How the UDRP Process Works and What You Need to Prove

By Hank FasthoffJuly 4, 2026

A trademark owner who discovers that a cybersquatter has registered a domain name incorporating the owner's mark has two primary enforcement options. One is federal litigation under the Anticybersquatting Consumer Protection Act, which is covered in a separate article. The other is a complaint under the Uniform Domain-Name Dispute-Resolution Policy (UDRP), an administrative proceeding that can transfer or cancel the domain name in approximately 45 to 60 days, without a lawsuit, without a court appearance, and without the cost and timeline of federal litigation.

ICANN adopted the UDRP in 1999, based on recommendations from the World Intellectual Property Organization. Every registrant of a domain name in a generic top-level domain (.com, .net, .org, and all new gTLDs) agrees to submit to UDRP proceedings as a condition of registration. WIPO is the leading UDRP dispute resolution provider, having administered over 80,000 domain name cases in the 25 years since the policy took effect. In 2025, WIPO handled a record-breaking 6,200 cases, the highest annual caseload in its history.

The Three Elements

Under UDRP paragraph 4(a), a complainant must prove all three of the following elements to obtain transfer or cancellation of a domain name.

First, the domain name must be identical or confusingly similar to a trademark or service mark in which the complainant has rights. UDRP paragraph 4(a)(i). This element is typically the easiest to satisfy. Panels apply a side-by-side comparison between the trademark and the domain name, disregarding the top-level domain suffix (.com, .net, etc.) for purposes of the analysis. Minor variations, misspellings, and the addition or deletion of generic or descriptive terms generally do not prevent a finding of confusing similarity when the complainant's mark is recognizable within the domain name.

Second, the respondent must have no rights or legitimate interests in respect of the domain name. UDRP paragraph 4(a)(ii). Because proving a negative is difficult, panels apply a burden-shifting framework. Once the complainant makes a prima facie case that the respondent lacks rights or legitimate interests, the burden shifts to the respondent to produce evidence establishing one of the grounds recognized under UDRP paragraph 4(c), or any other basis for a legitimate interest.

Paragraph 4(c) identifies three circumstances that, if proved by the respondent, demonstrate rights or legitimate interests. Before receiving any notice of the dispute, the respondent used or made demonstrable preparations to use the domain name in connection with a bona fide offering of goods or services. The respondent has been commonly known by the domain name, even if it has not acquired trademark rights. The respondent is making a legitimate noncommercial or fair use of the domain name, without intent for commercial gain to misleadingly divert consumers or to tarnish the complainant's mark.

Third, the domain name must have been registered and is being used in bad faith. UDRP paragraph 4(a)(iii). Both registration in bad faith and use in bad faith must be established. A domain name registered in good faith that is later used in bad faith, or a domain name registered in bad faith that is not currently being used, may not satisfy the element under certain interpretive approaches, though UDRP jurisprudence has developed substantial guidance on both scenarios, including the passive holding doctrine.

Bad Faith Under the UDRP

UDRP paragraph 4(b) provides a non-exclusive list of circumstances that, if found by the panel, constitute evidence of registration and use in bad faith. These include registering the domain name primarily for the purpose of selling it to the trademark owner or a competitor for consideration in excess of documented out-of-pocket costs, registering the domain name to prevent the trademark owner from reflecting its mark in a corresponding domain name as part of a pattern of such conduct, registering the domain name primarily to disrupt the business of a competitor, and using the domain name to intentionally attract Internet users to the respondent's website for commercial gain by creating a likelihood of confusion with the complainant's mark.

Panels also consider circumstances outside the paragraph 4(b) list. Pay-per-click advertising that monetizes traffic based on the trademark's recognition, failure to respond to the complaint, use of a privacy or proxy registration service to conceal identity, and implausible explanations for the registration all factor into the bad faith analysis.

