How the UDRP Process Works and What You Need to Prove

By Hank FasthoffJuly 4, 2026

A trademark owner who discovers that a cybersquatter has registered a domain name incorporating the owner's mark has two primary enforcement options. One is federal litigation under the Anticybersquatting Consumer Protection Act, which is covered in a separate article. The other is a complaint under the Uniform Domain-Name Dispute-Resolution Policy (UDRP), an administrative proceeding that can transfer or cancel the domain name in approximately 45 to 60 days, without a lawsuit, without a court appearance, and without the cost and timeline of federal litigation.

ICANN adopted the UDRP in 1999, based on recommendations from the World Intellectual Property Organization. Every registrant of a domain name in a generic top-level domain (.com, .net, .org, and all new gTLDs) agrees to submit to UDRP proceedings as a condition of registration. WIPO is the leading UDRP dispute resolution provider, having administered more than 80,000 domain name cases since the policy took effect. In 2025, WIPO administered 6,282 cases, the highest annual caseload in its history.

The Three Elements

Under UDRP paragraph 4(a), a complainant must prove all three elements to obtain transfer or cancellation of a domain name. Missing any one of them ends the case.

First, the domain name must be identical or confusingly similar to a trademark or service mark in which the complainant has rights. UDRP paragraph 4(a)(i). This element is typically the easiest to satisfy. Panels apply a side-by-side comparison between the trademark and the domain name, disregarding the top-level domain suffix (.com, .net, etc.) for purposes of the analysis. Minor variations, misspellings, and the addition or deletion of generic or descriptive terms generally don't prevent a finding of confusing similarity when the complainant's mark is recognizable within the domain name.

Second, the respondent must have no rights or legitimate interests in respect of the domain name. UDRP paragraph 4(a)(ii). Because proving a negative is difficult, panels apply a burden-shifting framework. Once the complainant makes a prima facie case that the respondent lacks rights or legitimate interests, the burden shifts to the respondent to produce evidence establishing one of the grounds recognized under UDRP paragraph 4(c), or any other basis for a legitimate interest.

Paragraph 4(c) identifies three circumstances that, if proved by the respondent, demonstrate rights or legitimate interests. Before receiving any notice of the dispute, the respondent used or made demonstrable preparations to use the domain name in connection with a bona fide offering of goods or services. The respondent has been commonly known by the domain name, even if it hasn't acquired trademark rights. The respondent is making a legitimate noncommercial or fair use of the domain name, without intent for commercial gain to misleadingly divert consumers or to tarnish the complainant's mark.

Third, the domain name must have been registered and is being used in bad faith. UDRP paragraph 4(a)(iii). The conjunctive language generally requires bad faith when the respondent registered or acquired the domain and bad faith use. Abusive use that begins after a good faith registration ordinarily won't satisfy the element. Panels may treat a subsequent acquisition by a different registrant as a new registration, and limited cases recognize registrations aimed at anticipated trademark rights. A respondent's failure to use the domain doesn't foreclose relief because passive holding can constitute bad faith use under the surrounding circumstances.

Bad Faith Under the UDRP

UDRP paragraph 4(b) provides a nonexclusive list of circumstances that constitute evidence of registration and use in bad faith. One is registering the domain primarily to sell it to the trademark owner or a competitor for more than documented out-of-pocket costs. A second is registering it to prevent the owner from reflecting its mark in a corresponding domain, as part of a pattern of such conduct. A third is registering it primarily to disrupt a competitor's business. A fourth is using it to attract internet users to the respondent's website for commercial gain by creating a likelihood of confusion with the complainant's mark.

Panels also consider circumstances outside the paragraph 4(b) list. Pay-per-click advertising that monetizes traffic based on the trademark's recognition, an implausible explanation for the registration, false contact information, or use of a privacy service to frustrate notice or enforcement may support a bad faith finding. Default and the legitimate use of a privacy service don't establish bad faith by themselves.

