cybersquatting: definition

Cybersquatting means registering a domain name that matches someone else’s trademark, or the name of a well-known person or business, to profit from it. Usually the aim is to sell the name to the owner for far more than it cost, or to use the brand to attract visitors. Brand owners can respond in several ways, from a formal letter to a court case.

What cybersquatting is

Most domain names go to whoever registers them first, and nobody checks new names against trademarks beforehand. The World Intellectual Property Organization (WIPO World Intellectual Property Organization The United Nations agency whose center handles many domain name disputes. Full definition of WIPO) describes cybersquatters as people who use this to register names of trademarks, famous people or businesses they have no connection with.

The main tool against it is the UDRP, adopted by ICANN Internet Corporation for Assigned Names and Numbers The nonprofit that coordinates the global DNS and gTLD policy. Full definition of ICANN on 26 August 1999. A complaint succeeds only if the complainant The party that files a domain dispute, usually a trademark owner. Full definition of complainant proves all three elements:

the domain name is identical or confusingly similar to a trademark in which the complainant has rights;
the registrant The person or organization that holds a domain name registration. Full definition of registrant has no rights or legitimate interests In the UDRP, a valid reason for a holder to have the disputed domain. Full definition of rights or legitimate interests in the name;
the name was registered and is being used in bad faith.

How to tell if a domain is cybersquatting

Only a panel The one or three independent experts who decide a domain dispute. Full definition of panel or a court can decide that a specific name is cybersquatting. The UDRP gives four examples of bad faith, and the list is open: registering a name mainly to sell it to the trademark owner or a competitor above its documented costs; a pattern of registration Obtaining the right to use a domain name for a set period. Full definition of registration that block owners from using their marks; disrupting a competitor; and using the name to attract visitors for profit by creating confusion with the mark.

WIPO panels also weigh the distinctiveness or fame of the mark, pages with links to the brand’s competitors, and more matching registrations after the holder was put on notice. For a well-known mark, especially an invented one, registering the mark with a typo or followed by a descriptive word can by itself suggest bad faith. A blank or “coming soon” page does not rule it out (passive holding Holding a domain without using it, which UDRP panels can still treat as bad faith. Full definition of passive holding).

Signs of a legitimate holder include genuine business use of the name before any notice of the dispute, being commonly known by the name, and fair or noncommercial use. Buying names to resell them, even at a profit, is not by itself bad faith. Targeting a specific trademark is what counts.

Options: letters, UDRP, URS and courts

A cease and desist letter A formal letter demanding that a domain holder stop using or hand over a name. Full definition of cease and desist letter is a formal demand to stop using a name or hand it over, not a court order. In panel practice, both sides face risks: a holder who registers more matching names after notice adds evidence of bad faith, and a complainant who files after failing to buy the name, without a plausible legal basis, risks a finding of attempted reverse domain name hijacking.

The UDRP covers gTLD generic top-level domain A top-level domain not tied to a country, run under ICANN contracts. Full definition of gTLD names and some ccTLD country code top-level domain A top-level domain for a country or territory, usually two letters long. Full definition of ccTLD, such as .nu, .tv and .ws. The panel can only order the name transferred or cancelled; it awards no money or legal costs. As of October 2026, at WIPO the respondent The domain holder against whom a domain dispute is filed. Full definition of respondent has 20 days to respond (plus an automatic 4-day extension), the panel should decide within 14 days of its appointment, and the basic fee is USD 1,500 for one to five names and a single panelist. The registrar A company that registers domain names for customers with the registry. Full definition of registrar waits 10 business days before carrying out the decision (as of October 2026).

The Uniform Rapid Suspension System (URS) is a faster, cheaper route for clear-cut cases only. The complainant needs a qualifying word mark and must prove its case by clear and convincing evidence. As of October 2026, the registrant has 14 calendar days to respond. If the complainant wins, the name is suspended for the rest of its registration period, with an option to add one year, but never transferred. Either party can appeal.

The UDRP does not stop either party from going to court, before or after, and a URS decision does not rule out a court case.

US law

The United States has its own statute against cybersquatting, which is applied by the courts and is separate from the UDRP. Its conditions and remedies are outside the scope of this article.

Cybersquatting in Spain and the EU

In Spain, the Trademark Act (Ley 17/2001, of 7 December) lets a trademark owner prohibit use of its sign as a domain name when the general conditions for infringement are met.

For .es names, an order of 19 May 2005 (Orden ITC/1542/2005) required Red.es The Spanish public body that manages the .es domain through its unit Dominios.es. Full definition of Red.es to set up an out-of-court procedure that is mandatory for the holder, against speculative or abusive registrations: the holder has no rights or legitimate interests, and the name was registered or is being used in bad faith. The decision binds the parties and Red.es unless a court case starts within a short deadline set in the .es procedure rules. Unlike the UDRP, the .es procedure also protects trade names, civil names and official names of Spanish public bodies, and bad faith in either registration or use is enough.

For .eu, Regulation (EU) 2019/517, applicable from 13 October 2022, names cybersquatting explicitly. A .eu name identical or confusingly similar to a right recognised by EU or national law can be revoked, and transferred if needed, after alternative dispute resolution (ADR) or a court case, if it was registered without rights or legitimate interest A GDPR ground for processing personal data, weighed against the registrant's privacy rights. Full definition of legitimate interest, or registered or used in bad faith. Like the .es test, this is wider than the UDRP’s.

How to prevent it

Register the trademark, and register the main domain names early.
In new gTLD A generic top-level domain added to the internet through ICANN's New gTLD Program. Full definition of new gTLD, record the mark in the TMCH Trademark Clearinghouse A database of verified trademarks used for sunrise and claims in new gTLDs. Full definition of TMCH for sunrise An early phase when trademark owners can register matching names first. Full definition of sunrise priority and Trademark Claims notices when a matching name is registered.
Watch new registrations Domains newly created in a period, also called adds or creates. Full definition of new registrations and act quickly.

An example

A company holds the Spanish trademark EXAMPLE. Someone registers example.com, shows links to the company’s competitors and offers to sell the name for far more than it cost. Under the UDRP, the company would have to prove all three elements; the offer and the links match two of the bad-faith examples. For a .es name, bad faith in either registration or use would be enough.

cybersquatting