. The firm sends no letter, because a letter would tip the registrant to add a token legitimate page. It files a UDRP complaint with the registration certificate, screenshots of the parking page and the sale listing, and a declaration about its use since 2014. The registrant does not respond. The panel finds confusing similarity, no legitimate interest and bad faith under paragraph 4(b), and orders transfer; the registrar implements it after the ten-business-day window. Had the registrant been a Dallas competitor diverting the firm's clients for two years, the firm would instead have sued in the Northern District of Texas for transfer, statutory damages per domain and an injunction.

What is not cybersquatting

• A legitimate business with the same or a similar name that registered its own name as a domain. That is a trademark priority dispute, not squatting, and the safe harbor protects a registrant who reasonably believed its use was lawful.
• A domain registered before your mark became distinctive. The federal Act measures distinctiveness at the time of registration.
• Criticism, commentary or fan sites that make genuinely noncommercial use, although the line is contested when the site carries advertising or links to competitors.
• A former partner, employee or web developer who registered the company's domain in his own name. That is a real and common problem, but it is usually resolved as an ownership, agency or contract dispute rather than under the cybersquatting provisions.

Where these disputes are decided in Texas

A UDRP proceeding happens entirely online with the chosen provider. A federal cybersquatting claim is a Lanham Act claim and is filed in federal court, for a Dallas business normally the Northern District of Texas; Texas trademark and unfair competition claims can be joined to it. Texas has no separate state cybersquatting statute that this article relies on, so the state law claims in a domain dispute are the ordinary trademark and unfair competition claims. The choice of forum across IP disputes is discussed in where IP disputes get decided.

First steps

• Capture the domain's current page, its WHOIS record and any sale listing, with dates, before contacting anyone.
• Confirm the domain's creation date and compare it with the date your rights began.
• Check whether the registrant holds other domains matching other businesses' names.
• Decide with counsel whether a letter helps or hurts. Against an anonymous squatter it usually hurts; against a known business it is usually the right first step.
• Lock down your own variants: common misspellings and the main alternative extensions.

Tina Wysk represents Dallas businesses in trademark and domain name disputes in federal court and in UDRP proceedings; the practice is described at intellectual property disputes.