Under the passive holding doctrine, established in Telstra Corporation Limited v. Nuclear Marshmallows (WIPO Case No. D2000-0003), a panel may find bad faith use even when the respondent is not actively using the domain name, if the circumstances indicate that the respondent's passive holding amounts to use in bad faith. Relevant circumstances include the strength and fame of the complainant's mark, the respondent's failure to respond, the absence of any conceivable good faith use of the domain name, and the respondent's concealment of identity.

The Procedure

A UDRP proceeding consists of five stages.

Filing. A complainant submits a complaint to an approved dispute resolution provider (such as WIPO, the Forum, the Asian Domain Name Dispute Resolution Centre, or the Czech Arbitration Court). WIPO provides a Model Complaint template. Filing is electronic. No court filing, no summons, and no service of process are required.

Response. WIPO verifies the complaint and notifies the respondent. From the date of commencement, the respondent has 20 calendar days to submit a response, with an automatic four-day extension available on request. Filing a response is optional. A respondent who does not respond is in default, and the panel proceeds to a decision based on the complaint alone, drawing reasonable inferences from the failure to respond.

Panel appointment. After the response deadline passes (whether or not a response is filed), WIPO appoints a panel. In most cases, both parties select a single panelist, and WIPO appoints one from its roster. If either party requests a three-member panel, WIPO appoints one panelist from each party's nominations and selects the presiding panelist.

Decision. UDRP proceedings are decided on the written record. No live hearing is held, and neither party has the opportunity to cross-examine the other. Under UDRP Rule 15, the panel issues its decision within 14 days of appointment.

Implementation. If the panel orders transfer or cancellation, the registrar implements the decision after a 10-business-day waiting period during which the respondent may file suit in a court of mutual jurisdiction to prevent implementation.

Costs and Timeline

WIPO's filing fees for a UDRP complaint involving one to five domain names are $1,500 for a single panelist and $4,000 for a three-member panel (as of March 2026). In 2026, WIPO introduced an expedited processing service that commits to a decision within approximately one month from filing, for a fee of $4,000 for one to five domain names with a single panelist.

Respondents pay no filing fee unless they request a three-member panel, in which case they pay their share of the additional cost.

Under standard processing, a UDRP case from filing to decision typically takes 45 to 60 days, or approximately two months from the date WIPO receives the complaint if there are no procedural issues. Compared to federal litigation under the ACPA, which can take months or years and cost tens of thousands of dollars in legal fees, the UDRP offers speed and cost-efficiency that make it the preferred enforcement tool for most domain name disputes.

The Limits of UDRP Remedies

UDRP proceedings can result in transfer of the domain name to the complainant or cancellation of the registration. They cannot award monetary damages, attorney's fees, or any other form of financial compensation. A trademark owner who wants to recover damages for cybersquatting, or who needs injunctive relief beyond transfer of the domain name, must pursue those remedies in federal court under the ACPA.

UDRP decisions are not binding on courts. Either party may file suit in a court of competent jurisdiction before, during, or after the UDRP proceeding, and the court is free to reach its own conclusion. A respondent who files suit within 10 business days of a transfer order can prevent implementation of the UDRP decision pending the court's resolution.

When the UDRP Is the Right Tool

For a trademark owner facing a cybersquatter who registered the owner's mark as a domain name for the purpose of selling it, monetizing it through pay-per-click advertising, or holding it passively to prevent the owner from using it, the UDRP is almost always the right first step. It is faster, cheaper, and more predictable than federal litigation, and for most cybersquatting disputes, transfer of the domain name is the only remedy the trademark owner needs.

Federal court litigation under the ACPA becomes the better option when the trademark owner wants monetary damages, when the dispute involves complex factual questions that benefit from discovery and live testimony, when the respondent has filed suit to contest a UDRP decision, or when the domain name is only one element of a broader pattern of trademark infringement that warrants injunctive relief. A separate article addresses the ACPA and when federal court is the appropriate forum.