How to file a UDRP complaint: process, costs, and requirements

A UDRP complaint is one of the most widely used formal routes to recover a domain name that infringes your trademark without starting a court case.

This guide explains when UDRP is the right option, what it costs, what evidence you need, how to file a complaint, and what you must prove to win.

TL;DR

• The UDRP, or Uniform Domain Name Dispute Resolution Policy, is an ICANN policy for resolving trademark-based domain name disputes.
• To win, the complainant must prove three elements: the domain is identical or confusingly similar to a trademark, the registrant has no rights or legitimate interests, and the domain was registered and is being used in bad faith.
• UDRP remedies are limited to domain transfer or cancellation. The panel cannot award damages.
• WIPO fees start at $1,500 for 1–5 domains with a single panelist. WIPO also offers expedited processing for qualifying cases at $4,000.
• A standard UDRP case usually takes around 45 to 60 days. Urgent phishing, malware, or fraud may need parallel registrar, host, browser, search, or payment-provider action.
• Losing a UDRP case does not prevent either party from taking the dispute to court afterward.

What is a UDRP complaint?

The Uniform Domain Name Dispute Resolution Policy, usually called the UDRP, is an administrative procedure for resolving bad-faith domain name registrations that target trademarks.

ICANN introduced the policy in 1999 to give trademark owners a faster alternative to court litigation for clear cybersquatting disputes.

A UDRP complaint is the filing that starts the procedure. In it, the trademark owner asks an accredited dispute resolution provider to order the transfer or cancellation of one or more domain names.

The UDRP is not a general internet abuse process. It is specifically for trademark-based domain name disputes. A business name, copyright claim, product complaint, unfairness argument, or general “this domain is harmful” claim is not enough on its own. You need trademark rights, either registered or, in some cases, unregistered rights supported by evidence of use and recognition.

WIPO, the largest UDRP provider, administered 6,282 domain name cases in 2025, its highest annual caseload since the service began.

What can a UDRP complaint achieve?

A UDRP panel can order only two remedies:

• Transfer of the domain name to the complainant
• Cancellation of the domain name

In most brand protection cases, transfer is the better remedy because it gives the brand control of the domain and prevents the same name from being registered again.

A UDRP panel cannot:

• Award damages
• Order reimbursement of legal fees
• Punish the registrant
• Remove website content
• Shut down a seller account
• Order a hosting provider to remove files
• Resolve every dispute between two businesses using similar names

If you need money damages or a court injunction, UDRP is not enough. In the United States, for example, brands may consider court action under the Anticybersquatting Consumer Protection Act, usually called the ACPA.

Which domains does UDRP apply to?

The UDRP applies to generic top-level domains, including:

• .com
• .net
• .org
• .info
• .biz
• Newer gTLDs such as .shop, .store, .online, and many others

Many country-code top-level domains, or ccTLDs, have also adopted the UDRP or a local variation of it.

Some ccTLDs use their own domain dispute procedures instead. For example, .eu, .fr, .nl, and .cn have local rules, providers, fees, and eligibility requirements.

Before filing, check whether the domain extension is covered by the standard UDRP or by a local dispute process.

Who handles UDRP complaints?

UDRP complaints are not filed with ICANN directly. They are filed with an approved dispute resolution provider.

The main providers include:

• WIPO — the World Intellectual Property Organization, the largest provider by case volume
• Forum — formerly the National Arbitration Forum, often still referred to as NAF in older articles
• ADNDRC — the Asian Domain Name Dispute Resolution Centre
• CAC — the Czech Arbitration Court

The provider appoints a panel of one or three independent domain-dispute professionals. If the complainant wins, the registrar implements the transfer or cancellation unless the respondent starts a court action within the required window.

When should you file a UDRP complaint?

A UDRP complaint is the right route when you want to recover or cancel a domain name that was registered in bad faith and infringes your trademark.

It is not always the fastest route for urgent harm. If the domain is being used for phishing, malware, fake stores, payment fraud, or active scams, brands often need parallel action while the UDRP case runs.

Situation	Best route
You want to recover a bad-faith domain using your trademark	UDRP
You want a clear-cut abusive new gTLD suspended quickly	URS
The domain is being used for phishing, malware, or an active scam	Registrar, host, browser, search, or payment-provider abuse reports
The domain uses a ccTLD with its own rules	Local ccTLD dispute process
You want damages or a court injunction	Court action, such as ACPA in the US
You want to remove infringing website content but do not need the domain	DMCA, host, platform, or search takedown route
You want to stop fake ads or social profiles pointing to the domain	Platform or ad-network enforcement
You want to monitor lookalike domains before they go live	Domain monitoring and registrar-level enforcement

In practice, brands often use more than one route. A UDRP can recover the domain, while abuse reports can reduce immediate customer harm.

How much does it cost to file a UDRP complaint?

