Is it illegal for someone to register a domain with my business name?

Not automatically. It becomes actionable when it's bad faith targeting your trademark — cybersquatting. If you have trademark rights (registered or established common-law), UDRP and, in the US, the ACPA statute give you remedies. Without any trademark rights, your options are mostly negotiation.

What is UDRP and when should I use it?

UDRP is arbitration built into every domain registration contract. You must prove the domain is confusingly similar to your mark, the registrant has no legitimate interest, and it was registered in bad faith. It costs roughly $1,500 in filing fees, takes 2–3 months, and transfers the domain to you if you win. Use it for valuable domains with clear bad faith; use registrar abuse reports for active fraud (faster and free).

Should I just buy the domain from them?

Sometimes — if the price is below your UDRP cost (~$1,500 plus time), buying is rational even when it stings. Negotiate anonymously through a broker or intermediary; squatters price by how much the brand seems to want it. But if they demand more and your trademark case is strong, the demand itself becomes bad-faith evidence for UDRP.

The domain is hosting a fake version of my store. Same process?

No — that's active fraud, and speed wins: file abuse complaints with the registrar and hosting provider, report to payment processors and Google Safe Browsing, and treat the domain-ownership question separately. The fraud takedown can land in days; UDRP is the slow follow-up if you want the domain itself.

How do I prevent this in the future?

Register the obvious variants yourself (main TLDs, common typos) — $10–15/year each is cheaper than any dispute. Register your trademark, which converts future squats from a negotiation into an enforceable claim. And monitor new registrations resembling your brand so you catch squats at day one, before they host anything.

Someone Registered a Domain With Your Business Name: What to Do (2026)

A stranger owns yourbusinessname.com — or a lookalike — and it's parked, for sale, or hosting a copycat site. Here's how to tell which situation you're in and the right response for each, from ignoring it to UDRP.

You go to register a domain — or a customer asks why your site looks different — and discover a stranger owns your business name as a domain. Maybe it's parked with ads. Maybe there's a "make offer" page. Maybe it's a full clone of your store. These are three different problems with three different answers, and the most expensive mistake is treating them all like emergencies — or treating the real emergency like a negotiation.

First: diagnose which situation you're in

Run a WHOIS lookup: registration date, registrar, and (often redacted) registrant. Then look at what the domain does. Active abuse — a fake store, phishing page, or email spoofing infrastructure — is a today problem. Passive holding — parked, for sale, or dormant — is a rights-and-negotiation problem. Innocent collision — another legitimate business that happens to share your name in a different industry or country — may be no problem at all: trademark rights are scoped to industries and geographies, and a same-name landscaping company in another state likely owes you nothing.

A recently registered domain (weeks old) matching your brand right as your business grows is rarely coincidence — recent registration is itself bad-faith evidence worth noting for later.

Active abuse: move today

If the domain hosts a fake store or phishing page, skip the ownership question entirely and attack the infrastructure: abuse complaints to the registrar and hosting provider (our abuse complaint template has the wording), reports to payment processors if it takes orders, and Google Safe Browsing. The full sequence is in our fake-website playbook. Fraud takedowns land in days; who owns the domain can be settled afterward.

Passive squatting: UDRP, ACPA, or your wallet

For a parked or for-sale domain, your leverage is trademark rights. UDRP arbitration — built into every domain registration contract — transfers the domain to you if you prove confusing similarity to your mark, no legitimate interest by the registrant, and bad-faith registration. Budget roughly $1,500 in fees and 2–3 months. Its faster cousin URS suspends (but doesn't transfer) clear-cut cases for a few hundred dollars. US brands with strong cases can also invoke the ACPA statute in court — up to $100,000 statutory damages per domain, mostly useful as settlement leverage.

Or just buy it. If the asking price is under your UDRP cost, purchasing is rational even when it offends you. Two rules: negotiate through an intermediary (squatters price by how much the brand seems to care), and get the trademark question straight first — an extortionate demand made after you hold registered rights becomes bad-faith evidence that wins the UDRP you then file instead.

If you have no trademark rights at all:

UDRP requires a mark. Without registered or provable common-law rights, your realistic options are negotiation or choosing a different domain — and filing a trademark application so the next squat is enforceable. This is the recurring lesson of brand protection: registration converts grievances into claims.

Prevention costs less than any of this

Register the obvious variants yourself — the main TLDs and the common typos — at $10–15/year each; one prevented dispute pays for decades of renewals. Then monitor: squats and homoglyph lookalikes are most dangerous in their first days, before they've hosted anything, when a registrar complaint or quiet purchase is cheapest. Our domain squatting defense playbook covers the patterns; IPzest watches new registrations resembling your brand daily — typosquats, homoglyphs, TLD variants — from $68/month with a 7-day free trial.