ACPA Explained: The Anticybersquatting Consumer Protection Act, Its Elements and Remedies, and What It Means for a Domain Buyer

What is the Anticybersquatting Consumer Protection Act?

The Anticybersquatting Consumer Protection Act is a 1999 United States federal statute, codified at 15 U.S.C. section 1125(d), that amends the Lanham Act to give trademark owners a civil cause of action against anyone who registers, traffics in, or uses a domain name with a bad-faith intent to profit from a distinctive or famous mark.

Congress passed the Act as part of the larger Intellectual Property and Communications Omnibus Reform Act of 1999, Public Law 106-113. It originated as Senate bill S. 1255, introduced by Senator Orrin Hatch, and folded a targeted anti-cybersquatting remedy into the existing federal trademark framework instead of creating a standalone statute.

The plain-English definition of the ACPA

Before the Act, a trademark owner who found a squatter sitting on a domain version of its brand had to stretch general trademark-infringement and dilution law to fit a problem those doctrines were never written for. The ACPA created a direct cause of action aimed at the squatting conduct itself: registering or dealing in a domain that mirrors a protected mark, for the purpose of profiting from it.

Where the ACPA sits in trademark law

The Act lives inside the Lanham Act, the foundational United States federal trademark statute. Section 1125 of Title 15 already covered false designations of origin and trademark dilution. The ACPA added subsection (d) to that section, slotting domain-name abuse alongside the older unfair-competition tools instead of replacing them. A trademark owner can plead an ACPA count next to traditional infringement and dilution counts in one complaint.

The problem the ACPA was built to solve

The ACPA targets cybersquatting: registering a domain that matches a trademark in order to ransom it back to the brand or to profit from confused traffic. Typosquatting and certain forms of domaining fall inside the same conduct. The scale of the problem remains large, with the World Intellectual Property Organization recording a record 6,192 domain-dispute cases in 2023.

Cybersquatting, typosquatting, and domaining defined

The conduct the Act addresses splits into related practices. The Jackson Walker analysis “Ten Years Under the ACPA” draws the lines cleanly, and the distinctions still hold.

How large the problem still is

Domain disputes have not faded with the early web. The World Intellectual Property Organization, which administers the international Uniform Domain-Name Dispute-Resolution Policy, reported that trademark owners filed 6,192 cases in 2023, a record that ran over 7 percent above 2022 and brought the cumulative total to 67,625 cases since 1999. The .com extension accounted for 80 percent of that 2023 caseload. The 2024 figure of 6,168 cases held near the same record level.

Those numbers describe the administrative route, not federal litigation, yet they map the same underlying conduct the ACPA was written to reach. The volume is the reason both a brand-side remedy and a buyer-side diligence habit still matter.

The elements of an ACPA claim

To win an ACPA claim a trademark owner has to establish three things: the mark was distinctive or famous when the domain was registered, the domain is identical or confusingly similar to that mark, and the registrant acted with a bad-faith intent to profit. A fourth gate is the absence of any valid safe harbor.

The three core elements

The Internet Library of Law sets out the standard a plaintiff carries. A trademark owner has to prove that the mark is distinctive or famous and therefore protectable, that the defendant’s domain name is identical or confusingly similar to the mark, and that the defendant registered, trafficked in, or used the domain in bad faith with the objective of profiting from it.

Register, traffic in, or use

The Act reaches three distinct acts. Registering the domain is the obvious one. Trafficking in it, which covers selling, buying, or otherwise transferring it for consideration, is the second, and it is the act that pulls a later purchaser into the statute. Using the domain is the third. A defendant can be liable on any one of the three, which is why a clean transfer history matters as much as a clean registration.

The nine bad-faith-intent factors

The ACPA lists nine non-exhaustive factors a court weighs to decide whether a registrant acted with bad-faith intent to profit. The first four point toward good faith, the next four point toward bad faith, and the last addresses the strength of the mark. No single factor is decisive; the court reads them together.

These factors are the analytical heart of the Act, codified at 15 U.S.C. section 1125(d)(1)(B)(i). They are guideposts, not a closed checklist, and a court is free to weigh other facts. The table below groups them by the direction they point.

The safe harbor inside the factors

The factor list carries its own brake. The statute states that bad-faith intent shall not be found where the court determines the registrant believed, and had reasonable grounds to believe, that the use of the domain was a fair use or otherwise lawful. This reasonable-belief provision is the registrant’s principal defense, and the defenses section returns to how narrowly courts apply it.

How an ACPA violation is proven, step by step

Proving an ACPA violation follows a defined sequence: confirm a protectable mark, map the domain against the mark, assemble the bad-faith evidence across the nine factors, rule out a safe harbor, then choose the forum and the remedy. Each step builds the record the court reviews.

The sequence below tracks how a trademark owner, or the lawyer advising one, builds an ACPA case. It also doubles as a map of where a careful domain buyer wants to land on the safe side of each gate.

Remedies and statutory damages under the ACPA

A successful ACPA plaintiff can recover transfer, forfeiture, or cancellation of the domain, plus actual damages and profits or, by election, statutory damages of not less than 1,000 and not more than 100,000 US dollars per domain name under 15 U.S.C. section 1117(d). Attorney fees are available in exceptional cases. In rem relief is limited to the domain itself.

