UDRP procedure: how to recover a usurped domain name

UDRP procedure to recover a usurped domain name

You discover that a third party has registered a domain name using your trademark. The site redirects to a competitor, displays ads, or worse, runs a phishing scheme that deceives your customers. Amicable negotiation has failed, or the holder does not even answer. What can you do? For most generic extensions such as .com, there is an effective, fast and international route: the UDRP procedure.

Designed by ICANN in 1999, the UDRP (Uniform Domain-Name Dispute-Resolution Policy) lets a trademark owner recover or cancel a domain name registered in bad faith, without going to court. Administered mainly by the WIPO Arbitration and Mediation Center, it handles several thousand disputes every year. In 2024, WIPO recorded a record number of complaints, a sign of how persistent cybersquatting remains.

This article explains how the UDRP procedure works: the three conditions to meet, the step-by-step process, the costs and timelines, the SYRELI alternative for .fr, and how to build a solid case. The goal: to know when and how to use it to protect your assets effectively.

What is the UDRP procedure?

The UDRP is an out-of-court mechanism for resolving domain name disputes. Adopted by ICANN in 1999, it binds every holder of a domain name in the generic extensions (gTLDs): .com, .net, .org, .info, and most of the new extensions. By registering a domain, the holder contractually agrees to submit to this procedure in the event of a dispute.

The UDRP does not apply to country-code extensions (ccTLDs) such as .fr, which have their own mechanisms (SYRELI). It is administered by accredited centers, the main one being the WIPO Arbitration and Mediation Center. The decision is made by one or three independent panelists and leads, where successful, to the transfer or cancellation of the disputed domain.

One key point: the UDRP does not award damages. Its sole purpose is the fate of the domain name. For compensation or broader remedies, you must go to court. It is a targeted procedure, designed to handle clear cases of cybersquatting quickly.

The three cumulative conditions

To prevail, the complainant must prove three conditions, and all three must be met at once. This is the heart of the procedure.

1. A domain identical or confusingly similar to a trademark

The complainant must show that it holds rights in a trademark (registered or, in some cases, unregistered but well known) and that the disputed domain is identical or confusingly similar to it. Holding a registered trademark with a national office or the EUIPO makes this far easier to demonstrate. This is why trademark registration and the prior art search are the foundation of any later action.

2. The holder’s lack of rights or legitimate interests

The complainant must establish that the current holder has no rights or legitimate interests in the domain. The holder can defend itself by proving, for example, that it used the domain for a bona fide offering before the dispute, that it is itself commonly known by the name, or that it makes legitimate non-commercial or fair use of it. Absent such a justification, this condition is met.

3. Registration and use in bad faith

This is often the decisive condition. The complainant must show that the domain was both registered and used in bad faith. The UDRP policy lists indicators of bad faith: registering the domain to resell it to the trademark owner at a high price, seeking to disrupt a competitor’s business, attracting internet users for commercial gain by creating confusion, or a repeated pattern of abusive registrations.

Summary table of the three conditions

Condition What the complainant must prove Key element
1. Similarity Trademark rights + identical or similar domain Registered trademark
2. No legitimacy The holder has no rights or legitimate interests No bona fide use
3. Bad faith Registration AND use in bad faith Intent to harm or profit

The procedure step by step

1. Build the case

Before filing, gather the evidence: trademark titles, screenshots of the disputed site, the domain’s history, any exchanges with the holder, elements demonstrating bad faith. Rigorous document management often makes the difference: a complete, dated file strengthens the credibility of the complaint.

2. File the complaint

The complaint is filed with an accredited center, usually the WIPO Arbitration and Mediation Center. It sets out the facts, demonstrates the three conditions and specifies the remedy sought: transfer or cancellation. The complainant chooses a panel of one or three experts.

3. The holder’s response

The holder has 20 calendar days from the date of formal notification of the complaint by the Center to respond and present its arguments. A lack of response is not an automatic win for the complainant: the panel still examines whether the three conditions are met.

4. The panel’s decision

The panel issues its decision within a short timeframe, generally around two months from filing. The decision is reasoned and published. Three outcomes are possible: transfer of the domain to the complainant, its cancellation, or dismissal of the complaint.

5. Enforcement

Where the decision is favorable, the registrar carries out the transfer or cancellation within about ten business days, unless the holder files a court action in the meantime. The enforceable nature of the decision is one of the UDRP’s great strengths.

Costs and timelines

The UDRP procedure is far faster and cheaper than litigation. The WIPO Center’s administrative fees are around 1,500 USD for a single-panelist case with one domain, and about 4,000 USD for a three-member panel. On top of these come counsel fees for drafting the complaint, which vary with complexity.

The total time, from filing to decision, is generally around two months. By comparison, court litigation over a domain name dispute can stretch over several years. According to WIPO, the large majority of decided cases result in transfer of the domain where cybersquatting is established. The reasoning of past panels is consolidated in the WIPO Jurisprudential Overview 3.0, a key reference for anyone preparing a case.

The URS alternative for new extensions

For the new generic extensions, there is a complementary procedure, the URS (Uniform Rapid Suspension). Faster and cheaper than the UDRP, it targets the most clear-cut cases. Its major difference: it only allows suspension of the domain, not transfer. The standard of proof is also higher. The URS suits situations where the priority is to stop an abusive use quickly, without necessarily recovering the domain.

The SYRELI procedure for .fr

The UDRP does not cover .fr. For French extensions (.fr, .re, .pm, .yt, .wf, .tf, .paris), it is AFNIC that administers the SYRELI procedure. It allows a request for the deletion or transfer of a domain name that infringes rights.

