BUY WEBSITES
BUY DOMAINS
LOGIN
SIGNUP
UDRP vs ACPA: The Two Ways to Challenge a Domain Name, and What Each One Means for a Buyer
The UDRP and the ACPA are the two mechanisms a trademark owner uses to take a contested domain name away from whoever registered it. The UDRP is a fast, low-cost administrative process run by ICANN-approved providers such as WIPO. The ACPA is a United States federal lawsuit under the Lanham Act that can award money damages and order a transfer.
They differ on what they can deliver, what they cost, how long they take, who can use them, and the standard of proof. A trademark owner picks the UDRP for speed and a clean transfer, and the ACPA when damages, a court order, or a hard-to-reach registrant are in play.
This guide draws the comparison the legal explainers draw, and then adds the angle none of them cover: what UDRP and ACPA exposure means for the person buying an aged or expired domain. A clean name with no trademark collision is an asset. SEO Domains operates the marketplace where that screening happens before a domain is listed, so the diligence is built into the inventory instead of left to the buyer alone.
UDRP vs ACPA: the core difference at a glance
The UDRP is a private, contract-based arbitration that only moves a domain name, and the ACPA is a federal statute that can move the domain and award money. A trademark owner reaches for the UDRP first for speed and cost, and for the ACPA when damages, an in rem claim against an absent registrant, or a binding court order are needed.
Both exist to address the same problem: a domain name registered in bad faith to exploit someone else’s trademark. The difference is not the target. The difference is the forum, the remedy, and the stakes.
One is arbitration, the other is litigation
The UDRP, the Uniform Domain-Name Dispute-Resolution Policy, is a policy ICANN built into every registration agreement for generic top-level domains. Registering a .com binds the registrant to it. A dispute is decided by an appointed panelist on the documents, with no live hearing and no discovery.
The ACPA, the Anticybersquatting Consumer Protection Act, is a law. A claim is filed in a United States district court, follows the rules of federal civil procedure, and ends in a judgment a court can enforce. The two run on different tracks toward partly overlapping ends.
Why a buyer of domains should know both
The legal guides on this topic write for the trademark owner trying to recover a name. The person acquiring an aged or expired domain sits on the other side of the same line. A name that collides with a live trademark carries exposure to both mechanisms. A name with a clean history and no confusing similarity to a protected mark carries neither. Knowing the trigger for each is how an acquisition stays on the safe side, a point this guide returns to at the end.
What is the UDRP, and who runs it?
The UDRP is an administrative dispute policy ICANN adopted on 24 October 1999 and built into every generic top-level domain registration. A complaint is filed with an approved provider such as WIPO or the Forum, decided by an independent panelist, and the only available remedy is transfer or cancellation of the domain name.
The three elements a complainant must prove
Paragraph 4(a) of the policy sets out three elements, and a complainant carries all three by a preponderance of the evidence. WIPO publishes the policy text and the panel guidance that interpret it:
- The domain name is identical or confusingly similar to a trademark or service mark in which the complainant has rights.
- The registrant has no rights or legitimate interests in the domain name.
- The domain name was registered and is being used in bad faith.
The third element is the one that decides the bulk of contested cases, and its exact wording carries weight that the next section unpacks. The registrant is not required to pay anything unless a three-member panel is requested.
The providers, the cost, and the timeline
ICANN does not decide cases itself. It accredits providers who administer them. WIPO handles the largest share, and the Forum (formerly the National Arbitration Forum) is the other major United States provider, alongside the ADNDRC and the Czech CAC. A WIPO proceeding for one to five domain names costs US$1,500 with a single panelist and US$4,000 with a three-member panel, per the published WIPO fee schedule.
