You bought an expired domain. Good backlinks, 15 years of Wayback history, decent Trust Flow. Two weeks later, you get an email from WIPO: a trademark holder has filed a UDRP complaint. You have 20 days to respond or you lose the domain.
This happens to domain investors regularly. About 6,000 UDRP cases are filed every year through WIPO alone, and trademark holders win roughly 95% of them. If you're buying expired domains, you need to understand how this process works, what triggers it, and how to protect yourself.
What is UDRP?
UDRP stands for Uniform Domain-Name Dispute-Resolution Policy. It's a process created by ICANN in 1999 that lets trademark holders reclaim domain names without going to court. Think of it as arbitration specifically for domain name disputes.
The process is handled by approved providers (more on those below). The biggest is WIPO, which has processed over 80,000 cases since the policy launched. It's fast (about 2 months), relatively cheap ($1,300-$1,500 to file), and heavily favors trademark holders.
UDRP applies to all generic TLDs (.com, .net, .org, .info, etc.) and many country-code TLDs. Some ccTLDs have their own dispute mechanisms instead, which we'll cover later.
The three elements a complainant must prove
To win a UDRP case, the trademark holder must prove all three of these. Not two. All three. If they fail on any one element, the complaint is denied.
1. Identical or confusingly similar
The domain name must be identical or confusingly similar to a trademark the complainant owns. The TLD (.com, .net) is ignored in this comparison.
This is usually the easiest element to prove. "nikeshoes.com" is confusingly similar to the NIKE trademark. "gooogle.com" is confusingly similar to GOOGLE (typosquatting). "apple-support.com" is confusingly similar to APPLE.
Adding a generic word to a trademark ("cheap" + brand, brand + "deals") doesn't help you. Panels see right through it.
2. No rights or legitimate interests
The complainant must show that you, the domain holder, have no legitimate reason to own the domain. But this is also where your defense lives. The UDRP policy (paragraph 4(c)) lists three situations where you do have legitimate interests:
- Bona fide offering. Before you received notice of the dispute, you were using the domain (or preparing to use it) for a real business or offering of goods/services.
- Commonly known. You're personally or commercially known by the domain name, even without a trademark.
- Fair use. You're making legitimate noncommercial or fair use of the domain, without trying to confuse consumers or damage the trademark.
For expired domain buyers, the "bona fide offering" defense is the strongest. If you bought the domain and built a legitimate website on it before any complaint was filed, that's a real defense. If you're just parking it with ads related to the trademark owner's business, that's not.
3. Registered AND used in bad faith
This is the most complex element. Both registration and use must be in bad faith. The policy (paragraph 4(b)) gives four examples of bad faith:
- Selling to the trademark owner. You registered the domain primarily to sell it to the complainant for more than your out-of-pocket costs.
- Pattern of blocking. You have a history of registering domains to prevent trademark owners from using their marks online.
- Disrupting a competitor. You registered the domain to disrupt a competitor's business.
- Confusion for profit. You're using the domain to attract visitors by creating confusion with the trademark, then making money from those visitors (PPC ads, affiliate links, etc.).
One more thing: even doing nothing with a domain can count as bad faith use. This comes from the "Telstra doctrine" (WIPO Case D2000-0003), where the panel ruled that passively holding a famous trademark as a domain name is bad faith when there's no plausible legitimate use. So parking "coca-cola-outlet.com" and not doing anything with it won't save you.
The UDRP process step by step
| Step | Duration | What happens |
|---|---|---|
| 1. Filing | Day 0 | Complainant files complaint and pays fee |
| 2. Compliance check | 3-5 days | Provider checks paperwork. If something's missing, complainant gets 5 days to fix it. |
| 3. Notification | Day 3-5 | Provider notifies you (respondent) and the registrar. Your domain gets locked. |
| 4. Response | 20 days | You have 20 calendar days to file a response. You can request a 4-day extension in exceptional cases. |
| 5. Panel appointment | 5 days | Provider appoints one panelist (or three if requested). |
| 6. Decision | 14 days | Panel reviews everything and writes a decision. |
| 7. Publication | 3 days | Decision is published on the provider's website. |
| 8. Implementation | 10 business days | If you lose, the registrar transfers the domain. You can block this by filing a court action within 10 business days. |
Total time from filing to implementation: about 45-60 days. Sometimes longer with extensions.
