Is Using Someone Else's Domain Name Illegal?

Domain names function similarly to trademarks in commerce. Registering or using a domain that incorporates someone else's trademarked name — especially with intent to profit — is known as cybersquatting and is prohibited under the Anticybersquatting Consumer Protection Act (ACPA).

This is a distinct legal issue from copying someone's website content or impersonating someone in comments, but it shares the same underlying principle: using another party's intellectual property for your own benefit can result in legal liability.

Using someone else's domain name is most likely illegal when:

• You register a domain identical or confusingly similar to a trademark with bad faith intent — this is the core definition of cybersquatting under the ACPA (15 U.S.C. § 1125(d))
• You use the domain to divert customers from the legitimate business to your own site
• You register the domain to sell it back to the trademark owner at a profit — this is classic bad faith cybersquatting
• You create a fake version of an existing website using a similar domain (typosquatting) to deceive users
• You use a confusingly similar domain in commerce in a way that infringes the trademark holder's rights
• You impersonate a company or individual through the domain name to defraud users

Bad faith indicators courts consider include: offering to sell the domain to the trademark owner, providing false contact information, and registering multiple trademarked domains.

Using a domain that includes a trademarked term may be legal when:

• You have a legitimate prior claim — if your own name or business name matches a later-registered trademark, you generally have priority
• The domain is used for genuine commentary or criticism — sites like "[brand]sucks.com" have been upheld as protected free speech in some cases
• The term is generic or descriptive — trademarks do not protect every use of a common word, only its use as a brand identifier
• You are a reseller or fan site — in some circumstances, domains identifying a product for resale or fan community purposes are permitted under the nominative fair use doctrine
• You registered the domain before the trademark existed — priority of registration can matter, though trademark law is complex

The key factor is always intent: was the domain registered to trade on someone else's goodwill, or for a legitimate independent purpose?

Penalties for cybersquatting and trademark infringement through domain use:

• ACPA statutory damages: $1,000–$100,000 per domain, at the court's discretion
• Domain transfer or cancellation: Courts can order the domain seized and transferred to the trademark owner
• Trademark infringement damages: Actual damages, lost profits, and attorney's fees in egregious cases
• UDRP proceedings: The Uniform Domain Name Dispute Resolution Policy allows trademark holders to recover domains through arbitration, often within 60 days, without going to court
• Criminal charges (rare): If the domain is used to commit fraud or phishing, separate criminal charges apply

In most cases, the trademark owner first files a UDRP complaint with ICANN, which is cheaper and faster than litigation. If the panel finds bad faith, the domain is transferred within weeks.

If the domain owner fights the UDRP decision, the dispute can move to federal court under the ACPA. Trademark holders with strong cases often win quickly, especially against obvious typosquatters.

If the domain was used for phishing or fraud — for example, mimicking a bank's domain to steal login credentials — federal criminal charges for wire fraud or identity theft can follow. These are more serious and carry potential prison time.

Sometimes trademark holders send a cease-and-desist first, giving the registrant a chance to transfer the domain voluntarily.

To avoid legal trouble with domain names:

• Search the USPTO trademark database before registering a domain to check for conflicting trademarks
• Avoid registering misspellings of well-known brands — this is the clearest form of cybersquatting
• Do not register domains with the intent to sell them to brand owners — this demonstrates bad faith
• If you legitimately want a domain similar to a trademark, consult an attorney before registering
• Use accurate WHOIS contact information — false registration details are a bad faith indicator under ACPA
• Do not build a site that mimics an existing brand's look or content — this compounds infringement with potential fraud claims
• Understand that copying someone's site content onto a similarly named domain creates overlapping trademark and copyright liability