Cybersquatting: Understanding The Legal Battle

Cybersquatting is the act of registering, selling, or using a domain name with the bad-faith intent to profit from the goodwill of a trademark belonging to someone else. In other words, it involves occupying a digital space, like a domain name or username, with the intention of selling it back to its rightful owner. This practice is illegal in many jurisdictions, with specific laws like the US Anticybersquatting Consumer Protection Act (ACPA) in place to protect trademark owners. Case law in this area includes Green Products Co. v. Independence Corn By-Products Co., where a company registered a competitor's name as their domain name, and Data Concepts, Inc. v. Digital Consulting, Inc., where both entities had trademark rights to the same initials. In both cases, the courts ruled against cybersquatting behaviour, demonstrating the legal system's willingness to stretch existing laws to address this issue.

Explore related products

Prosecuting and Defending Domain Name Disputes: Effective Litigation Strategies (Elgar Intellectual Property Law and Practice series)

$222

Domain Name Dispute Regulation: A Comparative Analysis

$76

Domain Name Dispute: LA-CV14-04232 (Court Cases Book 2)

$9.99

GLOBAL ANALYSIS OF LAWS RELATED TO CYBER SQUATTING: Opening a new front in war against trademark infringement on Internet

$70

ANALYSE GLOBALE DES LOIS RELATIVES AU CYBER-SQUATTING (French Edition)

$32

GLOBALE ANALYSE DER GESETZE IM ZUSAMMENHANG MIT CYBER-SQUATTING (German Edition)

$33

Cybersquatting defined by case law

The Anticybersquatting Consumer Protection Act (ACPA) was passed in 1999 to prevent cybersquatting. Cybersquatting is a subset of trademark infringement according to US law. In legal terms, it involves the bad faith intent to confuse buyers about the identity of a product or business.

The ACPA defines cybersquatting as the registration, sale, or use of a domain name that is identical or confusingly similar to a registered trademark or service mark, with the intention of profiting from the confusion. The ACPA allows trademark owners to sue alleged cybersquatters in federal court and obtain a court order for the transfer of the domain name. If the domain name owner wins, they may also be awarded monetary damages.

To successfully sue for cybersquatting under the ACPA, the plaintiff must show that:

• The trademark was registered and unique when the domain name was registered.
• The cybersquatter had a bad-faith intent to profit from the known trademark.
• The registered domain name is identical or similar enough to the trademark to cause confusion among consumers.
• The existing trademark is protected by federal trademark law.

A notable case involving cybersquatting was that of Nissan Motors. In 1994, nissan.com was registered for Nissan Computer Corporation, five years before the automobile company decided they wanted the domain. Nissan Motors claimed that the domain name constituted trademark dilution, infringement, and cybersquatting.

Another example is the case of Tony La Russa, manager of the St. Louis Cardinals, who filed a complaint against Twitter. The dispute centred on a Twitter profile that used La Russa's name and picture and encouraged users to "join today to start receiving Tony La Russa's updates". La Russa argued that the status updates were vulgar and derogatory and that the author intended to divert internet traffic away from his website and profit from the injury to his mark.

The rise of social media has also led to a new form of cybersquatting, known as "username squatting" or "name jacking". This involves registering trademark-protected brands or names of public figures on social media websites.

Typosquatting and URL hijacking

Typosquatting, also known as URL hijacking, is a form of cybersquatting that targets Internet users who mistype a website address into their web browser. This type of cybersquatting involves registering a domain that includes a typo or alternative spelling of a company's actual domain. For example, instead of "Google.com", a user might type "Gooogle.com" and be led to a fraudulent website owned by a hacker. These fake websites often imitate the look and feel of the intended destination, tricking users into thinking they are on the correct site. Typosquatters may also employ phishing techniques to get users to visit their fake websites, such as sending emails with spoofed links.

Typosquatting can have malicious intentions, such as stealing users' personal information, including credit card numbers and passwords. It can also be used to spread malicious software or ransomware, which can be installed on a user's device simply by visiting the site. Additionally, fraudulent website owners could leverage identity theft to sell competitive products or trick users into a personal identifiable information breach.

To protect against typosquatters, users should pay close attention to the spelling of web addresses and be wary of websites that look trustworthy but may be close imitations of legitimate sites. Companies can also trademark their domain names to take legal action against typosquatters and secure potential typoed domains to ensure customers are redirected to the correct website.

One of the earliest examples of typosquatting was in 2006 when Google was the victim of typosquatting by the site Goggle.com, which was widely considered a phishing or fraud site. Another example is the registration of "starbukcs.io", which linked to a website that sold competing coffee products to Starbucks.

Reverse domain hijacking

Reverse domain name hijacking is a legal remedy to counter the practice of domain squatting. It occurs when a trademark owner attempts to secure a domain name by falsely claiming cybersquatting against a domain name owner. In other words, it is when a trademark owner uses UDRP proceedings to coerce an individual domain owner into giving up their rights to a domain name.