WIPO also launched a priority service in March 2026 that delivers a decision in about 30 days. It costs $4,000 for a single panel (vs $1,500 standard).
UDRP providers and fees
Five organizations are approved by ICANN to handle UDRP cases. Fees vary quite a bit.
| Provider | 1 panel (1-5 domains) | 3 panel (1-5 domains) | Notes |
|---|---|---|---|
| 🌐 WIPO | $1,500 | $4,000 | Largest provider (~60% of cases). wipo.int |
| 🇺🇸 The Forum (NAF) | $1,300 | $2,600 | Second largest. US-focused. adrforum.com |
| 🇨🇿 CAC | ~€800 | ~€2,600 | Cheapest option. Also handles .eu disputes. udrp.adr.eu |
| 🌏 ADNDRC | $1,300 | $2,800 | Offices in Beijing, Hong Kong, Seoul, KL. adndrc.org |
| 🇨🇦 CIIDRC | CAD 1,925 | CAD 3,850 | Newest provider. Also handles .ca disputes. ciidrc.org |
The complainant always pays to file. If you (the respondent) want to upgrade from a single panelist to a three-member panel, you pay the difference. Statistically, three-panel decisions are slightly more favorable for respondents.
UDRP statistics: know your odds
WIPO alone handled 6,282 cases in 2025, a new record. Across all five providers, that's roughly 8,200+ decided cases per year.
| Year | WIPO cases |
|---|---|
| 2020 | 4,204 |
| 2021 | 5,128 |
| 2022 | 5,764 |
| 2023 | 6,192 |
| 2024 | 6,168 |
| 2025 | 6,282 (record) |
The numbers that matter for domain buyers:
- Trademark holders win about 95% of decided cases
- Respondents win about 4-5% of decided cases
- About 12.6% of cases are settled or terminated before a decision
- When respondents actually file a response (most don't), their win rate jumps to an estimated 20-30%
That last point is important. Most respondents don't bother responding, which makes the overall win rate look worse than it is. If you have a legitimate defense, filing a response matters.
Top filing countries in 2024: 🇺🇸 United States (2,157 cases), 🇫🇷 France (1,324), 🇬🇧 United Kingdom (422), 🇨🇭 Switzerland (281), 🇸🇪 Sweden (205).
How to defend against a UDRP complaint
You got a complaint. Here's what to do.
Respond. Always respond.
You have 20 calendar days. Not responding is the single biggest mistake. Panels must still evaluate all three elements even without a response, but in practice, no response almost always means you lose. When respondents file a response, the denial rate climbs to 20-30%.
What to include
- Evidence you were using (or preparing to use) the domain for a legitimate purpose before the complaint
- Evidence you didn't know about the complainant's trademark when you registered the domain
- If the domain is a generic or descriptive word: show that the word has meaning beyond the trademark ("apple" is a fruit, "delta" is a Greek letter)
- Your domain purchase history showing a pattern of investing in generic terms, not trademarks
- Any documentation of your plans for the domain (business plans, design mockups, content drafts)
Consider requesting a three-panel
The default is a single panelist chosen by the provider. You can request three panelists instead, though you'll pay the extra fee. Three-panel decisions tend to be more balanced, and respondents fare slightly better with three panelists than one. For a domain worth real money, it's worth the cost.
Reverse Domain Name Hijacking (RDNH)
Sometimes the complainant is the one acting in bad faith. If a trademark holder files a frivolous UDRP to steal a domain they have no right to, the panel can find "Reverse Domain Name Hijacking." This happens in about 1.3% of cases.
RDNH gets flagged when the complainant's trademark postdates the domain registration, when the complainant knew the respondent had legitimate rights, or when the complaint was filed after failed purchase negotiations. The bad news: RDNH has no financial penalty. It's just a published finding of abuse. The good news: you keep your domain.
Does buying an expired domain equal bad faith?
