Domain Name Trademark Infringement: ACPA, UDRP, and Remedies

Domain name trademark infringement happens when someone registers or uses a web address that copies or closely resembles a protected trademark in a way likely to confuse consumers or exploit the brand. Trademark owners have two main routes for pushing back: a federal lawsuit under the Lanham Act, including its Anticybersquatting Consumer Protection Act (ACPA) provisions, or an administrative complaint through the Uniform Domain-Name Dispute-Resolution Policy (UDRP) run by ICANN. The federal route can produce statutory damages of up to $100,000 per domain name; the UDRP is faster and cheaper but can only transfer or cancel the registration.

When a Domain Name Infringes a Trademark

The Lanham Act is the main federal trademark statute. Section 1114 makes it illegal to use a copy or imitation of a registered trademark in a way likely to confuse consumers about the source of goods or services.¹ Section 1125(a) extends similar protection to unregistered marks and trade dress, covering any commercial use that creates a false impression of affiliation or endorsement.² A domain name mimicking a brand can trigger liability even if the brand owner never formally registered the mark.

The controlling question is likelihood of confusion. Courts apply a multi-factor test that varies slightly by federal circuit but generally weighs the strength of the mark, similarity between the mark and the domain, relatedness of the parties’ goods or services, any evidence of actual confusion, the registrant’s intent, overlap in marketing channels, and how carefully consumers in that market typically shop.³ No single factor controls. A domain that exactly copies a famous brand selling the same product is an easy case. Minor variations, different industries, or a registrant with a plausible independent reason for the name make things harder.

Stronger marks get broader protection. If the brand is a household name, courts will find confusion more readily even when the businesses differ. Weaker or generic marks get narrower protection because consumers are less likely to link them to one specific company.

Cybersquatting Claims Under the ACPA

When someone registers a domain specifically to exploit another party’s brand, the case moves from ordinary infringement into cybersquatting. Congress addressed this in 1999 with the ACPA, codified at 15 U.S.C. § 1125(d). The statute creates liability when the person registered, trafficked in, or used a domain name that is identical or confusingly similar to a protected mark, and did so with bad faith intent to profit from that mark.²

Bad faith is what separates cybersquatting from an innocent name collision. The statute gives courts nine factors to weigh:

Whether the registrant has any trademark or intellectual property rights in the domain name
Whether the domain consists of the registrant’s legal name or a name they are commonly known by
Whether the registrant previously used the name to offer real goods or services
Whether the registrant is making a fair, noncommercial use of the mark on the site
Whether the registrant aimed to divert consumers away from the trademark owner’s site in a way that harms the brand’s reputation
Whether the registrant offered to sell the domain to the trademark owner at an inflated price without ever using it legitimately
Whether the registrant provided misleading contact information during registration
Whether the registrant has acquired multiple domain names that copy other people’s trademarks
How distinctive or famous the trademark actually is

These are not a checklist requiring every box. Courts weigh them collectively. Someone who registers dozens of brand-name domains and offers to sell them back fits the classic cybersquatter profile. Someone who shares a surname with a company and registered the domain years before the brand became famous does not.²

The Safe Harbor for Reasonable Belief

The ACPA includes an important safety valve. A court cannot find bad faith if it determines the registrant genuinely believed, on reasonable grounds, that the use was fair or lawful.² This protects registrants who made an honest mistake or registered a domain for reasons unrelated to exploiting someone else’s brand. The belief must be objectively reasonable. Claimed ignorance of a globally famous trademark will not satisfy the standard.

In Rem Actions Against the Domain Itself

The ACPA lets a trademark owner sue the domain name itself when the registrant cannot be reached. Cybersquatters often hide behind false registration data or operate from jurisdictions where a U.S. court has no personal jurisdiction. To bring an in rem claim, the trademark owner must show it either cannot obtain personal jurisdiction over the registrant or, after due diligence, cannot locate the registrant at all. Due diligence requires at least sending notice to the postal and email addresses in the registration records and publishing notice of the lawsuit. The case is filed where the registrar or registry is located. Remedies in an in rem action are narrower than in a standard suit: forfeiture, cancellation, or transfer only, with no money damages.² For a brand owner whose only goal is control of the domain, that is often enough.

The UDRP as a Faster Alternative

Federal litigation is expensive and slow. The UDRP, administered by ICANN, offers a faster administrative track. Every ICANN-accredited registrar requires domain holders to submit to this process as a condition of registration, so a trademark owner does not need the registrant’s consent to file.⁴ Complaints go to approved dispute resolution providers, the two most prominent being the World Intellectual Property Organization (WIPO) and the Forum, formerly the National Arbitration Forum.⁵

What the Complainant Has to Prove

A UDRP complainant must establish all three of the following:

The domain name is identical or confusingly similar to a trademark in which the complainant has rights.
The registrant has no rights or legitimate interests in the domain name.
The domain name was registered and is being used in bad faith.

Both registration and use must be in bad faith. The policy lists examples: registering the name primarily to sell it back to the trademark owner for more than out-of-pocket costs, blocking the trademark owner from using its mark in a domain as part of a pattern, disrupting a competitor’s business, or intentionally attracting visitors by creating confusion with the complainant’s brand.⁶

How Long It Takes and What It Costs

The UDRP moves quickly. After the complaint is filed, the provider sends it to the registrant, who has 20 calendar days to respond. Failing to respond results in default. A panel is appointed within five days of the response deadline and decides the case within 14 days of appointment. Most disputes wrap up within 60 days of filing. If the registrant loses and does not file a court challenge within 10 business days, the registrar implements the panel’s decision.

At WIPO, a single-panelist decision covering up to five domain names costs $1,500. A three-member panel for the same number of domains costs $4,000. Expedited processing aims to resolve the case within one month for $4,000 with a single panelist.⁷ The complainant pays the full filing cost. Federal trademark litigation, by comparison, routinely runs to six figures in legal fees alone.

