Domain squatting means registering a web address. Registering web address that copies someone else’s trademark or brand. People usually resell it at a markup or quietly siphon off their traffic. It lives in a legal gray zone. A zone that trips up plenty of well-meaning buyers. This guide walks through what actually counts as squatting, when it crosses into illegal territory, and how it differs from legitimate investing.
If you buy and sell expired names for a living, this line matters more than most. Grab the wrong lapsed domain and a trademark owner gets grounds to take it back, sometimes with a bill attached.
What Domain Squatting Actually Covers
Domain squatting covers any registration of a domain that mirrors a protected trademark. It’s made in bad faith to profit from that brand’s reputation rather than to build something of your own.
The phrase gets tossed around loosely. So it helps to pin down what separates squatting from ordinary registration. A few markers travel together:
- The domain copies, or closely mimics, a trademark that already means something to the public.
- The registrant has no real link to that name. No product, no prior use, nothing behind it.
- The point is to cash in on the brand itself, whether through resale to the owner, ad clicks off borrowed traffic, or something shadier.
Volume tells the story. In 2024, trademark owners filed 6,168 cases. The cases with WIPO’s arbitration center, the second busiest year since the policy launched in 1999.
The Main Types of Domain Squatting
The common forms of domain squatting are cybersquatting, typosquatting, brandjacking, and grabbing a brand’s name. Of course in the moment it lapses.
Squatters work in a few recognizable ways. A rough example of each:
| Type | What the squatter does | A rough example |
| Cybersquatting | Registers a name identical to a known brand, then sits on it waiting for a buyout offer | bigbrand-store.com parked behind a “for sale” banner |
| Typosquatting | Banks on misspellings and fat-finger errors to catch stray visitors | gooogle-login.com quietly harvesting mistaken clicks |
| Brandjacking | Borrows a brand’s identity to impersonate it, often for phishing or invoice fraud | a fake “billing support” domain chasing bogus overdue payments |
| Expired-name squatting | Snatches a lapsed brand domain right after it drops. Betting the former owner still wants it | a well-known .ai name that lapsed in 2023, then scooped up by a stranger |
That last row is where aged domain investors get caught, since a dropped name can carry a brand’s ghost long after the company forgets to renew.
Is Domain Squatting Illegal
Domain squatting is not automatically illegal. It becomes unlawful only when a registration is made in bad faith to profit from a trademark. The trademark that the registrant has no right to use.
Owning a name that resembles a trademark is not a crime by itself. Panels and courts weigh intent, and the pivot phrase is bad faith. The signals that tip a registration from awkward into actionable:
- Offering to sell the name to the trademark owner at an high price.
- No genuine use behind it. Just a parking page or a redirect to somewhere unrelated.
- A visible pattern of hoarding many brand-adjacent names at once.
- Any attempt to confuse or divert the brand’s real customers.
The Anticybersquatting Consumer Protection Act in USA, passed in 1999, lets a court order statutory damages of $1,000 to $100,000 per domain name once bad faith is established. Where the line falls still depends on jurisdiction and facts. So treat this as a map of the terrain, not legal advice.
How Trademark Owners Fight Back
Brand owners challenge domain squatting through two main routes. First is by a UDRP complaint when they just want the name back fast. And by ACPA lawsuit when they also want money on the table.
Each path suits a different goal. One is quick, cheap, and only returns the domain; the other is slower and pricier, but can put cash behind the ruling.
| Route | Reach for it when you want | What it can deliver | Speed and cost |
| UDRP (run by WIPO and other providers) | The domain returned quickly, no courtroom required | Transfer or cancellation of the name, no monetary award | Weeks to a few months, low filing fee |
| ACPA lawsuit (US federal court) | Compensation, or when the squatter is anonymous or overseas | Transfer plus statutory damages of $1,000 to $100,000 per name | Slower and far pricier, though Facebook recovered $2.8 million this way in 2013 |
The odds favor the brand. WIPO panels ordered a transfer in over 95% of decided cases in late 2024, so seasoned squatters rarely defend a name once a solid complaint lands.
Domain Squatting vs Legitimate Aged Domain Investing
The line between domain squatting and legitimate aged domain investing comes down to a single question: does the name trade on someone else’s brand, or on its own independent, generic value?
This is the distinction that keeps honest investors out of trouble. A dropped name can look like a steal and still be radioactive if a trademark is buried inside it. Here is how the two pull apart in practice:
| Signal | Leans toward squatting | Leans toward legitimate investing |
| Where the value comes from | An existing brand’s reputation and goodwill | Generic keywords, a clean history, real backlink equity |
| The buyer’s actual intent | Ransom the trademark owner or ride their traffic | Build it out, flip it, or park it on the open aftermarket |
| Trademark overlap | Direct, or confusingly close | None, because the term is descriptive or dictionary-plain |
Appraisal is where this gets settled. For the ownership mechanics that kick in the second a name lapses, see who owns a domain after expiry. For the bigger strategic picture, our overview of aged domain investing lays out how professionals screen names before buying.
How to Keep Squatters Away From Your Own Brand
This to protect a brand from domain squatting. Register your core names. Then watch for lookalikes. And keep your trademark records current so any enforcement is quick.
Prevention will beats litigation greatly. A handful of habits do the heavy lifting:
- Lock down obvious variations early: common misspellings and the main alt extensions (.net, .org, .co).
- Set up monitoring so a copycat registration pings your team, not a confused customer.
- Register the trademark properly, since both UDRP and ACPA lean hard on that paper trail.
- Renew on time. Dull advice, admittedly, and also the exact gap most brands fall through.
A Quick Gut Check Before You Register a Lapsed Name
Before registering any lapsed name, ask whether it clearly points to a specific company. If it does, the safe call in domain squatting terms is to pass, whatever the metrics say.
Here is the part people forget. Even when you are in the right, a dispute drains your time. Pushing back against a nervous trademark owner can spiral into a reverse-hijacking fight. The safest names to hold stay boring on purpose. Because it’s generic enough that nobody can plausibly claim to own them.
FAQ
Can I get in trouble for buying an expired domain?
Sometimes, yes. Trouble starts when the lapsed name carries a live trademark. And you plan to profit off that association. A generic dictionary name with no brand attached rarely draws a complaint.
Is every domain that resembles a brand automatically squatting?
Not at all. Coincidental similarity. A legitimate business use, or a personal name that happens to match a mark can all be fine. What flips it into squatting is bad faith intent, not resemblance on its own.
How long does a UDRP case usually take?
Most run between a few weeks and a couple of months. That speed is a big reason owners favor it over a full lawsuit. Which can drag on for a year or more.
What separates a UDRP complaint from an ACPA lawsuit?
Money and venue. A UDRP proceeding only transfers or cancels the name. An ACPA case runs through US federal court and can add statutory damages. For Owners wanting compensation, or who cannot identify the squatter, reach for ACPA.
Does holding a trademark guarantee I win a dispute?
A registered mark helps enormously. But it does not seal the deal alone. You still have to show the registrant acted in bad faith and lacks legitimate interest. And overreaching can backfire as reverse domain name hijacking.
References
- WIPO Arbitration and Mediation Center, Domain Name Dispute Caseload and 2024 Report.
- ICANNWiki, Anti-Cybersquatting Consumer Protection Act.
- GigaLaw, Domain Dispute Digest Q4 2024.
