The Anticybersquatting Consumer Protection Act and When to Sue in Federal Court

By Hank FasthoffJuly 4, 2026

Most domain name disputes can be resolved through a UDRP proceeding at WIPO or another provider. A UDRP complaint costs $1,500, takes roughly two months, and can transfer the domain name to the trademark owner. For many cybersquatting cases, that is sufficient. Cases like Valero Energy Corp. v. American Distribution Systems, Inc. (WIPO Case No. D2001-0581), where the panel ordered transfer of a domain name incorporating the complainant's mark, demonstrate that the UDRP can produce effective results without litigation.

But the UDRP's remedies stop at transfer or cancellation. Damages, an injunction against future registrations, and recovery of the respondent's pay-per-click profits all lie beyond a panel's power. When a trademark owner needs those remedies, the Anticybersquatting Consumer Protection Act (ACPA), 15 U.S.C. § 1125(d), provides a federal cause of action that supplies them.

Elements of an ACPA Claim

Congress enacted the ACPA in 1999 as an amendment to Section 43 of the Lanham Act. Under 15 U.S.C. § 1125(d)(1)(A), a plaintiff must prove three elements to establish a cybersquatting claim.

First, the plaintiff must own a mark that was distinctive at the time the domain name was registered (or famous, if the claim is based on dilution). Second, the defendant registered, trafficked in, or used a domain name that is identical or confusingly similar to the plaintiff's distinctive mark, or identical or confusingly similar to or dilutive of the plaintiff's famous mark. Third, the defendant acted with a bad faith intent to profit from the plaintiff's mark.

Unlike the UDRP, which requires both bad faith registration and bad faith use, the ACPA reaches registration, trafficking, or use, and any one of those acts can support liability. A cybersquatter who registers a domain name in bad faith but never builds a website can be liable under the ACPA for the registration alone. A domain broker who acquires and resells domain names incorporating others' trademarks can be liable for trafficking. A party who uses a confusingly similar domain name to divert traffic can be liable for use.

The Nine Bad Faith Factors

Under 15 U.S.C. § 1125(d)(1)(B)(i), courts consider a non-exclusive list of nine factors in determining whether a defendant acted with bad faith intent to profit from the plaintiff's mark.

Whether the defendant has trademark or other intellectual property rights in the domain name. Whether the domain name consists of the defendant's legal name or a name commonly used to identify the defendant. Whether the defendant has any prior use of the domain name in connection with a bona fide offering of goods or services. Whether the defendant is making a bona fide noncommercial or fair use of the mark in a site accessible under the domain name. Whether the defendant intends to divert consumers from the mark owner's online location in a manner that could harm the goodwill represented by the mark, for commercial gain or with the intent to tarnish or disparage the mark. Whether the defendant has offered to transfer, sell, or otherwise assign the domain name to the mark owner or a third party for financial gain, without having used the mark in a legitimate site. Whether the defendant has provided misleading false contact information when applying for the registration of the domain name. Whether the defendant has registered or acquired multiple domain names that are identical or confusingly similar to marks of others. Whether the mark incorporated in the domain name is distinctive and famous.

No single factor is dispositive. Courts weigh the factors based on the totality of the circumstances. A defendant who registered dozens of domain names incorporating the trademarks of different companies, offered to sell them to the trademark owners at inflated prices, and provided false WHOIS information will satisfy multiple bad-faith factors simultaneously. A defendant who registered a domain name consisting of a common word that happens to be another party's trademark, built a legitimate website, and never offered to sell the domain may overcome the bad faith analysis entirely.

The Safe Harbor

Under 15 U.S.C. § 1125(d)(1)(B)(ii), bad faith intent "shall not be found in any case in which the court determines that the person believed and had reasonable grounds to believe that the use of the domain name was a fair use or otherwise lawful." Courts have described this safe harbor as providing a "narrow berth" for fair use arguments. In Virtual Works, Inc. v. Volkswagen of America, Inc., 238 F.3d 264, 270 (4th Cir. 2001), the Fourth Circuit held that a defendant who acts even partially in bad faith is not entitled to benefit from the safe harbor.

Remedies

Injunctive relief. Courts may order the forfeiture, cancellation, or transfer of the infringing domain name. 15 U.S.C. § 1125(d)(1)(C). Courts may also enjoin the defendant from registering additional domain names that incorporate the plaintiff's marks, which is a remedy unavailable through the UDRP.

Actual damages and profits. Under 15 U.S.C. § 1117(a), a successful plaintiff may recover the defendant's profits from the infringing domain name, any damages sustained by the plaintiff, and the costs of the action. In exceptional cases, the court may award treble damages and reasonable attorney's fees.