Reverse domain name hijacking typically follows these steps:

• Identification: The trademark holder identifies a domain name they plan on acquiring.
• Claim Filing: The trademark holder brings an action through UDRP, stating that the domain name is identical or confusingly similar to their trademark, and that the registrant has no rights or legitimate interests in the domain and has not used it in good faith.
• Legal Maneuvering: Legal proceedings are aimed at convincing the domain owner that they are not entitled to the domain name.
• Panel Decision: A panel of UDRP experts considers the case and gives their response. A favourable decision can lead to the domain being taken away from the respondent.

Reverse domain name hijacking findings are rare and based heavily on the specific circumstances of each case. Some circumstances that have been cited by WIPO panels as justification for a finding of reverse domain name hijacking include:

• When the registration of the domain predates any trademark rights of the complainant.
• When the complaint has provided no evidence of bad faith registration or use directed towards the complainant.
• Where the complainant has used the UDRP as a secondary option to attempt to secure the domain after commercial negotiations have broken down.
• Where the complainant has attempted to deceive the domain owner or makes misrepresentations or fails to disclose material information to the panel.

Examples of WIPO cases involving reverse domain name hijacking include Sanofi SA vs. Monogram Naming LLC over the domain Initiv.com (2022), Gregory Ricks vs. RVK, Inc. (2015), and Ron Paul vs. RonPaul.org (2013).

Reverse domain name hijacking (RDNH) is an offence under the Anti-Cybersquatting Consumer Protection Act, and US-based domain name owners may sue in a District Federal Court for damages of up to $100,000. While a finding of RDNH does not carry a financial penalty, it will go on the public record and may damage the reputation of the complainant.

Name jacking

Reverse domain name hijacking (RDNH) is, in some ways, the opposite of cybersquatting. While purchasing a domain name that contains a trademark with the goal of making money off that trademark is cybersquatting, reverse domain hijacking is a little different. It happens when a person or business makes a false claim that they own a trademark and then takes unjustified steps to take your legitimate domain name away.

Cybersquatting is a form of cybercrime where the perpetrator buys or registers a domain name that is identical or similar to an existing domain with the intention of profiting from a recognizable trademark, company name, or personal name. Crucially, the act is illegal because of the bad faith intent of the squatter. Due to its nature, domain squatting can be considered a form of trademark infringement, though there are differences between the two. There are several types of cybersquatting, and attacks may be carried out with different goals in mind. In many cases, squatters register domains with the intention of later selling them to established businesses or brand owners for a significant profit.

To build a case for cybersquatting, the onus is on the claimant to prove that a case of illegal web squatting has occurred. To do this, they would generally have to offer evidence that:

• The name or trademark is well-known and diluted by the domain squatting.
• The squatter created the domain name with the intent of infringing on the rights of—and profiting off—the existing company, individual, or trademark owner.
• The domain of the web squatting site must be identical or similar to an existing name or trademark.

The ACPA defines cybersquatting as the registration, sale, or use of a domain name that is identical or confusingly similar to another registered trademark or service mark, with the bad faith intent of profiting from the confusion. Most cybersquatting cases fall into four basic categories:

• Typosquatting or URL hijacking: Registering a URL similar to a real address but with a typographical error and counting on users typing the wrong address into the browser header.
• Identity theft: Waiting for domain names to expire and then buying them.
• Phishing pages, scams, or fake surveys to collect user data.
• Protective domain squatting: This legal, proactive form of domain squatting is when companies register multiple top-level domain (TLD) versions to protect their brand name.

Legal recourse and prevention

If you are a victim of cybersquatting, it is important to seek legal advice immediately. Contact a business and commercial law attorney in your area for assistance on how to proceed with legal action and protect your company.

In the United States, victims of cybersquatting can sue under the provisions of the Anticybersquatting Consumer Protection Act (ACPA), an amendment to the Lanham Act. The ACPA defines cybersquatting as the registration, sale, or use of a domain name that is identical or confusingly similar to another registered trademark or service mark, with the bad faith intent of profiting from the confusion. Under the ACPA, trademark owners can sue alleged cybersquatters in federal court. If the domain name owner wins, the judge can issue a court order requiring the transfer of the domain name and sometimes monetary damages.

Alternatively, victims of cybersquatting can use an international arbitration system created by the Internet Corporation for Assigned Names and Numbers (ICANN). Trademark experts consider the ICANN arbitration system to be faster and less expensive than suing under the ACPA.

To prevent cybersquatting, brands and businesses should register with the U.S. Patent and Trademark Office (USPTO), a federal database for all formally registered marks across the country. Registering with the USPTO offers greater protection against national infringement than registering with a specific state. Additionally, ICANN provides guidelines for acquiring and keeping a domain name, including researching your desired domain name to confirm that it has not already been claimed.

In some cases, paying the cybersquatter may be the best option, as it can be cheaper and quicker than filing a lawsuit or initiating an arbitration hearing. However, this may not always be a guarantee that you will get your desired domain name.

Frequently asked questions