The UDRP Procedure: A Guide to Resolving Domain Disputes

Every time someone registers a domain name that mimics a well-known brand – think “tatagroup-deals.com” or “reliancejio-offers.net” – the trademark owner faces a dilemma: go to court and spend years in litigation, or use a faster, internationally recognized mechanism? Since 1999, the answer for most such cases has been the Uniform Domain Name Dispute Resolution Policy (UDRP) – a streamlined administrative procedure that can resolve a domain name dispute in roughly 60 days, without the parties ever stepping into a courtroom.

What the UDRP is and who it applies to 🔗

The UDRP is a policy established by ICANN (Internet Corporation for Assigned Names and Numbers) and adopted by all ICANN-accredited registrars. This means that when anyone registers a generic top-level domain – .com, .net, .org, and the newer .xyz, .online, .top, etc. – they automatically agree, as part of the registration contract, to submit to UDRP proceedings if a trademark owner files a complaint against them. The policy is mandatory for domain holders but optional for trademark owners, who can instead choose to go to court if they prefer.

The UDRP applies primarily to cases of cybersquatting – where someone registers a domain in bad faith to exploit a brand’s reputation. It is not designed for complex disputes involving competing legitimate rights; those still require court intervention. What the UDRP does exceptionally well is resolve clear-cut cases of abusive registration quickly and at a fraction of litigation costs.

The three-element test: what a complainant must prove 🔗

Before understanding the procedure, it helps to know what a complainant must ultimately establish. Under ICANN’s policy framework, three elements must all be proved for a complaint to succeed:

• Identical or confusingly similar: The disputed domain name is identical or confusingly similar to a trademark or service mark in which the complainant has rights.
• No legitimate interest: The domain holder has no rights or legitimate interests in the domain name.
• Bad faith registration and use: The domain name was registered and is being used in bad faith.

All three must be established – proving just one or two is not enough. The burden of proof rests with the complainant throughout the proceedings, although once the complainant makes a prima facie case on the second element (no legitimate interest), the burden shifts to the respondent to demonstrate a legitimate interest.

Demonstrating bad faith: the key criteria 🔗

Bad faith is often the most contested element. ICANN’s UDRP Rules and panel decisions have identified several non-exclusive indicators of bad faith registration and use. These include situations where the registrant:

• Registered the domain primarily to sell, rent, or transfer it to the trademark owner at a price exceeding out-of-pocket costs.
• Registered the domain to prevent the trademark owner from using their mark as a domain name, as part of a pattern of such conduct.
• Registered the domain primarily to disrupt the business of a competitor.
• Used the domain to attract internet users to their website for commercial gain by creating confusion about the source, sponsorship, or endorsement of the site.

A respondent who fails to file a response does not automatically lose, but panels routinely draw adverse inferences from such silence, particularly when the complainant’s evidence of bad faith is compelling. Similarly, if a panel finds that the complaint itself was brought in bad faith – for example, to deprive a legitimate domain holder of their name – it can declare this constitutes an abuse of the administrative proceeding.

Choosing a dispute resolution service provider 🔗

The UDRP is not administered by ICANN directly. Instead, ICANN accredits independent dispute resolution service providers to administer the proceedings. The complainant selects one of these providers when filing. Currently, the approved providers include:

• World Intellectual Property Organization (WIPO) – the most widely used globally, handling the largest volume of UDRP cases.
• The Forum (formerly National Arbitration Forum) – popular in the United States.
• Asian Domain Name Dispute Resolution Centre (ADNDRC) – relevant for disputes involving registrants in Asia.
• Czech Arbitration Court (CAC) – a European option with lower base fees.
• Arab Center for Domain Name Dispute Resolution – for disputes in the Arab region.

Each provider follows the same overarching UDRP Rules set by ICANN but also maintains its own supplemental rules covering fees, submission formats, and communication protocols. Complainants should review the supplemental rules of their chosen provider carefully before filing.

Filing a complaint: what goes in it 🔗

The complainant initiates the process by filing a complaint with the chosen provider – either electronically or through the provider’s online form – along with payment of the filing fee. Under Paragraph 3 of the UDRP Rules, the complaint must contain, at a minimum:

• The disputed domain name(s) – a single complaint can cover multiple domain names if they are held by the same registrant.
• The identity and contact details of the complainant and, to the extent known, the respondent (obtained from the WHOIS/RDDS database).
• The trademark or service mark on which the complaint is based, including evidence of rights.
• Detailed arguments establishing each of the three UDRP elements – similarity, no legitimate interest, and bad faith.
• The remedy requested (cancellation or transfer of the domain name).
• The complainant’s choice of a single-member or three-member panel.
• The mutual jurisdiction the complainant submits to for any court challenge.

There is no mandatory requirement to use a lawyer, though legal assistance is often advisable. WIPO provides a Model Complaint to help parties structure their submissions correctly. Once received, the provider reviews the complaint for administrative compliance. If deficiencies are found, the complainant typically has five days to correct them; otherwise, the complaint is considered withdrawn.

What happens after the complaint is filed 🔗

Once the complaint passes the compliance check, the provider sends a verification request to the registrar, asking it to confirm the registrant’s details and apply a domain lock. The lock ensures the domain cannot be transferred or deleted while the proceedings are ongoing. Within two business days, the registrar confirms the lock and the registrant’s contact information.