The process is documentary and quick. From filing to decision runs on the order of two months, and a transfer order is then carried out by the registrar. There is no appeal inside the UDRP. The only further step is a court action, which paragraph 4(k) of the policy expressly preserves.
| Feature | UDRP detail |
|---|---|
| Adopted | 24 October 1999 by ICANN |
| Forum | Approved providers: WIPO, the Forum, ADNDRC, CAC |
| Remedy | Transfer or cancellation of the domain name only |
| Money damages | None available |
| Cost (1 to 5 domains) | US$1,500 single panelist, US$4,000 three-member panel (WIPO) |
| Typical timeline | About two months from filing to decision |
| Proof standard | Three elements of paragraph 4(a), preponderance of the evidence |
| Appeal | None internally. Either party retains the right to court under 4(k) |
What is the ACPA, and what makes it different?
The ACPA is a United States federal statute enacted on 29 November 1999 as an amendment to the Lanham Act, codified at 15 U.S.C. 1125(d). It creates civil liability for the bad-faith registration, trafficking, or use of a domain name that is identical or confusingly similar to a distinctive or famous mark, and it can award statutory damages of US$1,000 to US$100,000 per domain name on top of a transfer.
The statute, the damages, and the nine factors
Where the UDRP is a private policy, the ACPA is law passed by Congress. It sits inside section 43 of the Lanham Act and gives a mark owner a cause of action in federal court. The Ninth Circuit model jury instructions, which courts use to charge juries on these claims, state the core requirements and the remedy.
Two features set it apart from the UDRP. First, a court can award statutory damages between US$1,000 and US$100,000 per domain name at its discretion, a remedy the UDRP cannot reach. Second, bad faith is assessed against nine non-exclusive statutory factors listed at 15 U.S.C. 1125(d)(1)(B), which a court weighs as a whole instead of ticking off one by one. The factors include the registrant’s own trademark rights in the name, whether the name is the registrant’s legal name, prior bona fide use, and the intent to divert consumers or to sell the name for profit.
The in rem action against the domain itself
The ACPA carries a reach the UDRP shares in spirit but the statute makes explicit. Under 15 U.S.C. 1125(d)(2), where the registrant cannot be found or is beyond the court’s personal jurisdiction, a mark owner can bring an in rem action against the domain name itself in the district where the registrar or registry sits. The defendant is the name, not a person.
That tool matters when a squatter hides behind privacy services or sits abroad. The trade-off is that an in rem action recovers the domain but cannot reach a foreign registrant for money. WIPO and ICANN guidance treat this cross-border gap as one reason the UDRP exists alongside the statute instead of being replaced by it.
UDRP vs ACPA, side by side: remedies, cost, speed, jurisdiction
The two mechanisms diverge on every practical axis. The UDRP is cheaper, faster, global in reach, and limited to moving the domain. The ACPA is slower, costlier, bounded by United States jurisdiction, and able to award damages and a binding judgment. The master table below sets them against each other on the points a real decision turns on.
| Dimension | UDRP | ACPA |
|---|---|---|
| Nature | Administrative policy, contract-based | Federal statute, 15 U.S.C. 1125(d) |
| Forum | ICANN-approved provider (WIPO, the Forum) | United States district court |
| Remedy | Transfer or cancellation only | Transfer, plus damages and attorney fees |
| Money damages | None | Statutory US$1,000 to US$100,000 per domain, or actual damages |
| Cost | US$1,500 single panelist (1 to 5 domains) | Litigation budget, frequently five to six figures |
| Timeline | About two months | Months to years |
| Reach | Global, any gTLD registrant | United States ties, plus in rem against the domain |
| Proof | Three elements, registered and used in bad faith | Bad-faith intent against nine statutory factors |
| Finality | No internal appeal; court can override | Binding judgment, subject to appeal |
The bad-faith standard: why “registered and used” differs from “registered or used”
The single sharpest difference between the two mechanisms is the structure of the bad-faith test. The UDRP is conjunctive: a complainant must prove the domain was both registered and used in bad faith. The ACPA is disjunctive: bad-faith registration, trafficking, or use is enough on its own. That one word, “and” versus “or,” is why a complainant can lose a UDRP and still win an ACPA case.