Statutory damages. In lieu of actual damages and profits, a plaintiff may elect statutory damages of not less than $1,000 and not more than $100,000 per domain name, as the court considers just. 15 U.S.C. § 1117(d). Statutory damages are available per domain name, not per act of infringement, which means a defendant who registered 100 infringing domain names faces potential statutory damages of $100,000 to $10,000,000.

In Verizon California, Inc. v. OnlineNIC, Inc. (N.D. Cal. 2008), the court awarded $33.15 million in statutory damages against a registrar that registered 663 domain names confusingly similar to Verizon's trademarks with bad faith intent, at $50,000 per domain name.

When ACPA Is Preferable to UDRP

Federal court litigation under the ACPA is more expensive and time-consuming than a UDRP proceeding, but it provides remedies the UDRP cannot match. ACPA litigation is the better option in several circumstances.

When the trademark owner wants monetary damages. If the cybersquatter has profited from pay-per-click advertising, diverted customers, or caused quantifiable harm to the trademark owner's business, the ACPA allows recovery of those profits and damages. A UDRP proceeding cannot.

When the cybersquatter is a serial offender. A defendant who has registered dozens or hundreds of domain names incorporating the trademarks of different companies may warrant an injunction prohibiting future registrations, in addition to transfer of the existing domains. A UDRP proceeding addresses only the specific domain names identified in the complaint.

When the trademark owner needs discovery. UDRP proceedings are decided on the written record with no discovery. If the case involves disputed facts, hidden ownership structures, or a pattern of conduct that requires evidence beyond what is publicly available, federal litigation provides subpoena power, document requests, and depositions.

When the respondent has filed suit to contest a UDRP decision. Under the UDRP Rules, a respondent who files suit within 10 business days of a transfer order can prevent implementation of the UDRP decision. Once the dispute reaches federal court, the ACPA governs the analysis.

When the domain name is part of a broader trademark infringement scheme. Cybersquatting often accompanies other forms of trademark infringement, including counterfeit goods, phishing, and brand impersonation. An ACPA claim can be joined with claims for trademark infringement, unfair competition, and false designation of origin under the Lanham Act, addressing the full scope of the defendant's conduct in a single proceeding.

The Relationship Between ACPA and UDRP

A trademark owner may pursue ACPA litigation and a UDRP proceeding simultaneously, or one after the other. A UDRP decision does not preclude ACPA litigation, and a federal court is not bound by a UDRP panel's findings. Either party may file suit in a court of competent jurisdiction before, during, or after a UDRP proceeding, and the court conducts its own independent analysis under the ACPA's statutory framework.

Some trademark owners file a UDRP complaint first and pursue ACPA litigation only if the UDRP proceeding is unsuccessful, if the respondent files suit to block implementation, or if the owner subsequently determines that damages are worth pursuing. Others go directly to federal court when damages, discovery, or injunctive relief beyond domain transfer are priorities from the start.

Personal Jurisdiction

An ACPA defendant must be subject to personal jurisdiction in the district where the plaintiff files suit. For cybersquatters located in the United States, personal jurisdiction follows standard principles. For cybersquatters located outside the United States or whose identity is concealed behind a privacy service, personal jurisdiction may be difficult or impossible to establish.

When personal jurisdiction over the registrant is unavailable, the trademark owner may file an in rem action against the domain name itself under 15 U.S.C. § 1125(d)(2). In rem jurisdiction lies in the judicial district where the domain name registry, registrar, or other domain name authority is located. A separate article in this series covers in rem actions in detail.

Practical Considerations

Register your trademarks before filing an ACPA claim. While common law trademark rights can support an ACPA claim, a federal registration strengthens the case, establishes the date of first use, and creates a presumption of validity and nationwide constructive notice.

Preserve evidence of the defendant's bad faith conduct before filing suit. Screenshots of the infringing website, WHOIS records, pay-per-click advertising on the domain, correspondence in which the defendant offered to sell the domain, and evidence of the defendant's registration of other infringing domain names should all be collected and preserved before the complaint is filed. Domain content can change or disappear once the defendant learns of the dispute.

Consider the cost-benefit analysis. ACPA litigation in federal court costs more and takes longer than a UDRP proceeding. For a single domain name dispute where the only remedy needed is transfer, the UDRP is almost always more efficient. For disputes involving multiple domains, serial cybersquatters, significant monetary harm, or broader trademark infringement, the ACPA provides remedies that justify the additional cost and time.

Evaluate whether to elect statutory damages or prove actual damages. Statutory damages of up to $100,000 per domain name can produce substantial awards against defendants who register multiple infringing domains, even when actual damages are difficult to quantify. Actual damages and disgorgement of profits may produce a larger recovery when the defendant has generated significant revenue from the infringing domain names.