When You Type Your Brand and It Goes Somewhere Else
You launched a small label, an EdTech startup, a boutique law practice, a clothing line, a coaching institute. You bought your social handles, you printed cards, you told your friends to spread the word. Then one customer called and said: "I tried to find your website but it took me to some other place that looks different but uses your name." You typed it yourself. There it was — your brand name (or something very close to it) sitting on a domain you do not own. Maybe with a hyphen added. Maybe an extra letter. Maybe ending in .co.in instead of .com. Maybe nothing on it but a parking page that says "this domain is for sale".
This is cybersquatting. It is one of the oldest tricks of the internet age. People register domain names that match — or closely resemble — a brand they did not build, hoping to either sell the name back to the rightful owner at a high price, divert traffic to their own site, or simply confuse customers. Indian law, both through the courts and through specialised arbitration, takes this seriously. You have real options. The trick is knowing which one fits your problem.
Is a Domain Name a Trademark?
The first legal question a court asks is whether a domain name is just a technical address — like a phone number — or whether it carries the same value as a brand name. The answer in India has been settled for years: a domain name is more than an address. When used in connection with a business, it serves the same function as a trademark and is entitled to equal protection.
The Supreme Court accepted this in Satyam Infoway v Sifynet Solutions (2004) when it held that "the original role of a domain name was no doubt to provide an address for computers on the internet. But the internet has developed from a mere means of communication to a mode of carrying on commercial activity. With the increase of commercial activity on the internet, a domain name is also used as a business identifier." Because the internet has no geographical boundary, a domain name has the unique feature of demanding global exclusivity — two people in different countries cannot share the exact same domain.
Earlier the Delhi High Court in Yahoo Inc. v Akash Arora (1999) had already ruled that registering "Yahoo India" as a domain name when "Yahoo!" was a well-known mark amounted to passing off, even though the technical word "services" did not then sit comfortably in Sections 27 and 29 of the Trade Marks Act. The Bombay High Court in Rediff Communication v Cyberbooth (2000) went further: it held that a domain name was an asset capable of carrying goodwill and that "RADIFF" — visually and phonetically similar to "REDIFF" — would deceive ordinary internet users.
The legal upshot for you: if your brand has goodwill, a confusingly similar domain name registered by someone else is challengeable, whether your trademark is registered or not.
Three Routes to Get the Name Back
Indian brand owners have three real options when a copycat domain shows up. They are not mutually exclusive — many brand owners run two of them in parallel.
- INDRP arbitration — for .in and .co.in domains, run by NIXI, the .IN Registry. Fast, document-only, decided in roughly two to three months.
- UDRP arbitration — for .com, .net, .org and most generic global domains, run by ICANN-accredited providers like WIPO. Same three-element test, similar speed.
- Civil suit in an Indian court — slower and more expensive, but yields injunctions, damages, and orders against the squatter's broader business activities.
Before any of these, the cheapest option is a well-drafted cease-and-desist legal notice. A surprising number of squatters retreat once they see a serious legal notice citing the three-element test, the relevant cases, and the consequences of an unfavourable arbitration award.
INDRP: For .in and .co.in Domains
The .IN Domain Name Dispute Resolution Policy (INDRP) is administered by the National Internet Exchange of India (NIXI). It applies to all .in domains, including the second-level country domains like .co.in, .org.in, .net.in, and .firm.in.
To win an INDRP complaint, the complainant must establish all three of the following elements:
- The disputed domain name is identical or confusingly similar to a name, trademark or service mark in which you have rights.
- The registrant has no rights or legitimate interests in respect of the domain name.
- The domain name has been registered or is being used in bad faith.
This three-element test is the heart of INDRP, and it tracks the global UDRP test almost word for word. All three elements must be made out — the absence of any one normally sinks the complaint.
The procedure is straightforward. You file a complaint with NIXI, attaching evidence of your trademark rights, the disputed domain's WHOIS record, screenshots of the website (or the parking page), and documents proving bad faith. NIXI appoints an arbitrator from its empanelled list. The respondent is served and gets a chance to file a response. The arbitrator may call for further submissions. There is usually no oral hearing. A reasoned award is passed, typically within 60 to 90 days. If you win, the standard remedies are transfer of the domain to you, or cancellation of the registration. Most complainants ask for transfer — that is the practical outcome that lets you finally use the right address.
