A UDRP complaint is the document that starts a proceeding under the UDRP (Uniform Domain-Name Dispute-Resolution Policy), the ICANN procedure for taking a domain name away from a cybersquatter without a lawsuit. It is also, in most cases, the only submission the complainant gets to make. There is no discovery, no hearing and usually no reply, so the complaint has to carry the whole case. For the policy itself, its elements and its limits, start with our complete guide to the UDRP.
Confirm that you have a trademark right
The first element of the policy requires a trademark in which the complainant has rights, and the complaint cannot proceed without one. A registered trademark is the simplest proof: the certificate, from any national or regional trademark office, is annexed to the complaint and the panel will normally accept it. If the registration is held by a subsidiary or licensee, include the document that connects the mark to the complainant.
Unregistered rights can also satisfy the first element. In the United States these are called common-law trademark rights, and they arise from use of a name in commerce rather than from a government filing. To prove them, the complainant has to show that the name has acquired secondary meaning, which is to say that the relevant public associates the name with the complainant’s goods or services. The evidence that establishes this is concrete and dated: the length of time the name has been in use, sales and customer numbers under the name, advertising spend and examples, press coverage, and social media following. The panel wants to see that the name functioned as a brand, and when it started doing so, because the date matters for the third element as well. Our post on how to trademark a domain name explains how to register the mark before the next dispute.
Choose a provider
ICANN has approved five dispute resolution providers, and the complainant picks one. The WIPO Arbitration and Mediation Center and Forum (formerly the National Arbitration Forum) handle most of the world’s cases; the Czech Arbitration Court, the CIIDRC in Canada and the ADNDRC in Asia handle the rest. WIPO received 6,282 UDRP-based complaints in 2025, the most it has ever recorded, according to the WIPO Secretariat’s report to the Standing Committee on the Law of Trademarks. Each provider applies the same policy and UDRP Rules but has its own supplemental rules, fee schedule, word limits and filing platform, so read the supplemental rules before drafting. Panelists everywhere draw on the WIPO Overview 3.0, the consensus digest of panel views, and a complaint that cites its relevant sections shows the panel that the complainant understands the standard it has to meet.
What the complaint must contain
The UDRP Rules specify the contents of a complaint, and the providers publish model complaints that follow that structure. The complaint identifies the complainant and its authorized representative, with contact details. It identifies the respondent. Since WHOIS (the public registration record for a domain name) redaction became the norm, the public record often shows only a privacy service or a redacted name, so the complainant names the respondent as the record shows, the provider obtains the underlying registrant details from the registrar during verification, and the complainant then amends the complaint with the real name. It identifies the domain name or names in dispute and the registrar of each.
The heart of the complaint is the section on the three elements. Under the first, the complainant describes its trademark and explains why the domain name is identical or confusingly similar to it. Under the second, it sets out why the respondent has no rights or legitimate interests, addressing each circumstance in paragraph 4(c) of the policy and showing that none applies. Under the third, it explains why the domain was registered and is being used in bad faith, pointing to the circumstances in paragraph 4(b) that fit the facts. The complaint then states the remedy sought, almost always transfer rather than cancellation, and elects the mutual jurisdiction, meaning the court where the complainant agrees to be sued if the respondent challenges the decision: either the location of the registrar’s principal office or the registrant’s address in the registration record. It closes with a certification that it is complete and accurate and not presented for an improper purpose.
Annexes carry the proof. At a minimum they include the current registration record, the trademark certificate or the common-law evidence described above, dated screenshots of the website at the disputed domain, and archived copies of earlier versions from the Wayback Machine. Where they exist, add historical WHOIS records showing when the current registrant acquired the domain, any correspondence in which the respondent offered the domain for sale, evidence of pay-per-click advertising or phishing on the site, and a list of other domains held by the same respondent that match other people’s trademarks, which establishes a pattern.
Word limits apply to the argument, not the annexes. WIPO’s supplemental rules cap the length of the substantive section, and Forum applies a comparable limit. A complaint that states each element in a few tight paragraphs and lets the annexes do the work reads better to a busy panelist than one that repeats itself.
