FAQ: prove bad faith registration of a .au domain

What does it mean to prove bad faith registration of a .au domain?

Proving bad faith registration of a .au domain means satisfying the three-element test under the auDRP, which mirrors Paragraph 4(a) of the UDRP but treats the bad-faith limb with some flexibility. The complainant must show: (1) the disputed domain is identical or confusingly similar to a trademark or service mark in which the complainant has rights; (2) the registrant has no rights or legitimate interests in the domain; and (3) the domain was registered or is being used in bad faith.

That third element is where .au disputes often diverge from a pure UDRP analysis. Under the UDRP the bad-faith requirement is cumulative – registration and use must both be in bad faith. The auDRP reads the limb with somewhat more flexibility in some respects, meaning that use in bad faith after an apparently neutral registration may still ground a complaint. In our practice, this distinction matters most when a registrant claims it had no specific intent at the moment of registration but has since turned the domain to a harmful purpose.

Bad faith is not a single act. Panels assess the whole picture: the timing of registration relative to the complainant's mark, the content of the site, whether a buy-back demand was made, whether the registrant is a known pattern registrant, and whether there is any plausible non-infringing use for the name.

What evidence is needed to prove bad faith registration of a .au domain?

The evidence needed to prove bad faith registration of a .au domain falls into three categories: trademark rights, the registrant's lack of legitimate interest, and the specific conduct that demonstrates bad faith. Each category must be addressed in the complaint; a gap in any one of them can defeat an otherwise strong case.

For trademark rights, the complainant needs documentation of the registered mark or, where unregistered rights are asserted, evidence of use and reputation in Australia – advertising spend, sales volumes, media coverage, statutory declarations, and the like. The stronger the Australian reputation, the easier it is to argue the registrant knew of the mark when filing.

For legitimate interest, the complainant typically shows the registrant was not authorized to use the mark, is not commonly known by the name, and made no bona fide offering of goods or services under it before notice of the dispute. Screenshots of the website, RDDS/WHOIS data, and any correspondence with the registrant all go into this part of the record.

For bad faith, the most common evidence includes: a pay-per-click or parking page that monetizes the complainant's mark; an offer to sell the domain at a price well above registration cost; a pattern of registering third-party marks across multiple domains; use of the domain to disrupt the complainant's business; or deliberate attempts to attract users by creating brand confusion. Panels have consistently held that passive holding – leaving a domain unused with no plausible legitimate purpose – can itself constitute bad faith use, particularly when the complainant's mark is well-known.

One practical point we reinforce with every complainant: preserve the evidence early. Screenshots of the resolving website, archived copies through web-archival services, and any email or social-media contact with the registrant should be gathered before filing. Registrants sometimes alter or blank the site once they learn a complaint is coming.

How long does it take to prove bad faith registration of a .au domain?

A standard auDRP case typically runs about two months from filing to a panel decision, mirroring the UDRP's general timeline. Once the complaint is formally commenced by the forum, the registrant has 20 days to file a response. After that window closes – whether or not a response was filed – the forum appoints a panel, which then issues its decision.

Several variables stretch that baseline. A request by either party for a three-member panel adds time to the appointment process. A procedural complexity – a supplemental filing, a settlement pause, or a challenge to the complaint's formal compliance – can extend the overall period by weeks. Defaults (where the registrant does not respond) do not automatically shorten the timeline significantly, because the panel still conducts a full review of the complainant's evidence.

Importantly, the registrar places the domain on a transfer lock once the proceeding commences. The registrant cannot transfer or delete the domain during the proceeding. That lock is a practical safeguard that prevents the domain from being moved to another registrant in an attempt to moot the complaint.

If you need a faster resolution because the domain is actively causing brand damage – diverting customers, redirecting to a competitor, or being used in a phishing campaign – document the harm in detail. That record supports the urgency of your case and may be relevant if you later need to seek a court-based interim measure in parallel.

For a read on whether the three auDRP elements are met in your situation, reach us at info@cognomenlaw.com.

What does it cost to prove bad faith registration of a .au domain at auDRP?

The auDRP filing fee is a separate, official cost set by the administering provider, and it is distinct from any legal fee you pay to counsel. The specific fee depends on which approved provider handles the proceeding and how many domains are covered; verify current fees directly with the provider before filing, as they can change.

For context, the WIPO filing fee for a comparable single-domain UDRP complaint starts at USD 1,500 for a single-member panel. auDRP fees at the available providers are in a broadly comparable range, though they are denominated differently and should be confirmed at source.