The UDRP demands both, at once
Paragraph 4(a)(iii) requires that the domain name “has been registered and is being used in bad faith.” Panels read that as two findings the complainant carries together. A registrant who took the name in good faith years ago, before the complainant’s mark existed, has not registered in bad faith, so the complaint fails even if later use looks opportunistic.
This is the structural ceiling on the policy. The conjunctive test protects long-held registrations that predate a mark, and it is the reason a strong-looking grievance still loses when the registration date sits on the wrong side of the trademark.
| Test | UDRP (conjunctive) | ACPA (disjunctive) |
|---|---|---|
| Wording | Registered AND used in bad faith | Registered, trafficked, OR used in bad faith |
| What must be shown | Both, together, by the complainant | Any one of the three is sufficient |
| Good-faith registration, later bad use | Complaint fails | Claim can still succeed on bad-faith use |
| Practical effect | A higher bar; protects old registrations | A lower bar; reaches conduct after registration |
The ACPA reaches conduct after registration
Because the statute is disjunctive, a court can find liability on bad-faith use even where the original registration was innocent. The Fourth Circuit has read the statute to reach a bad-faith re-registration as well, treating a later renewal or transfer as a fresh registration the ACPA can test. The result is a lower structural bar than the UDRP and a reason a complainant who failed the policy moves to court.
Can a UDRP and an ACPA case interact?
Yes, and the relationship runs in both directions. A UDRP loser can sue in federal court, a UDRP winner can have the transfer challenged there, and a registrant who beats a complaint can pursue the complainant for reverse domain name hijacking. The UDRP is the fast first move; the ACPA is the binding backstop and the venue for damages.
Paragraph 4(k): the court door stays open
The UDRP does not foreclose litigation. Paragraph 4(k) states a proceeding shall not prevent either party from submitting the dispute to a court of competent jurisdiction. A complainant who loses can refile as an ACPA claim, and a registrant facing a transfer order can file suit, which in defined cases pauses the transfer, before the registrar acts.
This is the practical reason the two are sequenced instead of chosen once. A trademark owner runs the UDRP for speed and cost, and keeps the ACPA in reserve for the case where the policy is the wrong fit or the conjunctive test blocks an otherwise sound grievance.
Reverse domain name hijacking protects the registrant
The interaction protects the domain holder too. Under the UDRP rules, a panel can make a finding of reverse domain name hijacking where a complainant filed in bad faith to grab a name from its rightful holder. The ACPA backs this with a civil cause of action for a registrant whose name was wrongly suspended or transferred, at 15 U.S.C. 1114(2)(D)(v).
That protection is the legal floor under a legitimate acquisition. A registrant who bought an aged domain in good faith, for a real use, with no intent to exploit a mark, has both a defense to a complaint and a route to recover a name taken by an overreaching one. The deeper procedure lives in the wider cybersquatting law resources.
Which one fits the situation: a decision walkthrough
The choice between the UDRP and the ACPA follows a short sequence of questions about the goal, the registrant, and the budget. A complainant who wants the name back quickly and cheaply starts with the UDRP. A complainant who wants damages, faces an unreachable registrant, or needs a binding court order goes to the ACPA. The walkthrough below maps the decision step by step, and the checklist after it consolidates the mistakes that derail each route.
-
Define the goal: the name back, or money too
If the only aim is to recover the domain, the UDRP delivers that for a flat fee in about two months. If the aim includes statutory damages, attorney fees, or a deterrent judgment, only the ACPA can award them, so the case starts in federal court.
The mistake: running a UDRP expecting compensation. The policy has no power to award a single dollar, and a complainant chasing damages through it wastes the filing.
-
Locate the registrant and test jurisdiction
The ACPA needs United States ties or an in rem hook through a US registrar or registry. Where the registrant is identifiable and reachable, either route works. Where the registrant hides behind privacy or sits abroad, the UDRP reaches globally, while the ACPA falls back to an in rem action against the domain.
