UDRP domain dispute: how the process works, costs and timeline

The UDRP (Uniform Domain-Name Dispute-Resolution Policy) is the ICANN administrative procedure that allows trademark holders to recover domain names registered in bad faith. It applies to all gTLDs (.com, .net, .org, and hundreds more) and to many ccTLDs that have voluntarily adopted it. A decision is typically rendered within 45 to 60 days at a cost of $1,500 to $4,000, without requiring a court case. This article explains the three eligibility conditions, the procedure step by step, the real costs, realistic success rates, and what the UDRP cannot do.

The eligibility conditions

UDRP Policy paragraph 4(a) requires all three of the following to be true for a complaint to succeed:

1. The domain name is identical or confusingly similar to a trademark in which the complainant has rights.
2. The registrant has no rights or legitimate interest in the domain name.
3. The domain name was registered and is being used in bad faith.

These conditions are cumulative. A UDRP panel will dismiss a complaint if any one of them is not established.

What "rights in a trademark" means

Your trademark does not need to be registered. A common law (unregistered) trademark can qualify if you can demonstrate prior use and sufficient recognition. Registered trademarks provide stronger and easier-to-prove rights. The trademark must predate the domain registration to support the bad faith argument coherently. A trademark filed after you discovered the squatter is a weak foundation for a UDRP case.

Proving bad faith: the recognized criteria

UDRP Policy paragraph 4(b) lists circumstances that constitute bad faith evidence. Panels treat any of the following as sufficient:

• The registrant offered to sell the domain to the trademark owner for more than the out-of-pocket registration cost.
• The domain was registered to prevent the trademark owner from registering their mark in a domain name, as part of a pattern.
• The domain was registered primarily to disrupt the business of a competitor.
• The registrant used the domain to attract users for commercial gain by creating confusion with the complainant's mark.

Panels have also recognized "passive holding under bad faith": a registrant who does nothing with a domain but holds it can be found to have acted in bad faith if the circumstances strongly indicate the registration was made to exploit the trademark. This is important for cases where the domain sits inactive.

What constitutes legitimate interest for the registrant

If the registrant can establish any of these defenses under UDRP paragraph 4(c), the complaint will likely fail even if the other conditions are met:

• The registrant used the domain for a bona fide commercial offering before receiving notice of the dispute.
• The registrant is commonly known by the domain name.
• The registrant is making legitimate non-commercial or fair use of the domain.

The second of these is why the Nissan Computer case (nissan.com) failed: Uzi Nissan had a legitimate prior business using that name. If there is a plausible legitimate explanation for the registrant's use, UDRP is the wrong tool. A court action may succeed where UDRP cannot.

The UDRP procedure, step by step

1. Choose a UDRP-accredited provider. ICANN accredits several organizations. WIPO (World Intellectual Property Organization, wipo.int) handles approximately 50-60% of global UDRP cases and is the most widely used. The National Arbitration Forum (NAF) and Czech Arbitration Court (CAC) are also active providers. Each has its own forms and fee schedules, but all follow the same ICANN-mandated procedure.

2. Draft the complaint. The complaint must include: identification of the complainant and respondent (registrant), the domain(s) in dispute, the trademark(s) invoked with proof of registration or use, argumentation establishing all three conditions, and the requested remedy (transfer or cancellation). Most complainants engage a specialized attorney for this step. A poorly argued complaint that fails to establish all three conditions will be dismissed without reaching the merits.

3. File and notification. The complaint is filed with the chosen provider, which verifies completeness and transmits it to the registrant. The registrant has 20 calendar days to submit a response. When no response is filed (default), the panel typically decides in favor of the complainant, provided the complaint itself establishes all three conditions.

4. Panel appointment. For cases requesting a single panelist (the default), the provider appoints one panelist from its approved roster. Either party can request a three-member panel at higher cost. Three-member panels are common when the case is complex or when the stakes are high.

5. Deliberation and decision. The panel reviews the submissions and renders a decision within 14 days of the proceeding's closure. All WIPO decisions are public and searchable in the WIPO UDRP case database (wipo.int/amc/en/domains/search), which is an excellent resource for researching precedents before filing.

