Products Solutions Templates Pricing Resources

What is the UDRP?

Home / Everything About / Everything About Domains / What is the UDRP?

What happens when someone registers a domain name that matches your trademark and refuses to hand it over? You call a lawyer. You file a lawsuit. You spend months, sometimes years, in a courtroom fighting over a web address while the other party continues using it. Throughout the 1990s, that was the only option trademark holders had as cybersquatting spread across the internet.

In 1999, ICANN introduced the Uniform Domain Name Dispute Resolution Policy (UDRP) to change that. The UDRP is a structured process that lets trademark holders recover domain names without going to court. Both sides submit their arguments to an independent panel of experts who review the evidence and make a decision, typically within about 60 days.

This article explains how the UDRP works from start to finish, what you need to prove to win a case, what outcomes are possible, and where the process has its limits.

What does UDRP stand for?

UDRP stands for Uniform Domain Name Dispute Resolution Policy. It is a set of rules created by ICANN (the Internet Corporation for Assigned Names and Numbers) that every domain registrar agrees to follow. When you register a domain name through any accredited registrar, you automatically agree to the UDRP as part of the registration agreement.

The word "uniform" is important here. Before this policy existed, there was no standard process for handling domain disputes across different registrars and countries. The UDRP created a single, consistent framework that applies to all generic top-level domains (.com, .net, .org, and all newer extensions like .online and .shop) and many country-code domains as well.

Why was the UDRP created?

In the mid-to-late 1990s, the internet was growing fast and domain registrations were skyrocketing. Along with that growth came a wave of people registering domain names that matched well-known trademarks, then trying to sell those domains back to the trademark owners at inflated prices. This practice became known as cybersquatting.

Trademark owners who wanted to recover those domains had only one path available. They had to file a lawsuit, hire attorneys, and wait for the court system to process the case. For an international dispute, the complexity multiplied. A company in one country would have to navigate the legal system of whatever country the domain holder lived in.

ICANN introduced the UDRP in 1999 to solve this problem. The policy created a streamlined administrative process where disputes could be resolved by specialized panels, without the cost and delay of traditional litigation.

Who can file a UDRP complaint?

The UDRP is designed specifically for trademark holders. You cannot file a complaint simply because you want a domain name or because you had the idea for a name first. You must own a trademark (registered or well-established through documented use) that relates to the domain in question. If you are unsure whether someone else's use of your name qualifies as infringement, understanding whether someone can trademark your domain name is a good starting point.

To file, you submit your complaint to one of the ICANN-approved dispute resolution providers. The main ones include WIPO (the World Intellectual Property Organization), the Forum (formerly the National Arbitration Forum), the Asian Domain Name Dispute Resolution Centre, and the Czech Arbitration Court.

You choose which provider to use, and you pay the filing fee directly to them. The fees vary by provider and by how many domains are involved, but the cost is significantly lower than taking the case to court.

What do you need to prove?

Winning a UDRP case requires proving all three of the following elements. If any one of them fails, the complaint is denied. There are no partial wins.

The domain is identical or confusingly similar to your trademark

The first test is straightforward. The domain name must be either an exact match or close enough to your trademark that it would confuse someone. Minor spelling changes, added hyphens, or different extensions do not make a domain different enough to pass this test. If someone registers "your-brand-name.com" and you own the trademark for "Your Brand Name," that is confusingly similar.

The registrant has no legitimate interest in the domain

The second element asks whether the person who registered the domain has any genuine reason to hold it. Legitimate interests might include using the domain for an established website before the dispute arose, being commonly known by the domain name, or making noncommercial fair use of the domain.

As the complainant, you present your case for why the registrant has no legitimate reason to hold the domain. The burden then shifts to the registrant to demonstrate that they do. If the registrant cannot show a reasonable connection to the name, this element is satisfied.

The domain was registered and used in bad faith

The third element is often the most contested. You must show that the domain was both registered in bad faith and used in bad faith. The UDRP policy lists several indicators of bad faith.

Registering the domain primarily to sell it to the trademark owner (or a competitor) for a profit
Registering the domain to block the trademark owner from using their own name online, especially if there is a pattern of doing this
Registering the domain to disrupt a competitor's operations
Using the domain to attract visitors by creating confusion with the trademark, then profiting from that traffic

These indicators are examples, not an exhaustive list. Panels can find bad faith based on other circumstances too. But the key requirement is that both registration and use must be in bad faith. If someone registered the domain innocently years ago and only later started using it in a problematic way, the case becomes harder to prove.

