The Anticybersquatting Consumer Protection Act and When to Sue in Federal Court

By Hank FasthoffJuly 4, 2026

A domain name dispute may require more than transfer of the registration. The Uniform Domain Name Dispute Resolution Policy offers a focused administrative procedure when the trademark owner seeks transfer or cancellation. It offers no damages, discovery, or injunction against registrations beyond the domains named in the complaint.

The Anticybersquatting Consumer Protection Act, commonly called the ACPA, authorizes a civil action in federal court. It reaches abusive domain registration tied to a bad faith intent to profit from another party's mark. That intent requirement separates cybersquatting from an ordinary trademark dispute or a legitimate disagreement over a descriptive domain.

What an ACPA Plaintiff Must Prove

Section 1125(d)(1)(A) requires proof that the defendant acted with a bad faith intent to profit from a mark and registered, trafficked in, or used a qualifying domain name. For a distinctive mark, the domain must be identical or confusingly similar to the mark. A famous mark also receives protection against a domain that is dilutive.

Timing affects the first part of the analysis. The mark must have been distinctive when the defendant registered the domain. A trademark registration obtained years later may strengthen proof of ownership and present rights, but it doesn't establish that the mark was distinctive on the earlier domain registration date.

Registration, trafficking, and use are alternative acts under the statute, but each has defined limits. A registrant may face liability without launching a website if the registration itself satisfies the other elements. The statute defines trafficking to include transfers for consideration through sales, purchases, loans, pledges, licenses, and similar transactions. Liability based on use applies only to the registrant or the registrant's authorized licensee under Section 1125(d)(1)(D).

That last limitation prevents the ACPA from reaching every service provider connected to a domain. In Petroliam Nasional Berhad v. GoDaddy.com, Inc., 737 F.3d 546 (9th Cir. 2013), the Ninth Circuit held that the ACPA recognizes no contributory cybersquatting liability. A registrar, host, payment provider, or advertising service may face liability under another legal theory, but its relationship to the domain alone doesn't make it an ACPA defendant.

Bad Faith Depends on the Full Record

The ACPA identifies nine nonexclusive factors that inform bad faith intent. Courts consider the defendant's trademark or other rights in the domain, whether the domain reflects the defendant's legal or commonly used name, prior bona fide use, and legitimate noncommercial or fair use. They also examine diversion for commercial gain or tarnishment, offers to sell without legitimate use, false registration information, a pattern of similar registrations, and the strength of the mark incorporated into the domain.

Those factors guide the inquiry without becoming a scorecard. A court can consider facts outside the list, and no single factor controls. The question is whether the complete record shows an intent to profit from the trademark value associated with another party's mark.

TMI, Inc. v. Maxwell, 368 F.3d 433 (5th Cir. 2004), illustrates the distinction. Reversing an ACPA judgment against the operator of a noncommercial criticism site, the Fifth Circuit focused on the absence of profit seeking conduct. Maxwell charged no money, displayed no advertising or commercial links, never offered to sell the domain, supplied no false contact information, and showed no pattern of registering other marks. Confusing similarity alone couldn't replace proof of a bad faith intent to profit.

The Statutory Safe Harbor

Section 1125(d)(1)(B)(ii) directs a court against finding bad faith when the defendant believed, and had reasonable grounds to believe, that the domain use was fair or otherwise lawful. A subjective assertion of good faith provides no automatic protection. Objectively reasonable grounds also have to support the belief.

In Virtual Works, Inc. v. Volkswagen of America, Inc., 238 F.3d 264 (4th Cir. 2001), the Fourth Circuit held that a defendant acting even partially in bad faith couldn't invoke the safe harbor. The court evaluated the statutory factors and the complete circumstances rather than treating the safe harbor as an exception to proven bad faith.

Remedies in Federal Court

The ACPA authorizes remedies unavailable in a UDRP proceeding. Under Section 1125(d)(1)(C), a court may order forfeiture, cancellation, or transfer of the domain. Section 1116 also authorizes injunctive relief, which may restrain future conduct beyond the disposition of the domains named in the complaint.

The monetary remedies require careful separation. Under 15 U.S.C. § 1117(a), a successful plaintiff may recover the defendant's profits, the plaintiff's damages, and the costs of the action, subject to equitable principles. If actual damages are inadequate, a court may increase them up to three times the proven amount. The increase must compensate rather than punish. Attorney's fees follow a different standard and may be awarded in an exceptional case.

Instead of actual damages and profits, the plaintiff may elect statutory damages before final judgment. Section 1117(d) sets the range at $1,000 to $100,000 for each domain, in the amount the court considers just. The election avoids the need to prove a precise loss or the defendant's profit, though the facts surrounding the conduct continue to influence the award.