The filing fee depends on the provider, the number of domains, and whether the case uses a single panelist or a three-member panel.

These are published provider fees for the smallest case tiers at the time of writing.

Provider	Single-member panel	Three-member panel	Smallest tier
WIPO	$1,500	$4,000	1–5 domains
Forum	$1,330	$2,660	1–2 domains
ADNDRC	$1,300	$2,800	1–2 domains
CAC	From €800 initial fee	Varies	Small cases

A few cost details matter before you file.

Fees scale with domain count

At WIPO, a complaint covering 1–5 domains costs $1,500 with a single panelist. A complaint covering 6–10 domains costs $2,000 with a single panelist.

If the same registrant controls several infringing domains, bundling them into one complaint can be cheaper than filing separate complaints.

Three-member panels cost more

A single-member panel is the standard option for many straightforward cases. A three-member panel costs more but may be worth considering when the domain is valuable, the facts are complex, the respondent is likely to fight, or the brand wants a broader panel for a high-risk dispute.

WIPO expedited processing costs more

WIPO introduced expedited UDRP processing in 2026. For qualifying cases with 1–5 domains and a single panelist, the fee is $4,000, and WIPO aims to deliver a decision within about one month from case commencement.

This is not the default process. Standard UDRP filing remains the route for most cases.

Partial refunds may apply if a WIPO case terminates early

WIPO revised its early termination refund rules in 2026. For 1–5 domain cases, if a complainant withdraws before the respondent is formally notified, WIPO retains a $100 administration fee. If the case terminates after commencement but before panel appointment, WIPO retains $500. After panel appointment, no refund is provided.

Legal or service-provider fees are separate

The provider filing fee does not include attorney costs, case preparation, evidence collection, monitoring, or follow-up enforcement.

You do not need a lawyer to file a UDRP complaint, but weak evidence and poor drafting are common reasons otherwise valid cases fail. Many brands work with counsel or a specialized domain enforcement provider.

Who can file a UDRP complaint?

Any party with trademark rights can file a UDRP complaint.

Those rights can come from:

• Registered trademarks
• Unregistered or common-law trademarks, where recognized and supported by evidence
• Service marks
• Acquired rights in a distinctive brand name

For registered marks, include registration numbers, jurisdictions, registration dates, and proof of ownership.

For unregistered marks, the evidentiary burden is higher. You may need to show sales history, press coverage, website traffic, advertising, consumer recognition, market presence, and other evidence that the name functions as a trademark.

To win, your complaint must prove three cumulative elements:

1. The domain name is identical or confusingly similar to a trademark or service mark in which you have rights.
2. The registrant has no rights or legitimate interests in the domain name.
3. The domain name was registered and is being used in bad faith.

All three must be proven. If one element fails, the complaint fails.

UDRP evidence checklist

Before filing, collect the evidence you need to support all three elements.

Evidence	What to collect
Trademark rights	Registration certificates, registration numbers, jurisdictions, renewal status, ownership records
Unregistered rights	Sales, advertising, press coverage, website traffic, customer recognition, market history
Domain evidence	Disputed domain name, registrar, TLD, creation date, nameservers, RDAP or WHOIS records
Website evidence	Date-stamped screenshots, landing pages, redirects, product pages, login forms, checkout pages
Bad-faith use	Phishing forms, counterfeit sales, pay-per-click ads, fake brand pages, sale offers, malware warnings
Registrant evidence	Public registrant data, privacy/proxy details, disclosed registrant information after filing
Pattern evidence	Similar domains, repeated registrations, connected registrants, related email addresses, reused templates
Confusion evidence	Customer complaints, support tickets, fraud reports, misdirected emails, social media reports
No legitimate interest	Evidence that the registrant is not authorized, not commonly known by the name, and not making fair use
Urgency evidence	Fraud, phishing, payment abuse, consumer harm, or active customer risk

Document the domain before sending warnings. Registrants sometimes park, change, or redirect the site once they know a dispute is coming.

Privacy-protected WHOIS is normal. If the registrant is hidden behind a privacy or proxy service, the registrar discloses the underlying registrant details to the provider after filing. The complainant then normally gets a chance to amend the complaint.

How to file a UDRP complaint step by step

1. Confirm that UDRP is the right route

Start by confirming four points:

• You have trademark rights.
• The domain is identical or confusingly similar to your mark.
• The registrant has no rights or legitimate interests in the domain.
• There is evidence that the domain was registered and is being used in bad faith.

If the issue is urgent fraud, phishing, malware, or a live fake store, do not wait for UDRP alone. Use registrar, host, search, browser, payment, or platform abuse routes in parallel.

2. Choose a dispute resolution provider

Choose an approved provider based on cost, filing process, language, precedent, case type, and internal preference.

