FAQ: escalate a registrar lock to secure a .br domain

A .br domain disappears from your account overnight. The registrant record shows a stranger's name. You need the transfer stopped — and you need it stopped before the new registrar releases the name to a buyer. That is exactly the situation where knowing how to escalate a registrar lock to secure a .br domain determines whether recovery is possible at all.

Brazil's .br namespace is administered by NIC.br under Registro.br. There is no UDRP for .br. Disputes over .br domains proceed through SACI-Adm, the administrative arbitration procedure operated by Registro.br, or through the Brazilian courts. A registrar lock — formally a transfer-prohibition flag placed on the domain record — can freeze the name while either route is pursued, but the path to obtaining and enforcing that lock differs sharply from the gTLD arbitration familiar to most brand owners.

The questions below cover the lock mechanics, the choice between SACI-Adm and court, the evidence that matters, and what to do when the registrant goes silent.

When can I escalate a registrar lock to secure a .br domain?

A registrar lock becomes the immediate priority the moment unauthorized transfer activity is detected on a .br domain — whether through account compromise, social-engineering of the registrar, or a fraudulent change-of-registrant request. Under Registro.br's rules, a lock (bloqueio de transferência) prevents the domain from being moved to another registrar or transferred to a new registrant while a dispute or security review is in progress. The lock does not itself resolve ownership; it preserves the status quo so that a resolution — through SACI-Adm, a court injunction, or negotiated transfer reversal — has something to act on.

Escalation is appropriate in at least three situations. First, if you discover that your Registro.br account credentials were compromised and the domain was moved without your knowledge. Second, if a third party filed a false change-of-registrant request using forged documentation. Third, if the domain is being held by a registrant who acquired it through procedurally improper means and is already advertising it for resale. In each case, speed is critical. Registro.br's internal security team can place an administrative hold, but the request must be supported by documentation showing the legitimate prior registrant's identity and the nature of the alleged irregularity.

In our practice, we have seen cases where the window between an unauthorized transfer and a downstream resale is measured in days, not weeks. Acting without a clear evidentiary record wastes that window. The first step is assembling the account ownership evidence — invoices, historical WHOIS/RDDS records, registration confirmation emails, and any correspondence with Registro.br — before filing the escalation request.

For an assessment of your domain dispute, contact info@cognomenlaw.com.

Who can escalate a registrar lock to secure a .br domain for a .br domain?

The party with standing to request an administrative lock from Registro.br is the prior legitimate registrant — the entity or individual who held the domain before the alleged unauthorized transfer — or a duly authorized representative acting on their behalf. Brazilian procedural rules require that the person requesting intervention demonstrate a direct legal interest in the domain. A brand owner who never registered the domain but believes the current registration infringes a trademark cannot obtain a registrar lock through the Registro.br administrative channel alone; that party's route is a civil court injunction supported by trademark rights.

For corporate registrants, Registro.br requires documentary proof that the representative has authority to act: a power of attorney, corporate resolution, or equivalent instrument under Brazilian law. Foreign companies must present certified and apostilled documentation if the underlying corporate records were issued outside Brazil. We regularly advise foreign brand owners on the formalities that Registro.br requires — and on the distinction between what the registry's administrative channel can do and what only a Brazilian court can compel.

Does SACI-Adm or a court decide a .br dispute?

SACI-Adm — the Sistema de Administração de Conflitos — is Registro.br's dedicated administrative dispute procedure for .br domains. It handles cases where a party argues that a registration was made or is being used in bad faith relative to third-party rights, in particular trademark rights. SACI-Adm is the faster route for trademark-based disputes: the procedure is administered online, conducted in Portuguese, and produces a decision on transfer or cancellation without requiring the parties to appear in court.

The Brazilian courts are the alternative — and sometimes the only viable — route. Court intervention is necessary when the dispute involves allegations of fraud or criminal conduct (such as account hijacking or identity fraud in a registrar submission), when interim relief such as a preliminary injunction freezing the domain is needed more urgently than SACI-Adm can provide, or when the dispute raises questions of contract or property law beyond the administrative procedure's scope. A court injunction can be sought ex parte in urgent circumstances, which means the court may act before the opposing party is notified — an important advantage when a domain is at risk of immediate resale.

The practical decision matrix looks like this. If you are a brand owner with registered Brazilian trademark rights and the registrant is a clear cybersquatter, SACI-Adm is usually the proportionate first move. If the domain was taken from you by fraud, or if the registrant is already in the process of transferring it onward, a court application with an emergency injunction request is typically necessary — handled with local litigation counsel in the relevant jurisdiction. If both elements are present, the two routes are not mutually exclusive: a court injunction can freeze the domain while a SACI-Adm complaint proceeds on the merits.

This is a material difference from gTLD disputes. Under the UDRP — which does not apply to .br — the only remedies are transfer or cancellation, and no interim lock is formally part of the procedure. In .br, the registrar lock and the merits proceeding are conceptually separate tools that work in sequence.

What evidence decides the outcome of a .br domain dispute?