Fees and panel size
Provider fees depend on the number of domain names in the complaint and on whether the complainant asks for a single panelist or a three-member panel. A single-member panel is less expensive and is the usual choice in a clear case. A three-member panel costs more and takes longer to appoint, but in a genuinely contested case it can be worth the premium. If the complainant chooses a single panelist and the respondent elects three, the fee is split. The provider fee is a fraction of the real cost once counsel and evidence preparation are added. INTA members reported that UDRP proceedings cost an average of USD 46,152 and a median of USD 9,500 per matter in 2015 and 2016, according to the INTA New gTLD Cost Impact Survey; that figure came from only nine responses, so treat it as indicative rather than as a benchmark.
What happens after filing
Once the complaint is submitted and the fee is paid, the provider sends a verification request to the registrar. The registrar confirms the registrant’s identity and contact details and locks the domain so that it cannot be transferred to another registrar or holder while the case is pending. The lock is what stops a cybersquatter from moving the domain out of reach once a complaint arrives. The provider then reviews the complaint for compliance with the Rules; if it finds a deficiency, the complainant gets a short window to fix it. When the complaint passes, the provider formally notifies the respondent, and the proceeding commences on that date.
The respondent has 20 days from commencement to file a response. Many never do. In a default case the panel does not automatically rule for the complainant; it still has to be satisfied that all three elements are met, which is why the annexes matter even with no one on the other side. After the response deadline, the provider appoints the panel, which has 14 days to issue its decision. ICANN’s status report for 2013 through 2020 found that complainants obtained the disputed domain name in about 78 percent of cases across all providers, with Forum cases averaging 32 days from commencement to decision, according to the ICANN GNSO’s revised UDRP Status Report. Our page on the UDRP process covers each stage in more detail.
Mistakes that lose otherwise strong cases
The cases that fail are usually ones where the complainant assumed that a strong trademark would carry the third element on its own. The most common error is offering no evidence of bad faith at the time of registration. A complaint that shows the domain is parked or for sale today, but says nothing about what the respondent knew when it acquired the name, gives the panel no basis to find bad-faith registration. Closely related is the domain that is older than the mark. If the respondent registered the name before the complainant’s trademark rights arose, it could not have targeted a mark that did not exist, and the complaint fails no matter how the domain is used today. Check the registration history before filing; the relevant date is when the current registrant acquired the domain, which may be much later than the creation date.
A third error is the absence of evidence of use. The policy requires bad-faith use as well as bad-faith registration, and while panels accept that passive holding can be bad-faith use in the right circumstances, the complainant has to show those circumstances. A fourth is over-reliance on the mark itself. Explaining how famous the trademark is does not address whether this respondent has a legitimate interest, and a complaint that skips the second element invites the panel to find it unproven. The fifth is filing against a legitimate reseller or a business that happens to share a name, where the respondent can show a bona fide offering of goods or services; those complaints lose and risk a finding of reverse domain name hijacking, which panels made in about 2 percent of cases, according to the same ICANN status report. For the kinds of conduct that do satisfy the elements, see our explainer on cybersquatting.
After the decision
If the panel orders transfer, the registrar waits ten business days before implementing it. That window lets the respondent file a lawsuit in the mutual jurisdiction elected in the complaint; if the registrar receives documentation of such a filing in time, it holds the domain until the court resolves the matter. If no lawsuit arrives, the registrar transfers the domain to the complainant, who should then move it into a secured registrar account. If the panel denies the complaint, the complainant can still sue, in the United States under the Anticybersquatting Consumer Protection Act (ACPA), because a UDRP decision does not bind a court. The court route offers damages the UDRP cannot, and our comparison of the UDRP, the URS and the ACPA explains when it makes sense.
How DNAccess prepares UDRP complaints
We file UDRP complaints in stolen-domain recoveries where the domain is also a brand and the registrar route has stalled, and we prepare the evidentiary record for complaints that counsel files: the forensic registration history that fixes the date the respondent acquired the domain, the archived website captures that show how it has been used, and the documentation of secondary meaning for a common-law mark. Our stolen domain name recovery service covers the UDRP alongside registrar escalation and litigation, and you can contact us to find out which route fits your facts.