WIPO is often chosen because it has the largest body of searchable decisions and publishes the WIPO Overview, which summarizes consensus views on common UDRP issues. Forum, ADNDRC, and CAC are also valid options, and each has its own supplemental rules and fee schedule.

3. Draft the complaint

The complaint should identify:

• The complainant
• The respondent, if known
• The disputed domain name or names
• The registrar
• The trademark rights being relied on
• The remedy requested: transfer or cancellation
• Whether you request a single-member or three-member panel
• The factual and legal basis for each UDRP element

Do not treat the complaint as a formality. A strong filing explains the case clearly and supports each claim with evidence.

4. File the complaint and pay the fee

Most providers accept complaints electronically through online forms or model complaint templates.

If the domain is privacy-protected, the initial complaint may name the privacy service or “unknown” respondent. After registrar verification, the underlying registrant information is usually disclosed to the provider and relayed to the complainant, who can amend the filing if needed.

5. Complete compliance review

The provider reviews the complaint for administrative compliance. If there are deficiencies, you usually get a short period to correct them.

Once the complaint passes review, the provider formally notifies the respondent and registrar. The registrar locks the domain so it cannot be transferred away during the proceeding.

6. Wait for the respondent’s answer

The respondent normally has 20 days to respond.

If no response arrives, the respondent is in default. The panel can decide the case based on the complaint alone, but default does not guarantee a win: the complainant still has to prove all three UDRP elements.

If the respondent answers, the panel reviews both sides.

7. Receive the panel decision

The panel usually issues its decision within 14 days of appointment.

If the complainant wins, the registrar waits for the required court-action window before implementing the transfer or cancellation. Under the UDRP, the registrar waits 10 business days after being informed of the decision to see whether the respondent files a court action in the relevant jurisdiction.

If no court action is filed, the registrar implements the decision.

How long does a UDRP complaint take?

A standard UDRP case usually takes around 45 to 60 days from filing to decision.

A simple timeline looks like this:

Stage	Typical timing
Complaint preparation	Depends on evidence and drafting
Administrative review	A few days, if the complaint is complete
Respondent response period	20 days
Panel appointment	After the response period or default
Panel decision	Usually within 14 days of appointment
Implementation window	10 business days after decision notice

Timelines can shift if the complaint has deficiencies, the respondent files a response, the parties settle, the registrar is slow to verify details, or the case involves multiple domains or procedural complications.

WIPO’s expedited route can shorten eligible cases, but it costs more and is not available for every situation.

How to win a UDRP proceeding

Filing correctly is procedural. Winning depends on evidence.

A UDRP panel assesses the same three elements in every case.

Element 1: identical or confusingly similar to your trademark

The first element is usually the easiest to prove.

The panel compares the domain name with the complainant’s trademark. Exact matches usually qualify. So do many typosquats and lookalike domains.

Examples:

• redpoints.com compared with RED POINTS
• redp0ints.com using a zero instead of an “o”
• redpoints-store.com
• redpoints-login.com
• redpoints-support.net

Generic additions such as “store,” “shop,” “login,” “support,” “official,” or “sale” usually do not prevent confusing similarity. The top-level domain, such as .com or .net, is usually disregarded for this test.

The threshold is low, but you still need trademark rights. If your brand name is descriptive, weak, or unregistered, provide enough evidence to show that it functions as a trademark.

Element 2: no rights or legitimate interests

The second element asks whether the registrant has a legitimate reason to use the domain.

The complainant must make a prima facie case that the respondent has no rights or legitimate interests. Once that showing is made, the respondent can try to rebut it.

A respondent may have a legitimate interest if:

• They used the domain for a bona fide offering of goods or services before the dispute.
• They are commonly known by the domain name.
• They are making legitimate noncommercial or fair use of the domain.
• The domain consists of a descriptive or dictionary term used in its ordinary meaning.

For brands, this is where evidence matters. It is not enough to say “we do not like this domain.” Show that the registrant is not authorized, is not known by the name, and is using the domain to trade on your trademark.

Examples that can support this element include counterfeit sales, phishing pages, misleading pay-per-click ads, fake login pages, impersonation, or a domain parked with ads targeting the trademark owner’s industry.

Element 3: registered and used in bad faith

The third element asks whether the domain was registered and is being used in bad faith.

Bad faith can include:

• Registering the domain mainly to sell it to the trademark owner for profit
• Preventing the trademark owner from reflecting the mark in a domain name as part of a pattern of conduct
• Registering the domain mainly to disrupt a competitor
• Using the domain to attract users for commercial gain by creating confusion with the trademark
• Using the domain for phishing, fraud, counterfeit sales, malware, or impersonation
• Registering multiple typo domains targeting the same brand
• Redirecting users to competing or malicious sites
• Hiding behind false contact details in combination with other bad-faith evidence

Bad faith is often the most contested element.