INDRP awards are binding. NIXI implements them. There is no appeal within INDRP, but a party unhappy with the award can in theory challenge it under the Arbitration and Conciliation Act 1996, although this is rare in practice and the standards for setting aside an award are high.
UDRP: For .com and Global Domains
The Uniform Domain-Name Dispute-Resolution Policy (UDRP) was created by the Internet Corporation for Assigned Names and Numbers (ICANN) in 1999. It applies to .com, .net, .org and most other generic top-level domains, and to many country-code domains too. The most common forum is the WIPO Arbitration and Mediation Centre, but several other accredited providers exist.
The three-element test under UDRP is essentially the same as INDRP. Complainant must show: (i) the domain is identical or confusingly similar to its trademark; (ii) the registrant has no rights or legitimate interests; and (iii) the domain was registered and is being used in bad faith. The "and" is sometimes important — UDRP requires both registration in bad faith and use in bad faith, while INDRP allows either. In most real-world cases this distinction does not matter.
UDRP's remedies are the same as INDRP — transfer or cancellation. The procedure is also documents-only, with strict word limits and tight timelines. WIPO publishes its decisions, and panels rely heavily on a body of precedent built up over more than two decades. Indian brand owners regularly recover .com domains through WIPO; the cost is in dollars but predictable.
Many brand owners with international exposure run INDRP and UDRP in parallel — one for the .in copy, one for the .com copy — using the same evidence file.
Civil Suit in an Indian Court
The third route is a civil suit. This is the only route if you also want money damages, if you need an injunction against the squatter's other business activities under the same name, or if the dispute is part of a wider passing off battle.
The cause of action is passing off (or, where your trademark is registered, infringement plus passing off under the Trade Marks Act 1999). The Supreme Court in Satyam Infoway v Sifynet confirmed that a domain name "may have all the characteristics of a trade mark and could found an action for passing off." The Delhi High Court in Yahoo v Akash Arora and the Bombay High Court in Rediff v Cyberbooth together set the foundational principles. The Marks & Spencer line of English authority — that a person who deliberately registers a domain name on account of its similarity to another's mark must expect an injunction — is regularly cited by Indian judges.
What you can ask the court for, under Section 135 of the Trade Marks Act 1999, is a familiar list: an injunction restraining further use; damages or an account of profits at your option; and delivery up of any infringing material. Courts also routinely direct the domain registrar to transfer or block the disputed name.
The biggest advantage of the civil route is speed of the temporary injunction. Order XXXIX of the Code of Civil Procedure 1908 lets you apply for an immediate restraining order — even ex parte — pending trial. A cybersquatter actively running a confusing site can be shut down within days when the court is satisfied that the balance of convenience tilts in your favour and irreparable injury is likely.
What Counts as Bad-Faith Registration
Bad faith is the third element of the INDRP and UDRP tests, and the central battleground of most contested cases. Indian decisions, including Pen Books v Padmaraj (Kerala 2004), have spelled out the typical bad-faith situations:
- The domain was registered or acquired primarily to sell, rent or transfer it to the trademark owner (or to a competitor) for valuable consideration in excess of the registrant's out-of-pocket costs.
- The domain was registered to prevent the trademark owner from reflecting its mark in a corresponding domain name, where there is a pattern of such conduct.
- The domain was registered primarily to disrupt the business of a competitor.
- By using the domain, the registrant has intentionally attempted to attract internet users for commercial gain to its site by creating a likelihood of confusion with the trademark owner's mark.
Other circumstances that arbitrators routinely treat as bad-faith indicators: false or hidden contact details in WHOIS, a portfolio of similar look-alike domains held by the same registrant, redirection of the domain to a competitor's site, demands for ransom by the registrant once the brand owner makes contact, and registration immediately after the brand owner's name appears in news or on social media. Courts and panels combine these factors holistically — the more boxes the squatter ticks, the harder it is for them to claim innocent registration.