SYRELI is fast and inexpensive: the decision is issued in around two months, for a cost of 250 euros excluding tax. The applicant must show that it has standing and that the holder has no legitimate interest or is acting in bad faith. AFNIC also offers an alternative, the PARL Expert procedure, entrusted to a WIPO expert. For a French company whose trademark is usurped on a .fr, SYRELI is generally the first route to consider.

Comparison of recovery procedures

Procedure Extensions Duration Indicative cost Possible outcome
UDRP (WIPO) .com, .net, .org, gTLDs ~2 months ~1,500 – 4,000 USD Transfer or cancellation
URS new extensions a few weeks a few hundred USD Suspension only
SYRELI (AFNIC) .fr and French ccTLDs ~2 months 250 EUR excl. tax Transfer or deletion
Litigation all 6 to 24 months and more 5,000 – 50,000 EUR+ Transfer + damages

When to choose the UDRP over another route

The UDRP is the go-to option when cybersquatting is clear, the trademark is registered, and the goal is to recover the domain quickly without claiming compensation. It loses its value in several cases: when the holder has a serious legitimate interest, when the dispute concerns a .fr (use SYRELI), or when the company seeks damages and broader remedies (then prefer litigation or, in some cases, a simple amicable buyback of the domain).

Amicable negotiation is sometimes preferable when the holder is acting in good faith: bringing a procedure against a legitimate holder risks failing and revealing your strategic interest. The choice of route therefore depends on a prior analysis of the situation, just as it does for trademark infringement.

Prevention over cure: the role of monitoring

The best UDRP procedure is the one you never have to bring. Detecting an abusive registration early, before it generates traffic, phishing or reputational harm, sharply reduces costs and risks. That is the whole point of domain name monitoring, which identifies suspicious filings using your trademark as soon as they appear, as we explain in our article on how to detect domain name infringements.

Monitoring is part of a broader cybersquatting and brand protection effort. Detecting early often makes it possible to act with a simple cease-and-desist letter, far cheaper than a UDRP procedure. As our article on proactive monitoring against cybersquatting details, anticipation is the strongest line of defense.

The role of software in dispute management

A UDRP or SYRELI procedure generates deadlines, evidence and documents that must be tracked rigorously. An IP management tool centralizes these elements within a trademark portfolio management approach.

It lets you link each dispute to the trademark concerned, track the key procedural dates through the deadline tracking calendar and IP docketing, centralize evidence, screenshots and correspondence in structured document management, and keep a record of each case’s outcome to feed your domain name management strategy. IP management software does not plead for you, but it makes the preparation and tracking of cases reliable.

Case study: a brand recovers a phishing domain

Consider a representative scenario, drawn from real situations.

A French financial-services company call it “Finora” detects, through its domain name monitoring, the registration of “finora-secure.com”. The site imitates its visual identity and invites visitors to enter their credentials: a clear case of phishing.

  • Qualification: Finora holds the “Finora” trademark registered with its national office and the EUIPO. The domain reproduces the trademark identically, the holder is masked, and the use is plainly fraudulent. The three UDRP conditions appear to be met.
  • Preparation: the legal team gathers the evidence in its management tool: trademark titles, timestamped screenshots of the fraudulent site, the monitoring report. The procedural deadlines are recorded in the deadline tracking calendar.
  • Procedure: the complaint is filed with the WIPO Center with a single-panelist option. The holder does not respond. The panel finds similarity, the absence of legitimate interest and bad faith established by the phishing use.
  • Outcome: eight weeks after filing, the decision orders the transfer of the domain to Finora. The registrar carries it out within ten business days. Total cost: around 1,500 USD in WIPO fees and a few hours of counsel. The now-harmless domain is added to the company’s defensive portfolio and monitored for renewal.

FAQ :

What is the UDRP procedure?

The UDRP (Uniform Domain-Name Dispute-Resolution Policy) is an out-of-court mechanism created by ICANN to resolve domain name disputes in the generic extensions (.com, .net, .org, new extensions). Administered notably by the WIPO Arbitration and Mediation Center, it lets a trademark owner recover or cancel a domain registered in bad faith, without litigation, in around two months.

What are the three UDRP conditions?

The complainant must prove three cumulative conditions: the domain name is identical or confusingly similar to a trademark in which it has rights; the current holder has no rights or legitimate interests in the domain; and the domain was registered and is being used in bad faith. All three must be met. Bad faith is often decisive, demonstrated for example by phishing use, abusive resale, or an intent to harm a competitor.

How much does a UDRP procedure cost and how long does it take?

The WIPO Center’s administrative fees are around 1,500 USD for a single-panelist case with one domain, and about 4,000 USD for three panelists, plus counsel fees. The total time, from filing to decision, is generally around two months. The decision is enforceable: the registrar carries out the transfer or cancellation within about ten business days, unless the holder brings a court action.

Can the UDRP be used for a .fr domain name?

No. The UDRP only covers the generic extensions. For .fr and other French extensions, the SYRELI procedure, administered by AFNIC, applies. It is fast (around two months) and inexpensive (250 euros excluding tax). AFNIC also offers the PARL Expert procedure, entrusted to a WIPO expert. For a French trademark usurped on a .fr, SYRELI is generally the first route to consider.

How can I avoid having to bring a UDRP procedure?

By detecting abusive registrations as early as possible. Active domain name monitoring identifies suspicious filings using your trademark as soon as they appear, which often makes it possible to act with a simple cease-and-desist letter, far cheaper than a procedure. Monitoring is part of a broader cybersquatting and brand protection and domain name management effort.

About IPZEN

IPZEN is a SaaS intellectual property management platform that lets companies and law firms centralize, monitor and optimize their portfolio of trademarks, patents and domain names.

Schedule a free demonstration