Legal fees for preparing and filing an auDRP complaint – drafting the complaint, assembling evidence, and selecting the right arguments on the bad-faith limb – typically fall in a range that market participants describe as a flat fee. The exact figure depends on complexity: a straightforward cybersquatting case where the registrant has parked the domain and made a buy-back offer requires less work than a defended case where the registrant asserts a prior right or a fair-use argument.

One cost consideration that is easy to overlook: if the registrant requests a three-member panel and the complainant originally requested a single panelist, the parties generally split the higher three-member fee. Budget for that possibility when you file.

No monetary damages are available through the auDRP. If damages are part of your goal, a court action under Australian anticybersquatting principles – handled with local litigation counsel in Australia – is the only path that reaches money, but it is substantially more expensive and slower than the administrative procedure.

Can I prove bad faith registration of a .au domain for more than one domain at once?

Yes. The auDRP, following the UDRP's rules, permits a single complaint to cover multiple domains, provided all disputed domains are registered by the same holder. That requirement – same registrant across all domains in the complaint – is strictly applied. If a cybersquatter has registered several .au variants of your mark under a single registrant account, you can address all of them in one filing and pay a single (typically higher) fee rather than separate complaints.

In practice, this matters most when a pattern of registration is itself the evidence of bad faith. Paragraph 4(b) of the UDRP – which auDRP panels apply by analogy – identifies a pattern of abusive registrations of third-party marks as a non-exhaustive indicator of bad faith. If you can show the registrant has done this not just with your mark but with other well-known names, that pattern evidence can significantly strengthen your complaint.

Where the same bad actor has spread registrations across multiple registrant accounts or across multiple zones – for instance, a .au registration alongside a .com – each zone requires its own separate proceeding. The .com would be handled under the UDRP at WIPO or the Forum; the .au under the auDRP. We regularly advise complainants who face this multi-zone problem, because coordinating the filings to produce consistent evidence records across both proceedings is important. A decision in the .com case, for example, can be cited as supporting context (though not binding) in the .au proceeding.

What are the possible outcomes when you prove bad faith registration of a .au domain?

The only remedies available through the auDRP are transfer of the domain to the complainant or cancellation of the registration. No monetary award, no injunction, and no costs order is available through the administrative procedure. The panel chooses between transfer and cancellation based on the relief requested; complainants almost always request transfer, since that puts them in control of the domain.

If the panel finds in the complainant's favor, it issues a transfer order. The registrar implements the order after a brief waiting period – typically about ten business days – during which the registrant can seek a court stay. If no stay is filed, the registrar transfers the domain. That implementation step is ministerial; the registrar follows the order without re-examining the merits.

There is also a risk-side outcome for complainants: a finding of Reverse Domain Name Hijacking (RDNH). If the panel concludes the complaint was filed in bad faith – for instance, to wrest a domain from a legitimate registrant who registered it without any knowledge of the complainant's mark – it may enter an RDNH finding. That finding carries no financial penalty, but it is a public reputational mark. We have defended registrants in exactly these situations, where an overstretched complaint targeted a domain the registrant acquired in good faith years before the complainant's mark became prominent.

Where the auDRP does not reach the harm – because the registrant is using the domain in a way that requires injunctive relief or because the complainant wants damages – Australian court proceedings remain an option. Those proceedings require local litigation counsel in Australia and are materially more resource-intensive than the administrative route, but they offer a broader range of remedies.

How does the .au bad-faith standard compare to a standard UDRP complaint?

The auDRP closely tracks the UDRP's three-element structure, but the bad-faith element is treated with more flexibility in some respects. Under the UDRP, a complainant must show the domain was registered and used in bad faith – both at the time of registration and at the time of the complaint. Under the auDRP, as with some other ccTLD procedures such as the Nominet DRS for .uk, panels have in some decisions been prepared to consider bad faith that manifests primarily in use even where the registration itself was arguably neutral.

This matters in situations where a registrant can point to a plausible reason for the original registration – for example, a personal name that later became a brand – but has since turned the domain to a clearly abusive purpose. Under a strict UDRP analysis, that registration might survive scrutiny on the third element. The auDRP's more flexible reading can tip the balance toward the complainant in borderline fact patterns.

The eligibility rules for holding a .au domain add a further dimension. .au registrations require an Australian nexus – an ABN, ACN, or trademark registration, or personal Australian residency for .id.au, among other categories. A complainant seeking to obtain the domain by transfer must itself satisfy those eligibility requirements. If it does not have an Australian presence, cancellation rather than transfer may be the practical outcome, or the complainant may need to establish the necessary nexus before filing.

For brand owners operating across both a .com and a .au, this eligibility issue is one of the first things we check. Filing a transfer complaint when you cannot hold the resulting domain is a procedural problem that should be resolved before the complaint is drafted.