How to File a UDRP Complaint Against a Fake Domain
Someone has registered a domain that looks almost exactly like yours. It might be a typosquatted URL running a phishing page, a fake store intercepting your customers, or a parked domain redirecting your branded traffic elsewhere.
Contacting the registrar rarely works. Litigation is slow and expensive. That is where the Uniform Domain-Name Dispute-Resolution Policy (UDRP) comes in: an arbitration process specifically designed for trademark-based domain abuse. This guide covers what UDRP is, when it applies, how to file, and where Remove.tech's brand protection platform fits in.
What Is a UDRP Complaint?
UDRP stands for Uniform Domain-Name Dispute-Resolution Policy. It is the standard arbitration process that governs trademark-based domain disputes across all ICANN-accredited registrars worldwide, regardless of where the fake domain was registered.
The process is administered by approved dispute-resolution providers, not ICANN directly. The most widely used are WIPO and the Forum (formerly NAF). A panel of one or three arbitrators reviews the complaint and issues a binding decision. The outcome is either transfer of the domain to you or cancellation of the registration.
UDRP is faster and cheaper than litigation, but slower than platform reporting or DMCA notices. Remove.tech's enforcement guide positions it as tier five of six enforcement routes. Use it when simpler options have failed.
When Does UDRP Apply?
UDRP is specifically designed for abusive domain registrations, not every domain dispute. Before filing, you need to confirm that your case meets the three criteria that a UDRP panel will evaluate.
The Three-Part Test
To win a UDRP complaint, you must prove all three of the following:
1. The domain is identical or confusingly similar to your trademark. This means you need a registered trademark, or at minimum a trademark in which you have established rights. The domain does not need to be a perfect copy. Typosquatted versions, domains with added words like "official" or "shop," and homoglyph variations all qualify if the overall impression is confusingly similar to your mark.
2. The registrant has no legitimate rights or interests in the domain. A bad actor running a phishing page using your brand name has no legitimate claim to it. A genuine fan site or a business with a pre-existing registration that predates your trademark is a different matter. The panel weighs this carefully.
3. The domain was registered and is being used in bad faith. Evidence of bad faith includes using the domain to divert customers, running phishing operations, offering to sell the domain back to you at an inflated price, or impersonating your brand to deceive consumers.
When UDRP Is the Right Tool
- A domain closely mimics your brand name and is running a fake store or phishing page
- The registrar has ignored or rejected informal abuse reports
- The domain is being used to intercept your customers or redirect your branded traffic
- You have a registered trademark and documented evidence of bad faith
When UDRP Is Not the Right Tool
- The domain has a plausible non-infringing use (parody, fan site, legitimate business)
- Your trademark rights are unclear or unregistered
- The core issue is stolen product imagery or copied content, which is a copyright matter better addressed through DMCA notices
- You have not yet tried simpler routes such as registrar abuse reports
What Evidence to Collect Before You File
A weak complaint wastes the filing fee and your time. Collect this before you draft anything.
- Your registered trademark certificate, including the registration number and jurisdiction
- WHOIS data showing the current registrant details
- Screenshots of the domain in active use, with the full URL visible and timestamps
- Screenshots showing impersonation, a fake store, or data collection in your brand's name
- Any communication where the registrant offered to sell the domain back to you
- Records of abuse reports filed with the registrar and their outcomes
Remove.tech's brand protection platform monitors domain registrars continuously and captures timestamped screenshots automatically, giving you a documented evidence trail before you file.
How to File a UDRP Complaint: Step by Step
The process follows a defined sequence under ICANN's UDRP Rules. Here is how it works in practice.
Step 1: Choose an Approved Provider
You file with an ICANN-approved dispute-resolution provider, not with ICANN itself. Each provider has its own supplemental rules, fee structure, and filing portal. WIPO and the Forum are the most commonly used. Review each provider's supplemental rules before choosing, as fees and procedural details differ.
Step 2: Draft the Complaint
Your complaint must include, per ICANN's rules:
- A request that the complaint be decided under the UDRP
- Your full contact details and those of any authorised representative
- The domain name or names at issue
- The registrar with whom the domain is currently registered
- The grounds for the complaint, addressing all three elements of the three-part test
- Your preferred panel size: single-member or three-member
- If you choose a three-member panel, the names of three candidate panellists from the provider's approved list
Missing any of these elements is the most common reason complaints are rejected at the administrative compliance stage.