The UDRP and Court Cases Can Overlap

The UDRP is not exclusive. Either party can take the dispute to court before, during, or after the administrative proceeding.⁶ A registrant who loses a UDRP case can block the transfer by filing suit in a court of mutual jurisdiction within 10 business days. Trademark owners sometimes file a UDRP complaint for speed while reserving the option to pursue damages in federal court separately. Panel decisions carry no binding legal precedent, so a court hearing the same dispute starts fresh.

Defenses a Registrant Can Raise

Not every domain that resembles a trademark is infringing, and the system builds in protection for registrants with legitimate reasons for holding a name.

Legitimate Interests Under the UDRP

The UDRP recognizes three categories of legitimate interests that defeat a complaint:

Before receiving any notice of the dispute, the registrant was using the domain (or making demonstrable preparations to use it) in connection with a genuine offering of goods or services.
The registrant, whether an individual or a business, has been commonly known by the domain name, even without formal trademark rights.
The registrant is making a legitimate noncommercial or fair use of the domain without trying to mislead consumers or damage the trademark.

These examples are illustrative. Panels can find legitimate interests on other evidence too.⁶

Nominative Fair Use for Resellers

A registrant who uses a trademark in a domain to sell or discuss the trademarked product may have a nominative fair use defense. UDRP panels have adopted a WIPO framework requiring resellers and similar users to meet four conditions: the site must actually offer the trademarked goods or services; it must sell only the trademarked goods rather than using the brand as bait for competitors’ products; it must clearly disclose the registrant’s actual relationship with the trademark owner; and the registrant must not have registered multiple variations of the domain to box out the trademark holder. Missing any of these conditions defeats the defense.

Reverse Domain Name Hijacking

The UDRP is not a one-way street. When a trademark owner files a complaint knowing it lacks a legitimate basis, panels can find reverse domain name hijacking. Typical scenarios include filing after failed purchase negotiations, bringing a claim where the domain registration predates the trademark, or misrepresenting facts to the panel. A finding of reverse domain name hijacking does not award damages within the UDRP itself, but the registrant may be able to use it as evidence in a separate lawsuit for unfair business practices.

What the Trademark Owner Can Actually Win

The available remedies depend entirely on which path the trademark owner chose.

UDRP Remedies

Administrative panels can do exactly two things: order the domain transferred to the complainant, or order the registration cancelled. No money changes hands. No attorneys’ fees are awarded. The panel cannot punish the registrant or compensate the trademark owner for lost business.⁴ For a brand owner who just wants control of the domain, that is usually sufficient.

Federal Court Remedies

Federal court offers a much broader toolkit. Under 15 U.S.C. § 1125(d), a court can order forfeiture, cancellation, or transfer of the domain name. These equitable remedies are available on top of anything else the Lanham Act provides, including injunctions.²

The financial side is where the stakes rise. A trademark owner can pursue actual damages and the infringer’s profits, or elect statutory damages instead. Statutory damages under the ACPA run from $1,000 to $100,000 per domain name, with the exact amount left to the court’s discretion. For a serial cybersquatter holding dozens of infringing domains, the math gets punishing fast. Courts may also award reasonable attorneys’ fees in exceptional cases.⁸

Registrars Are Not Usually on the Hook

Domain registrars and registries process registrations but do not police whether each name infringes someone’s trademark. Federal law shields them from money damages for actions affecting a domain, such as suspending or transferring it in response to a court order or UDRP decision, even if the domain turns out not to be infringing.¹ A registrar can face injunctive relief if it fails to cooperate with a court proceeding, but financial liability requires a showing of bad faith or reckless disregard on the registrar’s part.² In practice, registrars follow orders without much pushback, and disputes stay between the trademark owner and the registrant.

Heading Off Disputes Before They Start

Even the UDRP costs time and money. Trademark owners who think proactively about domain names save themselves grief later. The most straightforward defensive step is registering obvious variations of a brand name across major top-level domains, including common misspellings and keyword combinations that an infringer would likely target. Registering across country-code extensions relevant to the business’s markets helps prevent localized impersonation.

For newer generic top-level domains such as .shop, .app, or .tech, the Trademark Clearinghouse offers priority access. Trademark owners who record their marks with the Clearinghouse get first crack during the Sunrise Period before a new extension opens to the public, a mandatory window of at least 30 days.⁹ After the Sunrise Period ends, the Clearinghouse also triggers notifications when anyone tries to register a domain matching a recorded trademark, creating an early warning system.

No defensive strategy covers every possible variation. Combining proactive registrations with trademark monitoring catches most problems early, when a cease-and-desist letter can resolve the matter before anyone files a complaint or lawsuit.

1
Office of the Law Revision Counsel. 15 USC 1114 – Remedies; Infringement; Innocent Infringement by Printers and Publishers
2
Office of the Law Revision Counsel. 15 USC 1125 – False Designations of Origin, False Descriptions, and Dilution Forbidden
3
Ninth Circuit District and Bankruptcy Courts. 15.18 Infringement – Likelihood of Confusion – Factors – Sleekcraft
4
Internet Corporation for Assigned Names and Numbers. Uniform Domain Name Dispute Resolution Policy
5
Internet Corporation for Assigned Names and Numbers. List of Approved Dispute Resolution Service Providers
6
Internet Corporation for Assigned Names and Numbers. Uniform Domain Name Dispute Resolution Policy
7
World Intellectual Property Organization. Schedule of Fees Under the UDRP
8
Office of the Law Revision Counsel. 15 USC 1117 – Recovery for Violation of Rights
9
Trademark Clearinghouse. Sunrise Service