Cybersquatting is the abusive registration, maintenance, or use of a domain name in violation of the rights or reputation of another person or business. The term is often associated with names identical or similar to trademarks, trade names, or well-known identities, with the intent to profit, confuse users, or prevent the rightful owner from using the name. However, mere similarity does not always prove cybersquatting; context, existing rights, actual use, and good or bad faith may be decisive. For example, a domain registered before a trademark was established raises different issues than one registered specifically to exploit an already consolidated reputation.
Examples of cybersquatting can include a page mimicking an official website, a fake login screen, ads intercepting trademark searches, or a sale offer directed at the trademark owner. Other domains are registered to criticize an organization, describe a topic, or create an independent project. These scenarios are not automatically equivalent and may involve freedom of expression, descriptive use, or commercial disputes. Passive registration of a domain can also be evaluated in broader context, but lack of content alone does not prove abusive intent. It is incorrect to assume a violation merely because the name is for sale at a high price.
How to Document a Case
A holder who believes they are victims of cybersquatting should gather verifiable evidence: the exact domain, dates, page content, screenshots, any redirects, sales messages, and the rights being claimed. Registrar details, nameservers, and publicly available registration data should also be recorded, noting that such information may be obscured or outdated. Documentation must distinguish observed facts from interpretations. Unauthorized access, threats, or attempts to steal accounts should be avoided: investigations and protections must proceed through legal means.
For certain generic domains, the UDRP (Uniform Domain-Name Dispute-Resolution Policy) is available, an administrative procedure for disputes meeting specific criteria. Generally, the complainant must prove trademark rights, relevant similarity with the domain, absence of legitimate interests by the registrant, and registration and use in bad faith per the applicable policy. Some ccTLDs have adopted UDRP or similar rules; others provide different procedures. The outcome is not automatic, and the process does not equate to a criminal judgment. Depending on circumstances, negotiation channels, registrar complaints, or judicial actions may also be available.
Prevention and Response
Businesses can reduce risk by maintaining an updated domain inventory, securing accounts and contact details, renewing strategic names, and monitoring relevant variations. Defensive registration should be weighed against costs and priorities: acquiring every theoretically possible combination is often inefficient and creates renewal obligations. Publishing official channels and explaining how to identify authentic communications helps customers. If a domain hosts phishing or malware, the priority may be warning users and security providers, along with evaluating trademark remedies. Every response must be proportional and evidence-based, as unfounded claims can harm reputation and others’ rights.
Those purchasing an already registered domain should verify trademarks, historical use, and ownership. A generic or descriptive name may legitimately be held by different parties; conversely, a market-available domain may pose risks if it exploits another’s trademark. Legal evaluation depends on jurisdiction and circumstances, so general definitions do not replace legal advice. In summary, cybersquatting describes abusive use of the domain system in relation to others’ rights or identity, but qualification requires analysis of facts and applicable rules.
← Full glossary