Cybersquatting Evidence Checklist
Whether you go to INDRP, UDRP or court, the case is won on documents. Start your file today.
- Proof of your rights in the brand: trademark registration certificate (Indian and foreign), application receipts, common-law evidence of use — first invoice, packaging, signage, social media archives.
- Proof of goodwill: sales figures, GST returns, advertising bills, press coverage, awards, customer testimonials.
- WHOIS record of the disputed domain — capture it the same day, and again periodically. Squatters often hide details after they get notice.
- Dated screenshots of every page on the disputed domain, including parking pages, error pages, and any "for sale" notices. Use a timestamping service or take screen recordings.
- Email or chat records of any contact between you (or anyone on your behalf) and the registrant, especially any ransom demands or sale offers.
- Pattern evidence: WHOIS records of any other look-alike domains held by the same registrant. A portfolio of squatter registrations strengthens the bad-faith case.
- Customer confusion evidence: emails, support tickets, social posts where customers say they were misled. Even one well-drafted customer affidavit can close the case.
- Industry context: news of your brand's reputation, dates of launch, milestones — to show that the squatter could not have been ignorant of your name.
Which Route Should You Choose?
For most small business owners, the practical sequence looks like this:
- Cease-and-desist legal notice first. Cheap, fast, often enough.
- If ignored, INDRP for .in or UDRP for .com — depending on the domain's extension. Run both in parallel if you have look-alikes on both.
- If the squatter is also trading under your name (a website actively selling goods, an Instagram handle, real customers being deceived), file a civil suit for passing off and seek a temporary injunction. The injunction can also direct the domain registrar to transfer or block the domain.
- For cross-border disputes, layer in WIPO UDRP alongside the Indian suit — the panels often decide before the Indian court does.
What you do not do is wait. Squatters are patient. They sit on names for years, hoping the brand grows enough that you will pay. The longer you wait, the more credible their "we have used this for a long time" story becomes, and the easier it is for them to argue legitimate interest under the second element of the test.
What Should I Actually Do Now?
- Capture the WHOIS record today. Save the page, take a screenshot, note the date. Squatters routinely switch to privacy services after getting a notice.
- Take dated screenshots of every page on the disputed domain. Include any "for sale", parking, error, or redirected pages. Save the HTML if you can.
- Pull together your trademark file: registration certificate, applications, first-use evidence, sales figures, advertising. This is your proof of rights and goodwill.
- Check if there are other squatter domains by the same registrant. Search the WHOIS for similar names, hyphenated versions, plurals, common misspellings, and other extensions (.in, .co.in, .net, .org).
- Send a legal notice through a lawyer. Cite the trademark, the three-element test, the relevant case law, and demand transfer (not just stop-use). Give a clear deadline.
- If the deadline passes, file an INDRP or UDRP complaint. Both are affordable compared to litigation and decide quickly.
- If the squatter is also doing business under your name, file a civil suit alongside, and seek a temporary injunction. The civil suit also lets you claim damages and attack the related copyright in your website's content and design if that has been copied too.
- Run takedowns in parallel on social media platforms (Instagram, Facebook, X, YouTube) — they have separate impersonation and trademark policies.
- Talk to a lawyer who has actually handled domain disputes. The procedural details — choice of forum, framing of bad faith, evidentiary records — make a real difference.
Domain disputes look intimidating from the outside, but they are among the cleanest commercial battles to fight, because the rules are clear and the timelines are short. Most brand owners we work with at Pinaka Legal recover the disputed domain within weeks of moving to INDRP or UDRP — sometimes simply on the strength of a serious legal notice. What kills cases is delay and weak evidence. If you start collecting the file the day you discover the problem, your position is already half-won.
Frequently Asked Questions
Is a domain name protected like a trademark in India?
Yes. Indian courts have held that a domain name is more than a mere internet address — when used in connection with a business it serves the same function as a trademark and is entitled to equal protection. The Supreme Court has accepted that domain names can be the subject of a passing off action. So if your brand has goodwill, a confusingly similar domain name registered by someone else can be challenged in court.
What is INDRP and when do I use it?