Under the passive holding doctrine, established in Telstra Corporation Limited v. Nuclear Marshmallows (WIPO Case No. D2000-0003), a panel may find bad faith use even when the respondent isn't actively using the domain name. Panels examine all the circumstances, including the distinctiveness or reputation of the mark, the respondent's failure to provide evidence of an actual or contemplated good faith use, efforts to conceal identity or provide false contact information, and whether any claimed good faith use is plausible.

The Procedure

A UDRP proceeding ordinarily proceeds through five stages based on written submissions. Rule 13 permits a hearing only when the panel determines that exceptional circumstances make one necessary.

At filing, a complainant submits an electronic complaint to an approved dispute resolution provider such as WIPO, FORUM, the Asian Domain Name Dispute Resolution Centre, or the Czech Arbitration Court. WIPO provides a model complaint. Civil service of process isn't required, but the provider must send the notice prescribed by Rule 2.

During the response period, WIPO verifies the complaint and notifies the respondent. The respondent has 20 calendar days from commencement to submit a response and can obtain an automatic four-calendar-day extension on request. A default doesn't establish the complainant's case. The panel evaluates the evidence and may draw appropriate inferences from the failure to respond.

Unless either party elects three members, WIPO appoints a sole panelist from its roster after the response period. If either party elects three members, each side supplies three candidates. WIPO endeavors to appoint one candidate from each side's list and selects the presiding panelist through the preference procedure in Rule 6(e). If a nominated candidate is unavailable, WIPO may appoint a panelist from its roster.

Panels ordinarily decide UDRP proceedings on the written record, without cross-examination. Under Rule 15, a panel forwards its written decision to the provider within 14 days of appointment unless exceptional circumstances require more time.

When a panel orders transfer or cancellation, the registrar waits 10 business days before implementation. A respondent can suspend implementation by giving the registrar official documentation during that period showing that it filed suit against the complainant in the mutual jurisdiction identified in the complaint.

Costs and Timeline

WIPO charges $1,500 for a complaint involving one to five domain names before a sole panelist and $4,000 before a three-member panel. Its expedited service charges $4,000 for one to five domain names and commits to a decision within 30 calendar days or less. Expedited processing applies only to cases before a sole panelist, and voluntary suspension periods fall outside the 30-day calculation.

Respondents pay no filing fee unless they elect a three-member panel. A respondent who makes that election pays half of the fixed fee for the three-member panel.

Under standard processing, a UDRP case typically concludes within about two months if no procedural issue causes delay. Federal litigation under the ACPA can take months or years and cost substantially more. When documented abusive registration supports transfer or cancellation, the UDRP may provide the more efficient proceeding.

The Limits of UDRP Remedies

UDRP proceedings can result in transfer of the domain name to the complainant or cancellation of the registration. They can't award monetary damages, attorney's fees, or any other form of financial compensation. A trademark owner seeking damages for cybersquatting or injunctive relief beyond transfer of the domain name must pursue those remedies in federal court under the ACPA.

UDRP decisions don't bind courts. Either party may file suit in a court of competent jurisdiction before, during, or after the UDRP proceeding, and the court reviews the dispute independently. After a transfer order, a respondent must give the registrar official documentation of a qualifying lawsuit within the 10-business-day period to suspend implementation pending the court's resolution.

When the UDRP Is the Right Tool

The UDRP fits a bad faith registration supported by evidence when transfer or cancellation supplies the needed relief. Examples include a respondent who registered a distinctive mark to sell the domain to its owner, monetize confused traffic, distribute malware, impersonate the owner, or engage in another documented form of cybersquatting.

A dispute involving a domain registered before the complainant acquired trademark rights, competing claims to a descriptive term, a reseller or distributor, a former employee or business partner, a contract, or facts requiring discovery calls for a different analysis. WIPO panels may decline disputes outside the UDRP's limited scope, and an overreaching complaint can result in a finding of reverse domain name hijacking.

Federal court under the ACPA may provide the appropriate proceeding when the trademark owner seeks monetary damages, needs discovery or testimony, faces a respondent who filed suit to contest a UDRP decision, or confronts a broader infringement scheme requiring injunctive relief. A separate article addresses the ACPA and the remedies available in federal court.