UDRP vs. URS vs. ACPA: Which Domain Remedy?

When someone registers a domain name that matches your brand and tries to profit from it, the law calls it cybersquatting. The good news is that you do not have to negotiate with a squatter or pay a ransom. There are three established remedies, and they are not interchangeable — they differ sharply in price, speed, and what you actually walk away with. This guide explains each one in plain English so you can tell which fits your situation. For the broader landscape, start with the Domain & cybersquatting pillar.

The three options at a glance

Think of the three remedies as a ladder from fastest-and-cheapest to slowest-and-most-powerful.

The URS (Uniform Rapid Suspension) is the quick strike. It is cheap (about $300-$500) and decided in weeks, but it only suspends the domain — it does not give you ownership, and you have to meet a higher burden of proof.

The UDRP (Uniform Domain-Name Dispute-Resolution Policy) is the standard remedy. It costs more (roughly $1,300-$1,500 in provider fees for a single-panelist case) and takes about two months, but it can actually transfer the domain to you or cancel it.

The ACPA (Anti-Cybersquatting Consumer Protection Act) is the heavy artillery. It is a federal lawsuit, so it is the slowest and most expensive by far — but it is the only one that can put money in your pocket through statutory damages, on top of ordering a transfer.

A useful rule of thumb: the URS and UDRP are private arbitration created by ICANN (the body that oversees the domain name system), and neither one awards damages. The ACPA is real litigation in court. If all you want is the name, you almost certainly want an arbitration. If you want to punish the squatter financially, you need the court.

The UDRP in depth

The UDRP is an ICANN policy that every accredited registrar builds into its registration agreement, which is why a registrant is bound by it whether they like it or not. Complaints are filed with approved dispute-resolution providers — the best known are the World Intellectual Property Organization (WIPO) and Forum (formerly the National Arbitration Forum). A panel of one or three neutral experts decides the case on the written record; there is no live hearing.

To win, a complainant must prove all three elements of the UDRP test:

1. The domain is identical or confusingly similar to a trademark or service mark in which you have rights.
2. The registrant has no rights or legitimate interests in the domain name (for example, they are not commonly known by it and are not making a legitimate, non-commercial or fair use of it).
3. The domain was registered and is being used in bad faith — note that bad faith generally must be shown both at registration and in the ongoing use.

Cost: Provider fees for a single-domain, single-panelist case typically run around $1,300-$1,500, with a three-member panel costing more. Timeline: Roughly two months from filing to decision. Remedy: A panel can only do two things — order the domain transferred to you or cancelled. There are no money damages.

The UDRP is the default choice for most trademark owners because it is relatively fast, predictable, and you end up owning the name. For a step-by-step walkthrough of the process, see how to recover a domain name, and to understand the underlying conduct it targets, see what is cybersquatting.

The URS in depth

The URS (Uniform Rapid Suspension System) was designed as a faster, cheaper companion to the UDRP, aimed mainly at the newer generic top-level domains (the wave of extensions beyond .com, such as .shop or .app). It is built for the clearest, most obvious cases of cybersquatting where there is essentially nothing to argue about.

The elements look similar to the UDRP — confusing similarity, no legitimate interest, and bad faith — but the burden of proof is higher. A URS complainant must prove its case by clear and convincing evidence, a tougher standard than the UDRP’s ordinary “balance of the probabilities.” That higher bar exists precisely because the process is so quick that there is little room for a close call.

Cost: Far less than a UDRP, generally in the $300-$500 range. Timeline: Very fast — often resolved in just a few weeks. Remedy: This is the catch. A URS examiner can only suspend the domain for the remainder of its registration period. The domain does not transfer to you, and it is not cancelled — it simply goes dark, and once the registration eventually lapses the name could come back into play. You get no ownership and no damages.

Because of that limited remedy, the URS is best when your goal is speed and simply getting an infringing site offline, not acquiring the name. Many owners who want to keep the domain skip the URS and go straight to the UDRP.

The ACPA in depth

The Anti-Cybersquatting Consumer Protection Act, codified at 15 U.S.C. § 1125(d), is part of U.S. federal trademark law (the Lanham Act). Unlike the UDRP and URS, it is not arbitration — you enforce it by filing a lawsuit in U.S. federal court. That makes it the slowest and most expensive route, but also the most powerful.

The core of an ACPA claim is that the defendant, with a bad-faith intent to profit from your mark, registered, trafficked in, or used a domain name that is identical or confusingly similar to (or dilutive of) your mark. The statute lists nine non-exhaustive factors courts weigh to gauge bad-faith intent — including whether the registrant had any IP rights in the name, whether the name is their own legal name, any prior legitimate use, an intent to divert consumers, offers to sell the domain to the trademark owner for a profit, and the registration of multiple infringing domains. Importantly, the law has a built-in safe harbor: there is no bad faith if the registrant reasonably believed the use was a fair use or otherwise lawful.

Damages are the headline. Under 15 U.S.C. § 1117(d), a successful plaintiff can elect statutory damages of not less than $1,000 and not more than $100,000 per domain name, chosen instead of proving actual damages. Courts can also order the domain transferred or cancelled and, in appropriate cases, award attorney’s fees. The ACPA even allows in rem actions against the domain name itself when the squatter cannot be located or is beyond U.S. jurisdiction.

Cost: Federal litigation is expensive — realistically tens of thousands of dollars and up, depending on discovery and how hard the case is fought. Timeline: Months to well over a year for a final judgment. Remedy: Transfer or cancellation plus money damages and possibly fees.

How to choose

Start with what you want out of the dispute.

• You just want the domain, fast and cheap. File a UDRP. It is the right call for the large majority of straightforward cybersquatting cases, and you end up owning the name.
• It is an open-and-shut squat and you only need the site taken down. A URS can suspend it in weeks for a few hundred dollars — but remember you will not own the name, so weigh whether suspension is really enough.
• You want money, the squatter is a repeat offender, or you need broader remedies. Go to court under the ACPA. The damages and fee provisions give a squatter a real reason to settle, and a court can reach conduct an arbitration cannot.

A few practical notes. The arbitration options (UDRP and URS) and an ACPA lawsuit are not mutually exclusive — a UDRP decision is not a final court judgment, and a losing party in a UDRP can still take the dispute to court, so the routes can interact. Jurisdiction, the type of top-level domain, and whether the registrant is even identifiable all affect which path is realistic. Because the strategy turns on your specific facts, talk it through with an attorney licensed in your jurisdiction before filing. You can find more background under /topics/trademarks/.

The bottom line

The UDRP, URS, and ACPA are three different tools for the same problem, and the difference comes down to cost, speed, and remedy. The URS is the cheapest and fastest but only suspends a domain in clear cases. The UDRP costs more and takes about two months but can transfer the name to you — the default for most owners. The ACPA is a federal lawsuit that is slower and pricier yet uniquely powerful, offering statutory damages of $1,000-$100,000 per domain on top of a transfer. Match the tool to your goal: arbitration to get the name, court to get paid.

This article is general educational information about intellectual property law, not legal advice, and does not create an attorney-client relationship. Laws and procedures change and outcomes depend on your specific facts. For advice about your situation, consult an attorney licensed in your jurisdiction.