No. Not automatically. This is one of the most misunderstood points in UDRP law.
WIPO's Jurisprudential Overview 3.0 (Section 3.9) establishes that re-registering an expired domain counts as a new registration for UDRP purposes. The panel looks at whether you had bad faith at the time of that new registration, not whether the previous owner did.
Factors panels consider:
- Is the domain a well-known trademark? Registering "coca-cola.com" after it expires is still bad faith, no matter what.
- Did you know about the trademark when you bought it?
- Did you acquire it through a drop-catching service? That's a legitimate business practice and isn't inherently bad faith.
- What did you do with the domain after registration? A real website is very different from PPC parking with trademark-related ads.
- Is the domain generic or descriptive? A domain like "delta.com" has dictionary meaning independent of any single trademark.
Real case example: a domain previously owned by SAP lapsed in 2023. Someone picked it up, knowing it was SAP's trademark. Panel ordered transfer (WIPO D2024-4516). Contrast that with cases where respondents acquired generic expired domains through drop-catch services and built legitimate sites. Those complaints got denied.
URS vs UDRP: what's the difference?
URS (Uniform Rapid Suspension) is a lighter, faster alternative to UDRP. But it only works for new gTLDs (.shop, .online, .xyz, .tech, etc.). It doesn't apply to .com, .net, .org, or any ccTLD.
| UDRP | URS | |
|---|---|---|
| Applies to | All gTLDs + many ccTLDs | New gTLDs only (post-2012) |
| Outcome | Transfer or cancellation | Suspension only (domain frozen) |
| Cost | $1,300-$1,500+ | ~$375 |
| Proof standard | Preponderance of evidence | Clear and convincing (higher bar) |
| Trademark needed | Registered or common law | Registered trademark required |
| Timeline | ~60 days | ~21 days |
The big difference: URS only suspends the domain. You don't get it transferred to you. And the burden of proof is higher ("clear and convincing" vs "preponderance of evidence"). For most trademark holders going after .com domains, UDRP is the only option.
Country-specific dispute policies (beyond UDRP)
Several ccTLDs have their own dispute mechanisms. Some are easier for complainants than UDRP, some are harder.
| TLD | Mechanism | Cost | Key difference |
|---|---|---|---|
| 🇬🇧 .uk | DRS via Nominet | £200-£750 | Free mediation first. Two-element test (no separate bad faith requirement). |
| 🇫🇷 .fr | SYRELI via AFNIC | €250 | No bad faith requirement. Easier for complainants than UDRP. |
| 🇩🇪 .de | Court action only | €€€ | No administrative procedure. Must go to German courts. Expensive and slow. |
| 🇪🇺 .eu | ADR via CAC | €700 (discounted) | Entirely online, any of 24 EU languages. ~4 months. |
| 🇨🇦 .ca | CDRP via CIIDRC | CAD 1,000 | Similar to UDRP with some local differences. |
The .fr SYRELI process is worth noting. At just €250 and no bad faith requirement, it's much easier for French trademark holders to file. If you're buying .fr expired domains, the risk of a dispute is higher than with .com.
Germany is the opposite extreme. No administrative process exists for .de domains. The trademark holder must take you to court, which costs thousands of euros and takes months. This makes .de domains relatively safer from an enforcement perspective.
Practical checklist for expired domain buyers
- Before buying, check trademark registries (TMview, WIPO, USPTO at minimum)
- Prefer generic or descriptive domain names over anything that sounds like a brand
- Don't park the domain with PPC ads related to the former owner's business
- Build a legitimate website on the domain as soon as possible
- Document your intent: save your plans, purchase rationale, and development timeline
- Never contact the former trademark owner to offer selling the domain back
- If you receive a UDRP complaint, always file a response within 20 days
- For high-value domains, consider requesting a three-member panel
Most expired domain buyers will never face a UDRP complaint. The ones who do are usually those who registered obvious trademark names and either parked them with ads or tried to sell them back to the brand. Stick to generic names, build real websites, and do your trademark research upfront.
If you're browsing expired domains on CatchDoms, pair your SEO analysis with a quick trademark check. Five minutes on TMview can save you months of headache.