The provider then formally notifies the respondent – electronically and by written notice – that a complaint has been filed. This notification marks the official commencement of the administrative proceeding. The respondent now has 20 days from the commencement date to file a response. An automatic four-day extension can be requested as a matter of right; any further extension requires exceptional justification.

Filing a response: the respondent’s opportunity 🔗

The response is the respondent’s chance to contest each of the three UDRP elements. Filing a response is free of charge – the respondent bears no filing fee unless they request a three-member panel (explained below). The response must be submitted electronically to both the complainant and the provider.

To successfully defend against the complaint, the respondent can establish a legitimate interest in the domain by showing, under Paragraph 4(c) of the UDRP Policy, that before any notice of the dispute, they were using the domain in connection with a bona fide offering of goods or services; or that they are commonly known by the domain name; or that they are making a legitimate non-commercial or fair use of the domain without intent to mislead consumers for commercial gain. If the respondent does not file a response in time, the provider proceeds directly to appointing the Administrative Panel, which then decides the case based on the information available – usually the complainant’s submissions alone.

Appointment of the administrative panel 🔗

The Administrative Panel is the decision-making body in a UDRP proceeding. It consists of either one or three impartial, independent panelists appointed by the provider from its roster of qualified experts. The panelists are not affiliated with ICANN, the provider, the registrar, or either party.

The complainant initially chooses whether to have a single-member or three-member panel. The respondent can override this and request a three-member panel regardless of the complainant’s choice – but if they do so, they must pay half the three-member panel fee. Once both parties’ submissions are in (or the response deadline has passed), the provider appoints the panel, which then has 14 days to issue its decision. In practice, most UDRP cases are resolved within 60 days of the complaint being filed.

The panel’s role is strictly adjudicatory – it reviews the written submissions, applies the UDRP criteria, and issues a written decision. There are no in-person hearings as a matter of right, though panels have discretion to request one in exceptional circumstances. The panel can order only two remedies: cancellation of the domain name or transfer of the domain name to the complainant. It cannot award monetary damages or legal costs.

Cost of proceedings 🔗

UDRP proceedings are significantly cheaper than litigation but are not inexpensive in absolute terms. Filing fees for a single domain name with a single-member panel typically start between USD 1,300 and USD 1,500 depending on the provider. A three-member panel costs roughly twice as much. For cases involving multiple domain names – say, six to ten – and a three-member panel through WIPO, the total fee can reach USD 5,000. These figures do not include any lawyer’s fees. If a complaint is withdrawn or settled before a panel is appointed, providers like WIPO offer a partial refund – usually USD 1,000 of a USD 1,500 fee. The entire fee is paid by the complainant unless the respondent requests a three-member panel, in which case the additional cost is split equally.

Language of proceedings 🔗

The default rule under Paragraph 11 of the UDRP Rules is that the language of the proceedings follows the language of the domain name’s registration agreement. So if a domain was registered through a Chinese registrar with a Chinese-language registration agreement, Chinese is the default language. However, this is not absolute. The panel has discretion to use a different language based on factors such as both parties’ ability to understand the proposed language, the language of the domain name itself, any content on the disputed website, and considerations of cost and fairness to both sides. Parties can also mutually agree on a different language. In practice, WIPO sends all initial case communications in both the registration agreement language and the language of the complaint, leaving the final call to the appointed panel.

Implementing the panel’s decision 🔗

Once the panel issues its decision, the provider forwards it to the registrar and to both parties. The registrar is then required to implement the decision – transferring or cancelling the domain – but must wait 10 business days before doing so. This window gives the losing party an opportunity to file a lawsuit in a court of mutual jurisdiction (either where the registrar is located or where the domain holder’s address appears in the WHOIS database at the time of the complaint). If official documentation of such a lawsuit is presented within the 10-day window, the registrar suspends implementation until the court proceedings conclude.

This built-in judicial review mechanism is a key feature of the UDRP’s design – it is an administrative remedy, not a final judgment. Courts have the ultimate authority, and a losing party always retains the right to seek court relief under applicable national law.

What do you think? If a company like an Indian startup discovers that its brand name has been cybersquatted on a .com domain by a party based in another country, which UDRP provider would best serve its interests – and what evidence would be most critical in establishing bad faith registration? Also, given that the UDRP cannot award monetary damages, do you think this limitation makes the process less effective for trademark owners who have suffered measurable business losses?

References

1. https://www.icann.org/en/contracted-parties/consensus-policies/uniform-domain-name-dispute-resolution-policy/uniform-domain-name-dispute-resolution-policy-01-01-2020-en
2. https://www.icann.org/resources/pages/filing-udrp-2013-05-21-en
3. https://en.wikipedia.org/wiki/Uniform_Domain-Name_Dispute-Resolution_Policy
4. https://www.icann.org/resources/pages/udrp-rules-2015-03-11-en
5. https://blog.ipleaders.in/a-comprehensive-guide-to-wipo-uniform-domain-name-dispute-resolution-policy-udrp/
6. https://www.ny-trademark-lawyer.com/filing-a-udrp-complaint.html
7. https://www.wipo.int/amc/en/domains/
8. https://www.icann.org/resources/pages/udrp-rules-2024-02-21-en
9. https://www.wipo.int/amc/en/domains/guide/
10. https://giga.law/blog/2019/2/27/what-it-costs-to-file-a-udrp-complaint
11. https://www.wipo.int/amc/en/domains/lop/