Evidence strategy differs depending on the route. In a SACI-Adm proceeding, the standard analysis requires the complainant to demonstrate: rights in a name or mark; that the registration is abusive relative to those rights; and that the registrant lacks a legitimate purpose. The documentary record that supports those elements includes Brazilian trademark registration certificates (or, for well-known marks, proof of recognition under the applicable national trademark act), historical screenshots showing how the domain has been used, and evidence of the registrant's conduct — demand letters, parking page monetization, or offers to sell to the mark owner.

In a theft or unauthorized-transfer scenario, the evidence set is different. Here the core documents are: the original Registro.br registration confirmation; account access logs and timestamps; any communication from Registro.br about the change-of-registrant event; evidence of the social-engineering technique used (phishing emails, fraudulent support tickets, SIM-swap records); and, where available, a forensic record of the account compromise. Panels and courts alike have treated a continuous, documented history of legitimate registration — payment records, renewal receipts, correspondence with the registry — as strong evidence that the transfer was unauthorized.

What tends to defeat a recovery claim? Gaps in the documentary chain are the most common problem. If the prior registrant cannot produce renewal confirmations or billing records covering the period up to the alleged theft, establishing that they were the legitimate holder at the time of transfer becomes harder. Registration in a name other than the brand owner's own corporate name — a common situation where a domain was registered by a contractor or a former employee — creates additional documentation burdens.

What if the registrant does not respond?

In a SACI-Adm proceeding, a registrant who does not file a response within the prescribed period is treated as having defaulted. The proceeding continues on the evidence the complainant submitted. Default does not automatically result in transfer; the panel still reviews whether the complainant has met the requirements. However, a default removes any factual counter-narrative from the record, and panels have consistently treated non-response as a factor consistent with bad faith where the other elements are established.

In a court proceeding, non-response by a defendant triggers the applicable rules of Brazilian civil procedure. A court may issue a default judgment, and where interim injunctive relief has already been granted, the domain lock remains in force throughout. The practical risk of court default is that enforcement of a Brazilian court order against a foreign registrant or registrar introduces additional complexity — that enforcement step requires local litigation counsel in the relevant jurisdiction and a separate legal analysis of the registrant's assets and location.

Can the decision be appealed or challenged?

A SACI-Adm decision can be challenged, but the grounds and mechanism depend on Registro.br's current procedure rules — verify the current rules with counsel, as they are subject to amendment. Generally, administrative dispute decisions of this type are subject to review by a superior panel or, ultimately, to challenge in the Brazilian courts on grounds of procedural irregularity or breach of due process. A losing party in SACI-Adm who believes the panel exceeded its authority or failed to consider material evidence may seek judicial review, though Brazilian courts are not automatically required to accept the case on the merits simply because the administrative outcome was adverse.

Court decisions follow ordinary Brazilian appellate procedure. First-instance decisions are appealable to the state court of appeals and, on specific legal questions, to the Superior Tribunal de Justiça. Domain-name cases rarely reach that level, but the possibility is real where significant commercial value or complex trademark rights are in dispute. The key practical point: a SACI-Adm decision and a court decision operate in parallel legal systems. A favorable SACI-Adm order directing Registro.br to transfer a domain is implemented administratively; a court injunction is enforced through judicial channels. If the registrant ignores an administrative transfer order, court enforcement becomes necessary.

How does escalating a registrar lock in .br compare to the UDRP for .com?

The comparison matters because many brand owners encounter .br disputes after handling .com disputes and assume the procedures are equivalent. They are not. The UDRP — which applies to .com, .net, .org, and most new gTLDs — does not apply to .br. The UDRP provides no mechanism for an interim lock; it simply proceeds to a merits decision (transfer or cancellation) in approximately two months, with a USD 1,500 WIPO filing fee for a single-member panel. The only forum choices are WIPO, the Forum, CAC, and ADNDRC, all operating under a unified rule set.

For .br, the equivalent administrative route is SACI-Adm, operated solely by Registro.br, with no choice of provider. The substantive test under SACI-Adm differs in its structure from the UDRP's three-element test, and the procedural rules — language, documentation requirements, response periods — are distinct. More importantly, .br does not separate the interim lock mechanism from the merits proceeding in the way UDRP filings sometimes operate alongside voluntary registrar locks. In .br, the lock request and the merits dispute are legally distinct actions that must often be pursued simultaneously through different channels.

If a brand owner holds both a .com and a .br that have been cybersquatted, we advise treating the two as separate proceedings requiring separate strategies — one governed by the UDRP at a provider of the complainant's choice, the other by Registro.br's SACI-Adm and, where necessary, the Brazilian courts.

To weigh UDRP against a court action for your case, email info@cognomenlaw.com.

Related at COGNOMEN

• Court action and domain theft recovery — the full service overview
• Enforcing a UDRP decision for a .tv domain across jurisdictions
• FAQ: requesting a three-member panel in a .dev dispute

Author: Adrian Harland — Court anticybersquatting and domain theft recovery. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.