Domain investing is a legitimate business — until it isn't, and the line between "smart acquisition" and "cybersquatting" is thinner than most newcomers expect.
The good news: the legal landscape is well-defined. Two major frameworks govern domain disputes, and if you understand them before you buy, you'll never have to learn them the hard way — through a UDRP complaint landing in your inbox.
ACPA: The US Law With Teeth
The Anticybersquatting Consumer Protection Act (ACPA), passed in 1999, is the United States' primary weapon against bad-faith domain registration. It targets anyone who registers, traffics in, or uses a domain name that is identical or confusingly similar to a distinctive or famous trademark — with a bad-faith intent to profit.
The penalties are serious: courts can award statutory damages of $1,000 to $100,000 per domain, plus attorney's fees. Unlike UDRP (which we'll cover next), ACPA is a federal lawsuit — meaning it's slower, more expensive, and the trademark owner can come after your wallet, not just the domain.
"Bad faith" under ACPA isn't just a vibe — courts look at specific factors: Did you have a legitimate prior use? Did you offer to sell the domain to the trademark owner at an inflated price? Did you register multiple trademarked names? Did you provide false WHOIS information? The more of these boxes you check, the worse your day in court will be.
Registering a domain like nikeoutletsale.com or applesupport-help.net and parking it with ads is a textbook ACPA violation. The trademark doesn't have to be famous — it just has to be distinctive and registered.
UDRP: ICANN's Dispute Resolution Shortcut
The Uniform Domain-Name Dispute-Resolution Policy (UDRP) is ICANN's faster, cheaper alternative to litigation. Any trademark owner can file a UDRP complaint against a domain registrant — no court required.
To win, the complainant must prove all three prongs of the test:
- The domain is identical or confusingly similar to their trademark
- The registrant has no legitimate rights or interests in the domain
- The domain was registered and is being used in bad faith
UDRP cases are handled by arbitration providers — primarily WIPO (World Intellectual Property Organization) and NAF (National Arbitration Forum). The typical timeline is around 60 days from filing to decision. Costs run $1,500–$4,000 for the complainant, depending on the number of domains and panelists. The only outcomes are domain transfer or cancellation — no monetary damages. That's why trademark owners sometimes prefer ACPA lawsuits when they want to make an example.
UDRP is faster and cheaper but limited to domain transfer or cancellation. ACPA lawsuits are slower and costlier but can result in significant monetary damages. Complainants with strong cases and deep pockets often choose ACPA; those who just want the domain back choose UDRP.
What Actually Counts as Cybersquatting
Cybersquatting is registering a domain name that corresponds to someone else's trademark with the intent to profit from their goodwill. The classic form: buy bigbrand.com, then offer to sell it back to BigBrand Corp for $50,000.
Variations include typosquatting (registering gooogle.com or amazzon.com to catch mistyped traffic) and registering celebrity names (taylorswift.net was famously disputed). Arbitrators and courts look for the same bad-faith signals: no prior use, no plausible legitimate purpose, pattern of similar registrations, and — the classic tell — an offer to sell to the trademark owner.
Checking for Trademark Conflicts Before You Buy
This is the step most domain investors skip, and it's the one that matters most. Before bidding on any domain that resembles a brand name, run it through:
- USPTO TESS (
tmsearch.uspto.gov) — the US trademark database. Search the exact term and common variations. - WIPO Global Brand Database (
branddb.wipo.int) — covers international trademarks across 50+ countries. - Google — search the brand name to see if it's actively used by a company, even if not formally trademarked.
- Wayback Machine — check if the domain previously hosted a legitimate brand's website. Prior brand use is a red flag.
A trademark doesn't have to be registered to be protected under common law. If a company has been using a name in commerce, they may have rights to it even without a USPTO registration. When in doubt, skip the domain.
Common Legal Questions
tmsearch.uspto.gov for US trademarks, and the WIPO Global Brand Database at branddb.wipo.int for international marks. Then do a plain Google search for the brand name — common-law trademark rights can exist even without formal registration if a company has been using the name in commerce. Finally, check the Wayback Machine to see if the domain previously hosted a legitimate brand's website. If any of these searches raise a red flag, walk away from the domain.
ccTLD Jurisdiction Complications
Country-code TLDs add another layer of complexity. ccTLDs like .eu, .de, or .au may be subject to local laws and their own dispute policies — not UDRP. The .eu registry, for example, requires registrants to have a presence in the European Union, and uses its own ADR procedure rather than UDRP. Some ccTLDs have residency requirements that make them off-limits for foreign investors entirely. Always check the registry's eligibility rules before bidding on a ccTLD at auction.
Defensive Registration: What the Big Players Do
Large companies don't just register their primary .com — they register dozens or hundreds of variations: alternate TLDs, common misspellings, hyphenated versions, and related terms. This is defensive registration, and it's why you'll find that most obvious brand-adjacent domains are already taken.
Brand monitoring services like MarkMonitor and CSC watch for new registrations that could infringe on their clients' trademarks and flag them for action. If you're building a brand of your own, registering the key TLD variants early is far cheaper than fighting a dispute later.
Understanding the legal landscape isn't just about avoiding trouble — it's a competitive advantage. Investors who know what's safe to buy move faster and bid with confidence. Those who don't eventually learn through expensive experience.
With the legal framework under your belt, the next step is turning your domain assets into cash. The next article covers Domain Brokerage and Selling Your Domains — how to price, list, negotiate, and close deals on the domains you've worked so hard to acquire.