Reverse domain name hijacking is the term the UDRP (Uniform Domain-Name Dispute-Resolution Policy) uses for a trademark owner who files a cybersquatting complaint in bad faith against someone who legitimately owns the domain name. The UDRP Rules define it as “using the Policy in bad faith to attempt to deprive a registered domain-name holder of a domain name.” In plain terms, it is an attempt to take through the dispute process a domain name the complainant could not buy and had no right to claim.
We handle both sides of this problem at DNAccess, defending registrants hit with abusive complaints and advising brand owners on when a complaint will backfire.
Reverse domain name hijacking is not domain hijacking
The name causes constant confusion. Domain hijacking is theft. Someone gains unauthorized control of a domain name, usually by compromising a registrar account, and moves it away from the rightful owner. It is a crime, it happens outside any legal process, and recovery runs through registrar escalation and ICANN’s transfer policies, as our domain hijacking hub explains.
Reverse domain name hijacking, usually abbreviated RDNH, is the opposite situation. Nothing is stolen. The domain holder registered the name properly and still controls it. Instead, a trademark owner tries to use a legitimate procedure, the UDRP, to force a transfer the facts do not support. The word “hijacking” was borrowed because the effect on the registrant would be the same, and the word “reverse” signals that the roles are flipped from the usual cybersquatting case, where a registrant has targeted a brand. In an RDNH case, the brand has targeted a registrant.
How often panels find reverse domain name hijacking
An RDNH finding is uncommon but not rare. ICANN’s status report covering UDRP cases from January 2013 through December 2020 counted 38,349 complaints across all providers, and panels made reverse domain name hijacking findings involving 917 complainants, about 2 percent of all cases, with 2018 a record year, according to the ICANN GNSO revised UDRP status report. The same report found that complainants obtained the domain in about 78 percent of cases, so roughly one case in five ends with the registrant keeping the name.
The WIPO-ICA UDRP Review Project Team reported that some 7,000 cases at WIPO have been dismissed in favor of the registrant, and that in roughly 500 cases panels admonished counsel for abuse of process, according to the team’s initial report of April 2025. Most complaints succeed because most are filed against genuine cybersquatters; a smaller group fail so badly that the panel says so on the record.
What panels look for before declaring RDNH
A panel does not declare reverse domain name hijacking simply because the complainant lost. The complainant must have brought the case in bad faith, and the common thread is that it knew, or should have known when it filed, that it could not prove one of the three UDRP elements: that the domain is identical or confusingly similar to its mark, that the registrant has no rights or legitimate interests in the name, and that the name was both registered and used in bad faith.
The domain predates the trademark
This is the most frequent basis for an RDNH finding. The UDRP requires bad faith at the time of registration. If the domain was registered before the complainant’s trademark rights existed, the registrant could not have targeted a mark that did not yet exist. A complainant that files anyway, with a registration date it could have checked in minutes, is treated as having known its case was hopeless. WHOIS history, the archived record of a domain’s past registration data, settles this question, and panels expect complainants to have consulted it.
Filing after failed purchase negotiations
Panels call this a “Plan B” complaint. The brand owner tries to buy the domain, finds the asking price higher than it wants to pay, and files a complaint as a cheaper way to obtain the same name. When the correspondence shows that the complainant treated the registrant as a legitimate seller right up until the price was refused, the panel reads the complaint as an attempt to acquire the domain through the process, which is exactly the bad faith use of the Policy the Rules describe.
Misrepresented or omitted facts
A complainant that leaves out the purchase correspondence, overstates the age or scope of its trademark, or describes a generic word as though it were a coined brand is inviting an RDNH finding. Representation by counsel makes this worse, because panels hold lawyers to a higher standard of candor. Complaints built on a pending trademark application or a dictionary word the complainant could never monopolize fall into the same category.
What an RDNH finding costs the complainant
The direct cost is nothing. The UDRP has no fines, no fee-shifting and no damages. The panel declares that the complaint was brought in bad faith and constitutes an abuse of the administrative proceeding, and the decision is published.
The indirect costs are more serious. UDRP decisions are public and permanently searchable, so an RDNH finding attaches to the company’s name and to its counsel’s name indefinitely. Future panels cite it when the same complainant or firm appears again, and opposing counsel will raise it.
The more consequential exposure is in court. The Anticybersquatting Consumer Protection Act (ACPA), the US federal cybersquatting statute, contains a reverse domain name hijacking provision of its own that allows a domain registrant to sue for a declaration that its registration is lawful and, in appropriate cases, for damages and attorney fees. A registrant who has just won an RDNH finding has a documented record of bad faith to put before a federal judge, and we have seen brand owners settle on unfavorable terms to make such a claim go away.
How a registrant defends against an abusive complaint
The first rule is to respond. A UDRP complaint is decided on the written record, and a registrant who ignores it hands the panel only the complainant’s version of events. Default decisions usually go to the complainant, however weak the claim.
The response should prove a legitimate interest in the domain as directly as possible: that the name is a dictionary word or common phrase used in its ordinary sense, that it matches the registrant’s own business or personal name, that it was acquired as part of a bona fide domain investment portfolio, or that it has carried a working website for years. Then document the registration date with primary evidence, including the original receipt, archived WHOIS records and Internet Archive captures, and place that date beside the earliest date on which the complainant can claim trademark rights. If the domain came first, make that the center of the response.
Include any purchase correspondence the complainant omitted and explain what it shows about the complainant’s state of mind. Finally, ask for the finding. Panels can declare reverse domain name hijacking on their own motion, but they do so far more readily when the respondent requests it explicitly and sets out the grounds.
How a brand owner avoids an RDNH finding
Brand owners file abusive complaints far more often through carelessness than malice. The remedy is a short list of checks before filing a UDRP complaint.
- Check when the domain was registered and when it last changed hands, and compare that against the date your trademark rights began, because a domain that predates your mark cannot have been registered in bad faith.
- Investigate how the registrant has used the name over its full history, since years of legitimate descriptive use will defeat the second and third elements of the Policy.
- If you have tried to buy the domain and been refused, make a fair offer or walk away, and never file a complaint to pressure the negotiation, because panels read the correspondence.
- Disclose the inconvenient facts yourself, since a panel that finds them in the response will hold the omission against you.
The UDRP exists to remedy cybersquatting, meaning a registrant who targeted your mark. It does not exist to transfer a domain name that someone else legitimately registered first and declines to sell at the price you prefer.
What DNAccess does on reverse domain name hijacking
We prepare and defend UDRP matters from both sides, and our domain background research is often the deciding evidence. For registrants, we assemble the registration history, archived WHOIS data and use records that prove a legitimate interest, and we draft responses that ask for an RDNH finding where the facts warrant one. For brand owners, we assess a domain’s history before a complaint is filed so the decision to proceed, negotiate or walk away rests on evidence. Where a domain has in fact been stolen rather than disputed, our stolen domain name recovery service handles the registrar escalation that theft requires. If you have received a UDRP complaint, or are weighing whether to file one, contact us and we will tell you where the case stands.