The mistake: filing an ACPA claim against a foreign, anonymous registrant with no US registrar in the chain. The court has nothing to act on, and the case stalls on jurisdiction.
-
Check the registration date against the conjunctive test
If the domain was registered in good faith before the mark existed, the UDRP conjunctive test will likely fail on the bad-faith-registration prong. The ACPA disjunctive test can still reach bad-faith use that came later, so a date mismatch points toward the statute.
The mistake: ignoring the registration date. A complaint that looks strong on the merits collapses under the UDRP when the name predates the trademark, with the fee already spent.
-
Weigh speed and budget against finality
The UDRP is the fast, low-cost first move and resolves the bulk of clear-cut squatting. The ACPA is the slower, costlier route that ends in an enforceable judgment. A clear case of pure cybersquatting starts with the UDRP; a contested, high-value, or damages-driven case justifies the court budget.
The mistake: opening with expensive litigation on a textbook squat that a US$1,500 UDRP filing would have resolved in two months.
-
Sequence the two using paragraph 4(k)
The routes are not mutually exclusive. The disciplined approach files the UDRP first and reserves the ACPA for a loss on the conjunctive test or for the damages a winning policy decision still cannot award. Paragraph 4(k) keeps the court door open after the decision.
The mistake: treating a UDRP loss as final. The policy itself preserves the right to court, and a disjunctive ACPA claim can succeed where the conjunctive policy cannot.
Common UDRP and ACPA mistakes: the consolidated checklist
The errors that sink a domain challenge, from either side, reduce to a short, repeatable list. Each one has a documented fix that points back to the same discipline: match the mechanism to the goal, the registrant, and the registration date before filing. The table consolidates the mistakes scattered through the walkthrough into one scannable reference.
| The mistake | Why it fails | The fix |
|---|---|---|
| Expecting damages from a UDRP | The policy can only transfer or cancel, never award money | File an ACPA claim when compensation is the goal |
| Ignoring the registration date | A pre-mark good-faith registration fails the UDRP conjunctive test | Check the date first; use the ACPA disjunctive route for later bad-faith use |
| ACPA claim with no US nexus | The court lacks personal jurisdiction over a foreign, anonymous registrant | Use the UDRP for global reach, or an ACPA in rem action via the US registrar |
| Litigating a textbook squat | Court time and cost are wasted on a case the policy resolves cheaply | Open clear cybersquatting with a US$1,500 UDRP filing |
| Treating a UDRP loss as final | The conjunctive test blocks claims the disjunctive statute can still win | Reserve the ACPA under paragraph 4(k) for the failed policy case |
| Filing a UDRP in bad faith | A grab against a legitimate holder draws a reverse-hijacking finding | Confirm a genuine mark and genuine bad faith before filing |
| Buying a name that collides with a live mark | The domain carries exposure to both mechanisms from day one | Screen an aged domain for trademark collision before purchase |
UDRP vs ACPA frequently asked questions
The five questions trademark owners and domain buyers raise when comparing the UDRP and the ACPA, answered against the policy text, the statute, and the WIPO fee schedule.
Q1What is the main difference between the UDRP and the ACPA?
The UDRP is a fast, low-cost administrative arbitration run by ICANN providers that can only transfer or cancel a domain name. The ACPA is a United States federal lawsuit under 15 U.S.C. 1125(d) that can award statutory damages of US$1,000 to US$100,000 per domain name in addition to ordering a transfer. The UDRP is chosen for speed; the ACPA is chosen for damages and a binding court judgment.
Q2How much does a UDRP cost compared with an ACPA case?
A WIPO UDRP filing for one to five domain names costs US$1,500 with a single panelist and US$4,000 with a three-member panel, per the published WIPO fee schedule. An ACPA action runs on a federal litigation budget that frequently reaches five or six figures in attorney fees, which is the core trade-off behind choosing the policy first.