A strong complaint connects the timing of the domain registration, the fame or distinctiveness of the mark, the content on the website, the registrant’s pattern of conduct, and any evidence that the respondent knew or should have known about the brand.

Does trademark geography matter in UDRP cases?

Trademark geography matters, but not always in the same way.

For this first element, panels generally do not consider the goods or services covered by the trademark, the trademark’s filing date, or the date of first claimed use. Any acquired trademark rights are enough to establish standing, though those same factors can matter later, when the panel assesses legitimate interests and bad faith. A national trademark registration can be enough to establish standing.

For the second and third elements, geography can become more important. If a mark is famous globally, it is harder for the respondent to argue coincidence. If the mark is less distinctive or protected only in a narrow market, the complainant may need stronger evidence that the respondent knew about the brand and targeted it.

The practical lesson: do not rely only on the trademark certificate. Show why this respondent chose this domain, why the choice points to your brand, and why the registrant’s use is not legitimate.

What happens if you win?

If you win, the panel orders the domain to be transferred or cancelled.

Most complainants request transfer. Cancellation can be useful in some cases, but it also creates the risk that the domain becomes available for registration again.

After the decision, the registrar waits through the required court-action window. If the respondent does not file a qualifying court action, the registrar implements the decision.

Once the domain is transferred, secure it properly:

• Add it to your defensive domain portfolio.
• Renew it before expiry.
• Redirect it to the official site, if appropriate.
• Monitor close variants.
• Watch for new registrations by the same actor.

Winning one UDRP case does not stop the same registrant or network from registering another lookalike domain later.

What happens if you lose?

A UDRP loss does not prevent you from going to court afterward.

It may also show that the complaint had a problem: weak trademark evidence, unclear bad faith, a respondent with a legitimate interest, or a domain registered before your trademark rights existed.

Before refiling or escalating, review why the panel rejected the case. A second complaint over the same domain is usually difficult unless there is new evidence or a material change in circumstances.

If the domain is actively harming customers, you may still have other enforcement options, such as registrar abuse reporting, host takedown, payment-provider reporting, search de-indexing, or court action.

UDRP vs URS vs domain takedown

UDRP is only one domain enforcement route.

Route	Best for	Remedy
UDRP	Recovering or cancelling a bad-faith domain that infringes a trademark	Transfer or cancellation
URS	Clear-cut abuse on eligible new gTLDs	Temporary suspension
Registrar abuse report	Phishing, malware, fraud, fake stores, or policy abuse	Suspension, lock, or investigation
Host takedown	Infringing or fraudulent website content	Content or site removal
Search de-indexing	Reducing visibility of infringing or fraudulent pages	Removal from search results
Court action	Damages, injunctions, complex disputes, or contested rights	Court-ordered remedy

A mature domain strategy often combines monitoring, fast abuse reports, UDRP recovery, and defensive registration.

For related domain threats, see Red Points’ guides to cybersquatting, typosquatting, and domain name trademark infringement.

How Red Points helps with UDRP enforcement

Filing one UDRP complaint is manageable. Handling a stream of lookalike domains, typosquats, parked threats, fake stores, and inactive domains is harder.

Red Points’ Domain Monitoring & UDRP Enforcement supports the full cycle: detection, assessment, case preparation, filing, recovery, and ongoing monitoring.

Detect infringing and high-risk domains

Red Points scans 800M+ domains and monitors 25,000+ new registrations daily to surface domains that imitate a brand.

This includes:

• Typosquats
• Lookalike domains
• Parked domains
• Inactive domains
• Non-indexed domains
• Fake store domains
• Domains using brand terms with scam or sales language
• Newly registered domains that could be used later for phishing or impersonation

Assess the right enforcement route

Not every domain should go straight to UDRP.

Some domains need registrar intervention. Some need a host or search takedown. Some require a national dispute resolution process because the domain uses a country-code TLD. Others are better handled through UDRP because the goal is recovery.

Red Points helps assess the route based on the domain, use, risk, jurisdiction, and available evidence.

Support case preparation and filing

Red Points’ UDRP enforcement service includes 5 UDRP filings, with case preparation and filing support for domain recovery.

It also supports enforcement before national dispute resolution centers for country-specific domains and direct registrar interventions to disable or transfer domains where appropriate.

Red Points supports case preparation and filing through ICANN-accredited domain dispute processes and relevant national dispute resolution routes.

Monitor for repeat abuse

Cybersquatters often register new variants after one domain is recovered or disabled.

Red Points monitors for re-emerging threats, repeated patterns, and portfolio gaps, helping brands decide which domains to enforce, recover, register defensively, or monitor.

Red Points performs 5.1M+ enforcements per year for 1,300+ brand customers, with a 94–95% average success rate across enforcements.

Request a demo to see how Red Points can help recover infringing domains without managing every case manually.

Frequently asked questions about UDRP complaints