Cybersquatting: How to Protect Your Brand Name Online

What is cybersquatting and why should you care?

Cybersquatting is the practice of registering domain names that incorporate someone else's brand name or trademark, typically with the intention of profiting from the brand owner's reputation. It might involve registering the exact brand name as a domain, registering common misspellings (known as "typosquatting"), or adding generic terms like "official" or "uk" to create misleading domains.

For UK businesses, cybersquatting represents a real and growing threat. Domain registrations cost as little as a few pounds per year, there are no checks against trademark registers during the registration process, and automated tools make it possible for bad actors to register hundreds of domains targeting different brands in a single day.

The consequences can be severe. A squatted domain might be used to redirect your potential customers to a competitor, host a phishing site that collects personal data from people who think they are on your website, display advertising that profits from your brand recognition, or simply sit unused while the squatter waits for you to offer money to buy it.

Types of cybersquatting

Understanding the different forms helps you protect yourself more effectively.

Classic cybersquatting

The squatter registers your exact business name as a domain (e.g., yourbusiness.co.uk or yourbusiness.com) before you do, or snaps it up when you forget to renew. They then offer to sell it to you at a premium.

Typosquatting

The squatter registers domains with common misspellings of your brand (e.g., "gooogle.com" or "faecbook.com"). Users who mistype your web address end up on the squatter's site instead of yours. These sites often display advertising or redirect to competitors.

Combo squatting

The squatter adds a generic word to your brand name to create a plausible-looking domain (e.g., "yourbusiness-support.com" or "yourbusiness-login.co.uk"). These are frequently used in phishing attacks.

Reverse cybersquatting

Less common, this is where someone tries to use trademark law to take a domain from someone who registered it legitimately. If you are falsely accused of squatting, you have the right to defend your registration.

Prevention strategies

The most effective approach is preventing squatting before it happens.

Register key domain variations early

At minimum, secure the .co.uk, .com, and .uk versions of your business name. If budget allows, also register common misspellings, hyphenated versions, and domains with generic additions like "official" or "uk." This costs 10 to 15 pounds per domain per year and is far cheaper than recovering a squatted domain later.

Set up auto-renewal

Many businesses lose domains simply because they forget to renew them. Enable auto-renewal with your domain registrar for all critical domains. Also make sure the email address on the registrar account is current, so you receive renewal reminders.

Register your trademark

A registered trademark is your strongest weapon against cybersquatters. It provides clear legal standing in domain disputes and significantly improves your chances of recovering a squatted domain through formal dispute resolution.

Monitor new domain registrations

Use domain monitoring tools to receive alerts when new domains containing your brand name are registered. Certificate Transparency logs are also useful, as they reveal new SSL certificates being issued for domains, which can alert you to new websites being set up using your name before they go live.

Lock your domains

Most registrars offer a "registrar lock" or "transfer lock" feature that prevents unauthorised transfers of your domain. Enable this for all your important domains.

Legal remedies for UK businesses

If prevention fails and someone has squatted on your domain, you have several routes to recover it.

Nominet DRS (for .uk domains)

The Nominet Dispute Resolution Service handles disputes over .co.uk, .org.uk, and .uk domains. To succeed, you must demonstrate that you have rights in the name (through a trademark, trading name, or personal name) and that the domain is an "abusive registration," meaning it was registered or used in a way that takes unfair advantage of your rights or causes unfair detriment.

The process starts with mediation (around 200 pounds plus VAT), which resolves many cases quickly. If mediation fails, an independent expert makes a binding decision (750 pounds plus VAT). This is substantially cheaper than court proceedings.

WIPO UDRP (for .com and other generic domains)

The Uniform Domain-Name Dispute-Resolution Policy, administered by the World Intellectual Property Organization, handles .com, .net, and other generic top-level domain disputes. You must prove three things: the domain is identical or confusingly similar to your trademark, the registrant has no legitimate interest in the domain, and the domain was registered and used in bad faith.

UDRP cases cost from approximately 1,500 US dollars and are typically decided within 60 to 90 days. The success rate for complainants with registered trademarks is high.

Court proceedings

For complex cases or where significant damages are involved, you can bring a claim under the Trade Marks Act 1994. Courts can order the transfer of a domain, award damages, and grant injunctions preventing future abuse. However, litigation is expensive and should be a last resort.

What to do right now

Start by understanding your current exposure. Run a free brand scan at GuardMyBusiness to discover which domains are currently registered using your business name. Our scan covers domain registries, WHOIS data, SSL Certificate Transparency logs, and web archives, giving you a complete picture of your domain landscape.

If you find squatted domains, our Full Investigation report identifies the registrant, assesses the risk level, and provides actionable recommendations for recovery. Early action is critical; the longer a squatter holds a domain, the more complex recovery becomes.

Protect your brand online before someone else profits from it.