6. Enforcement. If the panel orders transfer or cancellation, the registrar is notified. A 10-business-day waiting period follows during which the registrant can initiate a court challenge to override the UDRP decision. If no court action is taken, the registrar executes the transfer or cancellation.

Costs and timeline

Provider	1 panelist	3 panelists	Average timeline
WIPO	$1,500 (1 domain)	$4,000	45-60 days
NAF	$1,300	$4,000	50-60 days
CAC	€1,500	€4,000	45-60 days

These fees cover provider administration and panelist compensation. Add $2,000-$5,000 for attorney drafting of the complaint if you use legal counsel, which is recommended for any contested case. For disputes involving multiple domains simultaneously, most providers apply reduced per-domain fees after the first.

UDRP vs. court action: when to use which

Criterion	UDRP	Court action
Cost	$1,500-$4,000 + legal fees	$10,000-$50,000+
Timeline	45-60 days	1-3 years
Available remedies	Domain transfer or cancellation	Transfer, cancellation, and damages
Jurisdiction	gTLDs and participating ccTLDs	Depends on registrant's country
Precedent value	None (not binding)	Yes (in the relevant jurisdiction)

The UDRP is the right choice when: bad faith is clear and well-documented, the domain is a gTLD, and you want the domain back quickly without significant damages. Court action is preferable when: you need damages (ACPA in the US allows up to $100,000 per domain), the bad faith is legally complex, or the registrant is in a jurisdiction where court enforcement is more effective.

Success rates: a realistic view

Since 1999, WIPO alone has received over 50,000 UDRP complaints. Of those decided on the merits (excluding defaults and settlements), approximately 75-80% result in transfer or cancellation in favor of the complainant. The default rate (registrant does not respond) is significant and largely explains the overall success rate: squatters who know their registration was bad faith often do not bother responding.

Factors that improve your odds of success:

• Your trademark clearly predates the domain registration.
• The domain is inactive or redirects to a competitor's site.
• The registrant holds multiple other domains matching third-party trademarks (demonstrates a pattern of bad faith registrations).
• The registrant made an explicit offer to sell the domain to you at a price above registration cost.

One risk to be aware of: reverse domain name hijacking (RDNH). If the panel finds that your complaint was filed in bad faith, knowing you could not prevail, it can formally declare this. RDNH declarations are rare but exist, and they are public. Filing a UDRP against a registrant with a clear legitimate interest is both unlikely to succeed and potentially embarrassing.

What the UDRP cannot do

Clear expectations prevent disappointment:

The UDRP does not cover ccTLDs that have not adopted it. Germany's .de, France's .fr, and Spain's .es have their own national dispute procedures (DENIC Dispute for .de requires a court order; SYRELI at AFNIC for .fr; Red.es ADR for .es). For these, use the relevant national mechanism.

The UDRP cannot award damages or legal fee reimbursement. If the squatter has caused quantifiable financial harm, only a court action can address that.

The UDRP decision is not legally binding on courts. It is binding on the registrar, but the registrant can challenge it in any court of competent jurisdiction. This is rare in practice but it happens, particularly when the domain has significant commercial value.

---

The UDRP is the most efficient tool available for recovering a cybersquatted gTLD domain when bad faith is clear. A solid case rests on a trademark that predates the domain, a registrant with no defensible legitimate interest, and clear evidence of bad faith. Detection speed matters: a complaint filed within weeks of a suspicious registration is more credible than one filed years later, when the registrant has had time to construct the appearance of legitimate use. Domain Sentinel's watchlist is built specifically to minimize the time between registration and detection. Check whether domains similar to your trademark have already been registered.

Frequently asked questions

How long does a UDRP procedure take? The standard timeline is 45-60 days from the filing date to the decision, plus a 10-business-day waiting period before enforcement.

Does the UDRP cover .fr or .de domains? No. .fr disputes are handled by SYRELI (AFNIC). .de disputes require a court order, which DENIC then enforces. Check your ccTLD's registry website for the applicable dispute procedure.

What happens if the registrant appeals? The registrant can file a lawsuit in a court of competent jurisdiction within 10 business days of the panel's decision. If they do, the transfer is stayed until the court rules. This is uncommon but possible, especially for high-value domains.