How does the UDRP process work step by step?

The UDRP follows a structured process with clear timelines at each stage.

Filing the complaint

The trademark holder (complainant) submits a formal complaint to one of the approved dispute resolution providers. The complaint must include evidence of trademark ownership, an explanation of why the domain is identical or confusingly similar, arguments for why the registrant has no legitimate interest, and evidence of bad faith registration and use.

Notifying the domain holder

Once the provider confirms the complaint is complete and the fee has been paid, they notify the domain holder (respondent) and forward the complaint. The registrar also locks the domain at this point so it cannot be transferred or deleted during the proceedings.

The response period

The respondent has 20 days to submit a response. In some cases, a short extension of up to four additional days may be granted. Responding is optional, but failing to respond almost always results in a decision in favor of the complainant. If you hold a domain and receive a UDRP complaint, responding with evidence of your legitimate interest is critical.

Panel appointment and review

After the response deadline passes (whether a response was filed or not), the provider appoints a panel. The default is a single panelist, but either party can request a three-member panel. The panel reviews all submitted materials. There are no hearings, no witnesses, and no live testimony. The entire decision is based on the written submissions.

The decision

The panel issues a written decision, typically within 14 days of being appointed. The entire process from filing to decision usually takes about 60 days. Once the decision is published, the registrar has 10 business days to implement it, unless the losing party files a court challenge within that window.

What outcomes are possible?

The panel can order one of three outcomes.

Transfer. The domain is transferred from the registrant to the complainant. This is the most common outcome when the complainant wins.
Cancellation. The domain registration is canceled entirely. This is less common and usually happens when the complainant does not want the domain but wants it removed from the registrant.
Complaint denied. The panel finds that the complainant did not prove all three required elements, and the domain stays with the current registrant.

One important thing the UDRP cannot do is award money. There are no damages, no financial penalties, and no compensation for legal fees. The only remedies are transfer or cancellation of the domain itself.

How is the UDRP different from going to court?

The UDRP is not a replacement for the court system. It is an alternative to it for a specific, narrow type of dispute. Here is how they compare.

Speed. A UDRP case takes about 60 days. Court cases involving domain disputes can take months or years.
Cost. UDRP filing fees are a fraction of what litigation costs. There are no attorney requirements (though many complainants do use attorneys).
Scope. The UDRP only addresses the three elements listed above. Courts can consider a much wider range of legal claims, including unfair competition, defamation, and fraud.
Remedies. The UDRP can only transfer or cancel a domain. Courts can award monetary damages, injunctions, and other relief.
Finality. A UDRP decision is not final in the legal sense. Either party can still take the case to court after the UDRP process ends. If the losing party files a court action within 10 business days of the decision, the registrar will not implement the UDRP ruling until the court case is resolved.

For straightforward cases of cybersquatting where the evidence is clear, the UDRP is usually the better path. For complex disputes involving competing legitimate claims to a name, or when you need financial compensation, court may be necessary.

What are the limitations of the UDRP?

The UDRP is powerful for what it was designed to handle, but it has clear boundaries.

It cannot award damages or financial compensation of any kind
It only works for cases involving bad faith. If two parties both have a legitimate claim to a name, the UDRP will not resolve that conflict
The respondent can still file a court challenge after the decision, which delays implementation
It does not apply to all country-code domains. Some countries have their own dispute resolution systems instead
It is designed for trademark holders. If you do not own a trademark related to the domain, you cannot use the UDRP

These limitations are worth understanding before you decide which route to take. For trademark owners dealing with clear-cut cybersquatting, the UDRP is a proven, efficient tool. For anything more complex, consulting a legal professional about court options or the Anticybersquatting Consumer Protection Act (ACPA) may be the better move.

How does WEMASY help you protect your domain?

Protecting your domain starts with choosing the right name and setting it up properly from the beginning. WEMASY includes domain registration, hosting, SSL, and a full website builder under one subscription. When your domain, website, and brand all live in the same platform, you have a clear record of ownership and use that strengthens any future claim.

If you are starting a new brand and want to trademark your domain name, having an active, established website tied to that domain builds the kind of documented use that trademark offices and dispute panels look for. You can see what is included in each plan on the pricing page.