Domain Squatting: What It Is, What You Can Do, and What Is Not Worth Doing

Domain squatting is registering a domain in bad faith to profit from someone else’s trademark, either by selling it back or by trading on the confusion. If it is happening to you there are three routes: file a UDRP complaint, buy the name, or ignore it. Most of the time one of those is obviously correct and the other two waste money.

The important distinction up front is between squatting and someone simply owning a name you want. Registering a domain first is not squatting, and no dispute process will help you take a name from someone who registered it legitimately. Bad faith is the entire question.

What counts, and what does not
The UDRP route and its three-part test
When buying it is the better decision
Preventing it, proportionately
How this fits the rest of the stack
FAQ

What counts, and what does not

The line is intent. Registering a domain corresponding to a trademark you have no connection to, in order to extract money from the mark’s owner or to trade on the confusion, is squatting. Registering a domain because you wanted it, and later declining to sell, is not.

The forms it takes:

Straight squatting: registering a brand name to resell to the brand.
Typosquatting: registering common misspellings to catch mistyped traffic.
TLD squatting: taking the same name under other extensions.
Combosquatting: adding a word, such as the brand plus support or login, which is frequently a precursor to phishing.
Renewal sniping: registering a name the moment the previous owner lets it lapse.

What is not squatting, however inconvenient: someone using their own name or a legitimate business name that happens to match yours; a generic dictionary word registered for its own sake; a domain investor holding a portfolio of generic terms registered before your brand existed; and criticism sites, which have significant protection in many jurisdictions.

That last group is where most complaints fail. The dispute processes exist to address bad faith, not to resolve competition for a name that two parties both want honestly.

The UDRP route and its three-part test

The Uniform Domain-Name Dispute-Resolution Policy is an ICANN process that every registrar of a generic TLD agrees to. It is an administrative proceeding rather than a court case: filed with a provider such as WIPO, decided on documents, typically resolved in one to two months.

To win you must prove all three elements. Failing any one loses the case.

The domain is identical or confusingly similar to a trademark in which you have rights.
The registrant has no rights or legitimate interests in the name.
The domain was registered and is being used in bad faith.

The word and in the third element does real work. Registration in bad faith is not enough on its own, nor is bad-faith use of a name registered innocently. Both must hold, which is why a domain registered before your trademark existed is essentially unwinnable: it could not have been registered in bad faith towards a mark that did not yet exist.

Evidence that persuades panels: an offer to sell to you for far more than registration cost, a pattern of similar registrations by the same party, the name resolving to a competitor or to pay-per-click ads on your brand terms, or content impersonating you.

Costs and outcomes are worth being plain about. A single-domain complaint through a provider runs roughly $1,500 to $2,000 in fees, plus legal help if you use it. The only remedies are transfer or cancellation, with no damages, and no appeal within the process. Complainants win a large majority of decided cases, largely because weak complaints are not usually filed.

When buying it is the better decision

Unromantic but frequently correct. If the squatter wants $2,000 and a UDRP costs $1,500 plus legal fees and two months, buying is cheaper, faster, and certain.

UDRP makes sense when the asking price is high relative to fees, when there is a pattern you want on record, when the domain is being used for phishing or impersonation, or when paying would invite the same party to register more.

Buying makes sense when the price is near or below the cost of a complaint, when your trademark position is weak, when the domain predates your brand, or when you need it resolved this month rather than next quarter.

If you do buy, use an escrow service. Paying first and hoping for the transfer is how people lose the money and the domain. Escrow holds the funds until the transfer completes and costs a small percentage.

One caution: negotiate through a third party if you can. Approaching as the brand yourself tends to move the price, and the transcript can also be used to argue you treated the name as ordinary commerce.

Preventing it, proportionately

Defensive registration is real advice and it is also where money disappears fastest, because there is no bottom to it. There are hundreds of TLDs and infinite typo variants, and buying all of them is not a strategy.

A proportionate approach:

Register the .com plus your primary country extension, and any extension your customers would guess.
Register the handful of typos that are actually plausible: transposed adjacent letters, doubled letters, and the singular or plural form.
Register your trademark properly. Without it, no dispute process is available to you at all, and this is the highest-value item on the list.
Consider the Trademark Clearinghouse if you launch under many extensions, since it gives notice when someone registers a matching name.
Set every domain you own to auto-renew, and keep the registrar contact address monitored. A lapsed renewal is the most common way a brand loses its own name.

That last point deserves emphasis because it is entirely self-inflicted and it happens constantly. A domain registered to a former employee’s email address, with a card that expired, drops and is picked up within minutes by an automated service. No dispute process is needed by the squatter, and getting it back is far harder than never losing it.

Beyond that list, accept that some variants will be registered by other people, and that most of them will never matter.

How this fits the rest of the stack

Once a name is yours, the operational half is making sure it stays that way and points where it should: auto-renewal on, contact address monitored, DNS somewhere you control, and a certificate that renews without anyone remembering to do it. Custom domains and certificates are handled as part of the platform on RunxBuild, and the RunxBuild hosting calculator shows what the site or service behind the domain costs alongside everything else the project runs.

Useful related references:

FAQ

What is the difference between domain squatting and domain investing?

Intent. Squatting targets someone else’s trademark to extract money or trade on confusion. Investing means registering generic or descriptive names for their own value. The second is legal and the first is actionable, and dispute panels look closely at which one applies.

How much does a UDRP complaint cost?

Roughly $1,500 to $2,000 in provider fees for a single domain with a one-member panel, plus legal costs if you use a lawyer. Remedies are transfer or cancellation only, with no damages awarded.

Can I win a UDRP if the domain was registered before my trademark?

Almost never. You must show the domain was both registered and used in bad faith, and a name registered before your mark existed could not have been registered in bad faith towards it.

Should I buy the domain from a squatter instead of filing a complaint?

Often yes. If the asking price is comparable to or below the cost of a complaint, buying is cheaper, faster, and certain. Use an escrow service so funds are released only when the transfer completes.

How many defensive domains should I register?

The .com, your main country extension, any extension customers would guess, and a handful of genuinely plausible typos. Registering a trademark matters far more than buying more variants, since without one no dispute process is open to you.