INDRP stands for the .IN Domain Name Dispute Resolution Policy. It is the dispute resolution system for any .in or .co.in domain. You file a complaint with NIXI, the .IN Registry. An arbitrator is appointed, the matter is decided usually within a couple of months on documents, and if you win, the domain is transferred to you or cancelled. There is no oral trial. Use it whenever the disputed domain ends in .in or .co.in.
What is UDRP and how is it different?
UDRP stands for the Uniform Domain-Name Dispute-Resolution Policy. It is the global system run by ICANN for .com, .net, .org and most other generic top-level domains. WIPO's Arbitration and Mediation Centre is the most common forum. The three-element test is essentially the same as INDRP. UDRP applies to .com and similar global domains; INDRP applies to .in. Many brand owners run both in parallel if both kinds of look-alike domains exist.
What three things must I prove to win an INDRP complaint?
You must prove all three: first, that the disputed domain is identical or confusingly similar to a name, trademark or service mark in which you have rights; second, that the registrant has no rights or legitimate interests in the domain; and third, that the domain has been registered or is being used in bad faith. Bad faith includes registering the domain to sell it back to you, to disrupt your business, or to attract internet traffic by creating confusion.
What counts as bad-faith registration?
Bad faith is shown when the registrant attempted to attract internet users to its site for financial gain by creating confusion with your trademark, registered the domain to prevent you from reflecting your mark in a corresponding domain, registered to disrupt your competitor's business, or has a pattern of registering similar look-alike domains. Offering to sell the domain back to you for an inflated price is also classic evidence of bad faith.
Can I just send a takedown notice instead of going to arbitration?
You can — and many disputes settle exactly this way. A well-drafted cease-and-desist legal notice, citing the three-element test and your trademark rights, often gets the domain transferred without arbitration. It costs little, creates a record, and gives the squatter a chance to retreat. If they ignore it or demand a ransom, you escalate to INDRP, UDRP, or court.
Should I file in court or in INDRP?
Both options exist. INDRP and UDRP are faster, cheaper, and decided on documents — but they only deal with the domain name itself; no damages, no costs. A civil suit in an Indian court is slower and more expensive but can give an injunction, damages, account of profits, and an order against use of the same name in business. Many brand owners pick INDRP first for speed, then sue separately if the squatter is also trading under the name.
What if the squatter has not put up any website?
Mere registration without active use can still be cybersquatting. INDRP and UDRP both treat passive holding as evidence of bad faith when combined with other factors — the registrant having no plausible legitimate use for the name, having concealed contact details, or having a history of registering look-alike domains. Indian courts have similarly granted injunctions where a domain was registered with the apparent intention to sell, even before a website was launched.
Can I get the domain transferred to me, not just cancelled?
Yes. The standard remedies under both INDRP and UDRP are transfer of the domain to the complainant or cancellation of the registration. Most successful complainants ask for transfer because it is the practical outcome that lets you finally put up your own website on the right address. Transfer is what the panels grant when the three elements are made out.
How long does an INDRP case take?
Quite fast. Once the complaint is filed and accepted, an arbitrator is appointed under NIXI's panel. The respondent gets a chance to reply, the parties may file further submissions, and the arbitrator passes a reasoned award — usually within sixty to ninety days. There is no oral hearing in most cases. Compared to civil court, this is significantly quicker.
What about social media handles that copy my brand?
INDRP and UDRP do not cover social media handles — those are governed by each platform's own takedown policy (Instagram, Facebook, X, YouTube). But Indian courts have treated handles and online identifiers as a form of trademark use. You can include the impersonating handle in a civil passing off suit, and you should file platform-level reports in parallel using their impersonation and trademark complaint forms.
Do I need a registered trademark to file INDRP or UDRP?
A registration helps a great deal but is not strictly required. Both INDRP and UDRP recognise rights based on use and goodwill — a common-law unregistered mark with proven reputation can ground a complaint. That said, an Indian or foreign registration certificate is the strongest evidence and usually closes the first element of the test in your favour without much argument.
For more articles on Indian law, visit the Pinaka Legal Blog.
Written by the Pinaka Legal Editorial Team. For queries, call +91 8595704798 or email info@pinakalegal.com.