Q3What are the three elements of the UDRP?
Paragraph 4(a) of the policy requires a complainant to prove that the domain name is identical or confusingly similar to a mark in which the complainant has rights, that the registrant has no rights or legitimate interests in the name, and that the domain name was registered and is being used in bad faith. All three must be carried together, which is the conjunctive standard that distinguishes the policy from the ACPA.
Q4Can a complainant who loses a UDRP still go to court?
Yes. Paragraph 4(k) of the UDRP states that the proceeding does not prevent either party from submitting the dispute to a court of competent jurisdiction. A complainant who loses on the UDRP conjunctive test can refile as an ACPA claim, where the disjunctive standard of bad-faith registration, trafficking, or use can succeed on bad-faith use alone.
Q5Does a buyer of an aged or expired domain face UDRP or ACPA risk?
Only when the name collides with a live trademark and the acquisition carries bad faith. A domain bought in good faith for a genuine use, with no confusing similarity to a protected mark, sits outside both mechanisms, and the registrant is further protected against an overreaching complaint by the reverse domain name hijacking finding under the UDRP rules and the civil remedy at 15 U.S.C. 1114(2)(D)(v). Screening a name for trademark collision before purchase is the practical safeguard.
Buying an aged domain: screening for UDRP and ACPA exposure
The decisive variable for a domain buyer is trademark collision, and it is screenable before purchase. A name that is identical or confusingly similar to a live mark carries exposure to both the UDRP and the ACPA. A name with a clean history, a generic or distinctive non-infringing string, and no bad-faith intent carries neither. SEO Domains operates the marketplace where that screening happens before a domain is listed.
Why trademark collision decides the outcome
Every mechanism in this guide converges on the same trigger. The UDRP and the ACPA both require a mark the complainant has rights in, and both turn on bad faith aimed at that mark. A domain that copies no protected brand and was acquired for a real purpose has nothing for either process to grip. The legal exposure is not in the age of the domain. It is in the collision.
The asset versus the liability
An aged or expired domain with inherited authority is a legitimate asset a buyer can own openly. A name that shadows a famous mark is a liability the moment it is registered, exposed to a US$1,500 UDRP filing and a federal claim for statutory damages. Treating every aged domain as risky is the error, and treating none of them as risky is the opposite error. The screen is what tells the two apart.
How a buyer screens a name before purchase
A domain that holds up survives a collision check before money changes hands. The signals that matter are read together, not singly:
- No identical or confusingly similar match to a live registered trademark in the relevant class.
- A clean prior-use history with no record of trademark abuse, redirection to a competitor, or prior dispute.
- A generic, descriptive, or genuinely distinctive string rather than a misspelling of a famous brand.
- A defensible good-faith purpose for the acquisition, which is the registrant’s protection under both the UDRP and 15 U.S.C. 1114(2)(D)(v).
A name that fails the first check is a liability whatever is built on it. A name that passes is an asset a buyer can own and use without UDRP or ACPA exposure.
| Check | Exposed name (liability) | Clean name (asset) |
|---|---|---|
| Trademark match | Identical or confusingly similar to a live mark | No collision with a protected mark |
| String type | Misspelling or shadow of a famous brand | Generic, descriptive, or distinctive non-infringing |
| History | Prior dispute, abuse, or competitor redirect | Clean prior use, no dispute record |
| Intent on purchase | Acquired to exploit or resell to the mark owner | Acquired in good faith for a genuine use |
| UDRP and ACPA exposure | Vulnerable to both mechanisms | Outside the reach of both |
Browse aged and expired domains screened before listing
The legitimate demand behind a buyer comparing the UDRP and the ACPA is access to aged domain authority that is clean of trademark exposure. That is the product, not a legal service and not a dispute-filing tool. SEO Domains operates the curated marketplace where aged and expired domains are screened across their history and profile, including trademark-collision risk, before they are listed and priced.