Statutory damages: the headline number

The remedy that sets the ACPA apart from the administrative route is money. Under 15 U.S.C. section 1117(d), a plaintiff in a 1125(d)(1) case can elect, at any point before final judgment, to recover statutory damages instead of actual damages and profits, in an amount of not less than 1,000 and not more than 100,000 US dollars per domain name, as the court considers just. The election spares the plaintiff the difficult task of proving exact losses.

Courts have used the full band. A Lexology analysis of reported decisions found that 11 of 32 cases awarded the maximum 100,000 US dollars per domain name, and three of those awarded the maximum for multiple names at once, so the ceiling is real and not theoretical.

The full remedy menu

In rem actions against the domain

Cybersquatters frequently sit beyond the reach of a US court, registered abroad or behind false data. The ACPA answers this with an in rem provision at 15 U.S.C. section 1125(d)(2), which lets a trademark owner sue the domain name itself in the judicial district where the domain registrar or registry is located, after due diligence to locate the registrant fails.

Safe harbors and reverse domain name hijacking

The ACPA’s main defense is the reasonable-belief safe harbor: bad faith is not found where a registrant believed, on reasonable grounds, the use was fair or lawful. First Amendment and fair-use protections also apply. The Act separately discourages overreach by trademark owners, the conduct known as reverse domain name hijacking.

The reasonable-belief safe harbor

The statute builds the defense into the bad-faith test itself. A court is barred from finding bad-faith intent where the registrant believed, and had reasonable grounds to believe, that using the domain was a fair use or otherwise lawful. Commentators note that courts apply this carve-out narrowly, reserving it for the genuinely unusual case, not a convenient after-the-fact story.

Fair use and the First Amendment

The ACPA does not override legitimate expression. As the doctrinal summaries put it, the Act does not prevent the fair use of trademarks or any use protected by the First Amendment. Criticism sites, commentary, and noncommercial speech that happen to use a mark sit on different footing from a name registered to ransom or to divert traffic, a line the gripe-site cases below draw directly.

Reverse domain name hijacking

The Act also recognises that the power can be abused in the other direction. Reverse domain name hijacking describes a trademark owner using a cybersquatting claim in bad faith to wrest a legitimately held domain from its rightful owner. The ACPA provides that a registrant whose name is suspended, disabled, or transferred on a knowing and material misrepresentation can recover the domain and obtain relief, including costs and fees, giving the honest holder a counter to an aggressive claimant.

ACPA versus the UDRP: when each applies

The ACPA is federal litigation; the UDRP is a private administrative arbitration built into every domain registration. The UDRP is faster and cheaper but delivers only transfer or cancellation, while the ACPA is slower and costlier yet can award statutory damages, actual damages, and attorney fees, and can reach a domain in rem.

A trademark owner facing a squatter has two main routes, and they are not mutually exclusive. The Uniform Domain-Name Dispute-Resolution Policy is a contractual arbitration that every registrant agrees to at registration. The ACPA is a federal court action. The Fenwick comparison frames the choice as a question of speed and cost versus reach and money.

The deeper comparison of the two routes, including how a federal court can reverse a UDRP decision, is covered in the dedicated UDRP versus ACPA guide in this Cybersquatting Law pillar.

Landmark ACPA cases that shaped the law

A line of federal cases defines how courts read the Act. Panavision v. Toeppen set the early template for squatting liability, PETA v. Doughney and Coca-Cola v. Purdy established bad faith from portfolio squatting, the gripe-site cases protected genuine criticism, and Petroliam v. GoDaddy limited registrar exposure.

What the case line teaches a buyer

Read together, the decisions point one way for a domain purchaser. Liability clusters around confusable names tied to famous marks, resale offers aimed at the brand, false registration data, and stacks of look-alike domains. A single generic or descriptive name, acquired openly for a real use, sits far from that pattern. The cases reward exactly the diligence the closing section sets out.

ACPA for domain buyers: the due-diligence checklist

Because the ACPA reaches anyone who traffics in a confusable domain, a buyer inherits trademark risk along with a name. The defense is pre-purchase diligence: screen the name against live trademarks, read the registration and use history, and source from a marketplace that has already done this screening. SEO Domains operates that curated catalogue of aged and expired domains.

Why the buyer carries risk too

The element that matters here is trafficking. The Act applies to a person who registers, traffics in, or uses an offending domain, so buying and reselling a name that targets a mark is itself within the statute. An investor acquiring an aged domain with a hidden history of brand abuse does not get a clean slate by virtue of being the second owner. The earned authority of a genuine aged domain is a real asset; a name that shadows a trademark is a liability that travels with the registration.

The pre-purchase ACPA checklist

The nine bad-faith factors translate directly into a buyer’s screen. Each factor a plaintiff would use against a squatter is a question a buyer answers before acquiring. The table maps the legal signal to the practical check.

Where clean sourcing starts

Running every check by hand on a raw drop list is the slow path. The faster one is to start from inventory that has already been screened. SEO Domains operates the curated marketplace where aged and expired domains are vetted across their backlink profiles, ownership history, and trademark exposure before they are listed and priced, so a buyer sourcing a name for a real site, a redirect, or white-hat link building begins from a vetted shortlist instead of an unverified drop. Browse the screened catalogue on the SEO Domains marketplace to filter for clean, non-confusable names.