Cybersquatting examples usually fall into a handful of recognizable patterns: someone registers “goggle.com” to catch Google typos and load the page with ads; someone grabs “nikeshoes.net” with no connection to Nike and offers to sell it back at a steep markup; someone locks down a celebrity’s name before the celebrity does. Under the federal Anticybersquatting Consumer Protection Act (ACPA), registering a domain that copies or closely resembles someone else’s trademark, with bad-faith intent to profit from that brand, can trigger a lawsuit and statutory damages of up to $100,000 per domain.1Office of the Law Revision Counsel. 15 USC 1125 – False Designations of Origin, False Descriptions, and Dilution Forbidden
A trademark owner suing under the ACPA has to show three things: they own a distinctive or famous mark, the domain is identical or confusingly similar to that mark, and the registrant acted with bad-faith intent to profit from it. That last piece is what separates a cybersquatter from a coincidence.
Five Common Patterns
Typosquatting
Typosquatters target predictable misspellings. “Amazonn.com” with an extra “n.” “Facebok.com” missing an “o.” The registrant catches millions of fumbled keystrokes and redirects that traffic to pay-per-click ads, phishing forms, or counterfeit product listings. Nothing gets built. The whole business model is intercepting other people’s typos.
Brand Squatting
Brand squatting uses an established brand name in a different top-level domain or with a small addition tacked on. “Cocacola-drinks.net.” “Apple-support.org.” The registrant either sits on the domain waiting to sell it to the trademark owner at an inflated price, or uses it to host competing products and affiliate links, skimming revenue off the brand’s recognition.
Personal Name Squatting
When a public figure hasn’t registered their own name, cybersquatters move in. Registering “tomhanksofficial.com” with no connection to the actor, then approaching his management about a sale, is the standard version. The ACPA covers personal names that function as marks, so a celebrity has the same remedies here as a corporation would.1Office of the Law Revision Counsel. 15 USC 1125 – False Designations of Origin, False Descriptions, and Dilution Forbidden
Gripe Site Squatting
Some registrants pair a trademark with a negative word, like “unitedairlinessucks.com,” and fill the site with complaints. Genuine criticism is protected speech, so courts look carefully at these. But when the registrant’s real goal is pressuring the company into buying the domain to shut down the bad press, it slides into cybersquatting.
Traffic Diversion
Traffic diversion sends visitors from a confusingly similar domain to a competitor or an unrelated commercial site. “Bestbuy-deals.com” pointing to a rival retailer’s affiliate program is the shape of it. The squatter earns referral commissions off customers who thought they were heading somewhere else.
Real Cases That Show the Line
In Panavision International v. Toeppen, Dennis Toeppen registered “panavision.com” and posted an aerial photo of Panacea, Illinois, on it. When Panavision asked for the domain, Toeppen demanded $13,000. The Ninth Circuit found that his entire business was registering well-known marks and selling them back to their owners, and Panavision won on trademark dilution grounds. The case became a landmark in early cybersquatting law.
PETA v. Doughney went differently. Michael Doughney registered “peta.org” and titled the site “People Eating Tasty Animals.” He argued parody; the court found that the domain name itself didn’t communicate any parody, and Doughney had made statements suggesting PETA should pay him for it. He was ordered to surrender the domain, though no monetary damages were awarded.
The Microsoft v. MikeRoweSoft dispute shows where the analysis breaks down for the trademark owner. In 2003, a Canadian teenager named Mike Rowe registered “MikeRoweSoft.com” for his web design work. Microsoft offered $10; Rowe countered at $10,000. Microsoft sent a cease-and-desist letter, public sympathy swung hard toward Rowe, and Microsoft settled out of court. A registrant’s actual legal name complicates a cybersquatting claim, even when the domain sounds nearly identical to a famous mark.
The same principle drove Nissan Motors v. Nissan Computer. Uzi Nissan had registered “nissan.com” for his computer business, named after his surname, and had been operating under it long before the automaker came looking for the domain. The court found no cybersquatting. Using your own name is not exploiting someone else’s mark.