Step 3: Submit and Pay the Filing Fee
Complaints are submitted electronically. Once the provider receives the complaint and the filing fee, it sends the complaint to the respondent and notifies the registrar, which is then required to lock the domain within two business days.
Step 4: The Respondent Has 20 Days to Reply
The respondent may submit a response within 20 days of the commencement of proceedings. They can also request a four-day extension, which is automatically granted. If no response is filed, the panel proceeds on the basis of the complaint alone.
Step 5: The Panel Issues a Decision
In the absence of exceptional circumstances, the panel issues its decision within 14 days of being appointed. The provider then communicates the decision to both parties, the registrar, and ICANN within three business days.
Step 6: Implementation
If the decision is in your favour, the registrar implements it within three business days of receiving it. That means the domain is either transferred to you or cancelled.
Important: There is a 10-business-day implementation window during which the respondent can file a court action to challenge the decision. If they do, the registrar holds the domain until the court proceeding resolves. This rarely happens in clear-cut cases, but it is worth knowing.
Where Remove.tech Fits Into Domain Enforcement
UDRP is the enforcement mechanism. Remove.tech is the detection and documentation layer that makes it viable.
Most brands that need a UDRP complaint discovered the fake domain too late, after customers were already deceived and the evidence was incomplete. Remove.tech's brand protection software monitors domain registrars continuously, scanning for newly registered domains that exploit your brand name, including typosquatted variations, appended words, and alternative TLD versions.
What this means in practice for UDRP:
- Earlier detection means more time to build a complete evidence record before filing
- Automated screenshot capture with timestamps provides the forensic documentation panels require
- Post-enforcement monitoring confirms the domain stays down and catches re-registrations
Not every suspicious domain warrants a UDRP complaint. Some resolve faster through a registrar abuse report. Others require UDRP because the registrar has already failed to act. Getting that triage right saves both time and filing fees.
If you are unsure what is currently out there using your brand name, Remove.tech offers a free brand audit covering domains, search engines, social platforms, and marketplaces.
FAQ
What is UDRP?
UDRP stands for Uniform Domain-Name Dispute-Resolution Policy. It is an ICANN arbitration process that allows trademark holders to challenge abusive domain registrations without going to court. A successful complaint results in the domain being transferred to you or cancelled.
Do I need a registered trademark to file?
A registered trademark is the clearest evidence, but panels can also consider unregistered marks where you can show established use and reputation. The stronger your documentation, the stronger your case.
How long does a UDRP complaint take?
Typically two to three months from filing to decision. The respondent has 20 days to reply, the panel has 14 days to decide, and the registrar has three business days to implement the outcome, subject to a 10-business-day window for a court challenge.
Can UDRP be used for any domain dispute?
No. It applies specifically to abusive registrations involving trademark rights. It is not designed for domain valuations, contractual disagreements, or domains with plausible non-infringing uses. A weak case wastes the filing fee.
What is the difference between UDRP and URS?
Both are ICANN-approved processes for trademark-based disputes. URS is faster and cheaper but only suspends the domain. UDRP takes longer but can result in full transfer. For phishing domains, UDRP is typically the better route.
How does Remove.tech support the UDRP process?
Remove.tech's brand protection platform monitors domain registrars continuously, captures timestamped screenshots and WHOIS data, and stores the forensic evidence panels require. Earlier detection means more time to build a strong case. The platform also monitors after enforcement to catch re-registrations.
What happens if I lose a UDRP complaint?
The domain stays with the current registrant. You can still pursue court action. Filing in bad faith can result in a finding of reverse domain name hijacking, which is rare in genuine cases but underscores the importance of only filing when the three-part test is clearly met.
Before you can file, you need to know what you are dealing with. Remove.tech's free brand audit scans domains, search engines, social platforms, and marketplaces for anything impersonating your brand. It takes minutes and gives you a clear picture of your exposure before you spend a penny on enforcement.