In Verizon California Inc. v. OnlineNIC, Inc., No. C 08-2832 JF (RS) (N.D. Cal. Dec. 19, 2008), the court entered a default judgment involving 663 domains and awarded $50,000 for each, producing a $33.15 million award. The court declined the $100,000 maximum and separately entered a permanent injunction. The default posture and the scale of the registration pattern are essential context for the award.

How Federal Court Relates to the UDRP

The UDRP and federal litigation serve different purposes. A UDRP panel can transfer or cancel a domain after a proceeding conducted on written submissions. A federal court can decide statutory and common law claims, compel evidence, award money, and enter broader injunctive relief.

A UDRP decision doesn't bind the court. In Barcelona.com, Inc. v. Excelentisimo Ayuntamiento de Barcelona, 330 F.3d 617 (4th Cir. 2003), the Fourth Circuit treated the administrative process as limited and conducted an independent judicial analysis. A UDRP respondent may seek relief under Section 1114(2)(D)(v), while either side may assert other trademark, contract, or declaratory claims supported by the facts. Reaching federal court therefore doesn't mean every dispute proceeds as an affirmative ACPA claim.

The implementation rule also requires precision. Paragraph 4(k) of the UDRP Policy allows the respondent 10 business days after notice of a transfer or cancellation decision. Filing a lawsuit alone doesn't suspend implementation. Within that period, the registrar must receive official documentation showing that the respondent filed suit against the complainant in the mutual jurisdiction selected under the policy.

Jurisdiction and the Available Defendant

An ordinary ACPA action requires personal jurisdiction over the defendant. A domestic registrant may have sufficient contacts with the chosen forum, while an unknown or foreign registrant may present a difficult jurisdictional record. Privacy or proxy registration can also delay identification of the responsible person.

When personal jurisdiction is unavailable or the owner can't identify the proper defendant after the statutory search and notice efforts, Section 1125(d)(2) permits an in rem action against the domain itself. That procedure has narrower remedies and distinct venue requirements. The related article on in rem actions under the ACPA addresses those requirements.

Identifying the correct defendant requires more than naming every company associated with the domain. Section 1125(d)(1)(D) limits liability based on use, and Petroliam Nasional rejects contributory liability under the ACPA. Discovery may reveal a separate infringement, false designation, conspiracy, or state law claim, but each theory has its own elements.

Choosing Between the ACPA and the UDRP

The UDRP generally fits a documented case of abusive registration when the owner seeks transfer or cancellation and the material facts appear in public records. Its limited procedure reduces cost and time. It also limits the available remedy and offers no compulsory discovery.

Federal court becomes more useful when the owner seeks damages or evidence from third parties, faces a pattern involving multiple domains, or seeks an injunction against continuing conduct. Litigation can also combine the ACPA claim with trademark infringement, false designation, counterfeiting, or related state law claims. Those added remedies come with federal pleading standards, jurisdictional requirements, discovery expense, and a longer timetable.

The choice depends on the record rather than the label attached to the registrant. A weak ACPA claim doesn't improve because the domain resembles a mark, and an overreaching UDRP complaint may support a finding of reverse domain name hijacking. The evidence must connect the defendant's conduct to a bad faith intent to profit from the mark.

Evidence and Trademark Registration

Evidence preservation begins with the domain's condition before notice of the dispute. Useful records include dated screenshots, current RDAP data, historical WHOIS records, sale communications, pay per click links, source code, redirects, registrar information, and evidence connecting the registrant to other domains. A preservation demand and early third party discovery may become important when content or account records can disappear.

Federal trademark registration strengthens many ACPA cases, but it isn't an element of an ordinary personal action under Section 1125(d)(1). Section 1115(a) makes a Principal Register registration prima facie evidence of validity, ownership, and the exclusive right to use the mark for the listed goods or services, subject to defenses. Section 1072 gives constructive notice of the registrant's ownership claim.

Neither provision establishes the owner's actual first use date. An application may state claimed dates of use, but those dates remain subject to proof. More important for an ACPA claim, a registration issued after the domain registration doesn't retroactively establish that the mark was distinctive when the defendant acquired the domain.

The damages election also requires an evidence based comparison. Statutory damages may offer a practical remedy when profit and loss records are incomplete. Actual damages and disgorgement may produce a larger recovery when reliable financial records show substantial diversion or revenue. Section 1117(d) permits the election before final judgment, allowing the litigation record to inform that choice.

The ACPA supplies powerful remedies for intentional cybersquatting, but it targets a defined form of bad faith conduct. A sound filing connects the mark's rights at the relevant time, the defendant's statutory role, the domain's similarity, and the evidence of an intent to profit. That structure determines whether federal court offers a useful remedy or only a more expensive dispute.