Short answer
Cybersquatting is registering someone else's trademark as a domain in bad faith. Typosquatting is a kind of cybersquatting that uses a deliberate misspelling, so users who mistype land on the fake. Both can be challenged under the UDRP. For a live phishing site, an abuse report to the registrar is faster.
Who this is for: Crypto teams deciding how to respond to a domain that copies their name.
Side by side
| Aspect | Cybersquatting | Typosquatting |
|---|---|---|
| What it is | "The pre-emptive registration of trademarks by third parties as domain names" (WIPO) | A cybersquat using "a common, obvious, or intentional misspelling" (WIPO) |
| Example | example.app registered by a stranger | exmaple.com |
| Typical use | Resale to the brand, ads, later phishing | Catching mistyped traffic, phishing |
| US law | The Anticybersquatting Consumer Protection Act covers registering, trafficking in or using a confusingly similar domain with "a bad faith intent to profit from that mark" | |
| Dispute route | UDRP: transfer or cancellation of the domain, no money | |
WIPO also treats internationalized and accented look-alikes as typosquatting, for example a dotless ı in place of an i. See homoglyph domains.
The UDRP test
Under the Uniform Domain-Name Dispute-Resolution Policy, a complainant must show all three:
- the domain is identical or confusingly similar to a trademark in which the complainant has rights;
- the registrant has no rights or legitimate interests in the domain;
- the domain was registered and is being used in bad faith.
WIPO has processed over 80,000 UDRP cases. A case for one to five domains costs from USD 1,500 and usually takes about two months.
Which remedy to use
| Situation | Fastest route |
|---|---|
| Live phishing or drainer page | Abuse report to the registrar and host (guide); usually days, free |
| Parked domain with your trademark | Monitor it; consider a UDRP case if you want the domain |
| Reported, suspended, then re-registered | UDRP transfer, so the name is yours for good |
| You need damages | A court case, for example under the ACPA; talk to a lawyer |
Sources
- WIPO: domain name dispute FAQ
- WIPO Overview of UDRP decisions
- 15 U.S.C. 1125 (ACPA)
- WIPO: guide to the UDRP
Frequently asked questions
Do I need a registered trademark to use the UDRP?
The UDRP requires rights in a trademark. WIPO's overview also recognises unregistered marks in some cases, but a registration makes the case much simpler.
Can I get money from a cybersquatter through the UDRP?
No. The UDRP can only transfer or cancel the domain. Damages need a court case, for example under the US ACPA.