Cybersquatting refers to registering, using, or selling a domain name with the intent of profiting from the trademarked name of another entity. The term is derived from ‘squatting,’ where individuals claim digital property, such as domain names that they do not rightfully own. Cybersquatting can disrupt businesses, confuse consumers, and lead to financial and reputational harm.
Cybersquatting continues to be a problem as businesses expand their online presence. In 2023, the World Intellectual Property Organization (WIPO) handled nearly 6,200 domain name disputes, a more than 7% increase from 2022 and a 68% jump since the start of the COVID pandemic. Trademark owners from around the world filed 6,192 cases under the Uniform Domain-Name Dispute-Resolution Policy (UDRP) and its national variations, with the most filings coming from the United States, France, and the United Kingdom. As case numbers grow, securing domain names and monitoring brand usage remain key measures to prevent fraud and trademark misuse.
Yes, cybersquatting is illegal in many jurisdictions. The Anticybersquatting Consumer Protection Act (ACPA), enacted in the United States in 1999, combats cybersquatting by allowing trademark owners to take legal action against individuals or entities that register domain names identical or confusingly similar to their trademarks with bad faith intent. Trademark owners who prevail in cybersquatting lawsuits may receive monetary damages and gain control of the disputed domain name.
To successfully pursue a case under ACPA, the following conditions must be met:
There are several different kinds of cybersquatting, all of which can harm businesses and consumers:
Typosquatting occurs when cybersquatters purchase domain names that contain common misspellings of well-known brands. These fraudulent domains often lead unsuspecting users to fake or malicious websites. Examples include:
Some cybersquatters create domains that closely resemble legitimate businesses to steal personal data from unsuspecting visitors. Scammers can trick users into entering their login credentials or financial information by creating an identical-looking website.
For example, if a company named Apex Tech partners with another company called Nova Solutions, a cybersquatter could register apexnova.com before the business does. Such a tactic could mislead customers or force the legitimate company to pay a ransom to acquire the domain.
Name jacking involves registering domain names containing the personal names of celebrities, politicians, or public figures. While personal names are not always trademarked, name jacking can still be considered cybersquatting when done in bad faith. Social media impersonation also falls into this category when fake profiles are created to mislead the public.
Reverse cybersquatting, also known as reverse domain name hijacking (RDNH), happens when a company falsely claims that an existing domain violates its trademark rights. In some cases, businesses attempt to use ACPA to take over legitimate domains owned by individuals who registered them in good faith. For instance, if a person registers IndustrialChemicals.com, a company might later form under that name and falsely accuse them of cybersquatting to take ownership of the domain.
Go deeper:
Related: What is malware?
Cybersquatting is the act of registering, using, or selling a domain name with the intent of profiting from the trademarked name of another entity.
It occurs when individuals intentionally register domain names that are identical or confusingly similar to existing trademarks or business names, often to extort money or mislead consumers.
No, cybersquatting is illegal under the Anticybersquatting Consumer Protection Act (ACPA) of 1999. Trademark owners can take legal action against cybersquatters to recover domain names and seek damages.
Preventive measures include registering domain names early, securing multiple TLDs, monitoring domain activity, and understanding legal protections such as ACPA and UDRP.