How Courts Decide It Was Bad Faith
The ACPA lists nine factors courts consider when deciding whether a registrant acted in bad faith, and no single one is decisive.1Office of the Law Revision Counsel. 15 USC 1125 – False Designations of Origin, False Descriptions, and Dilution Forbidden The factors that tend to protect a registrant are the ones showing legitimacy: holding trademark rights of your own in the name, using your own legal or commonly known name, having a real history of offering goods or services under the domain, or making noncommercial or fair use like criticism and commentary.
The factors that push toward bad faith are the ones showing exploitation: intent to divert consumers in ways that damage the brand or confuse people about sponsorship; offering to sell the domain to the trademark owner or a third party without any legitimate prior use; supplying false or outdated contact information at registration; a pattern of registering multiple domains that mirror other people’s famous marks; and the fame and distinctiveness of the mark itself. That pattern factor is often decisive. A registrant holding dozens of domains that copy different companies’ brands has almost no path to arguing innocent intent.
The statute also includes a safe harbor. A court cannot find bad-faith intent if the registrant reasonably believed their use of the domain was fair or otherwise lawful. The belief has to be objectively reasonable. A small business owner named Dove who registers “dove-plumbing.com” before hearing of the soap brand can rely on it; someone claiming they’d never heard of Coca-Cola cannot.
What Trademark Owners Can Do
A trademark owner facing a cybersquatter has two main routes: sue in federal court under the ACPA, or file an administrative complaint under ICANN’s Uniform Domain-Name Dispute-Resolution Policy (UDRP). The choice usually comes down to what the owner wants and how much they’re willing to spend.
ACPA Lawsuit
Federal litigation under the ACPA offers the widest set of remedies. A successful plaintiff can force cancellation or transfer of the domain and recover either actual damages plus the cybersquatter’s profits, or statutory damages between $1,000 and $100,000 per domain name. The plaintiff can choose between actual and statutory damages any time before final judgment.2Office of the Law Revision Counsel. 15 USC 1117 – Recovery for Violation of Rights
The ACPA also permits “in rem” actions against the domain name itself when the registrant can’t be found or lives outside the United States, which closes off a gap that squatters used to exploit by hiding behind false registration details or operating from jurisdictions with weak enforcement.
The cost is the catch. Federal intellectual property litigation, with attorneys, discovery, and possible trial, runs well into five or six figures. For a domain worth less than the fees, it rarely pencils out.
UDRP Complaint
The UDRP is faster and cheaper. Complaints are handled by ICANN-approved providers like the World Intellectual Property Organization (WIPO) and decided on paper, with no court appearances. The complainant must prove the domain is identical or confusingly similar to a trademark they own, the registrant has no rights or legitimate interests in it, and it was registered and is being used in bad faith.3World Intellectual Property Organization. Guide to the Uniform Domain Name Dispute Resolution Policy
WIPO’s filing fee for a single-panelist case covering one to five domain names is $1,500. A three-member panel raises the fee to $4,000 for the same range.4World Intellectual Property Organization. Schedule of Fees Under the UDRP Most disputes conclude within 60 days. A win transfers or cancels the domain. The trade-off: the UDRP cannot award money. To make the cybersquatter pay for the harm, the trademark owner has to go the ACPA route.
What Doesn’t Count
Registering generic or descriptive domains like “cheapflights.com” or “bestrecipes.net” and trading them, sometimes called domaining, is legal. The line gets crossed only when the domain targets someone else’s specific mark with intent to profit from that brand’s recognition.
Genuine criticism and commentary sites also fall outside cybersquatting when they stay noncommercial. A consumer who registers a domain to review a company’s products and never tries to sell the domain back is not cybersquatting, even if the domain includes the company’s name.1Office of the Law Revision Counsel. 15 USC 1125 – False Designations of Origin, False Descriptions, and Dilution Forbidden
And coincidental name overlap, as the Nissan case showed, is not cybersquatting. Using your own name in a domain, with a real business behind it, is the opposite of exploiting a stranger’s trademark.