FAQ: reverse an unauthorized transfer of a .pl domain

What does it mean to reverse an unauthorized transfer of a .pl domain?

An unauthorized transfer is a change of registrant, registrar, or account holder that the legitimate owner did not initiate or approve. Reversing it means restoring the domain – its registration, its DNS authority, and its WHOIS record – to the original holder. Under Polish law, the claim rests on the established ownership or contractual relationship between the original registrant and NASK or the accredited registrar. The legal basis is civil law: contract breach, tort, or a combined claim, depending on how the transfer was effected. A court order compelling the registrar and NASK to reverse the technical transfer is the usual goal. Without that order, or at minimum a voluntary agreement by the current holder, neither NASK nor the registrar will reverse the change unilaterally.

How does an unauthorized transfer of a .pl domain happen?

The most common mechanism is account compromise at the registrar level: a credential breach, a phishing attack, or a SIM-swap that gives a third party control of the email address tied to the domain account. From there, the attacker either changes the registrant contact data and initiates an intra-registrar transfer, or moves the domain to a second registrar using the authorization code generated from within the compromised account. Less commonly, the transfer results from fraudulent documentation submitted directly to NASK or the registrar – a forged agreement purporting to assign the domain. In our practice, we see both routes, and the evidence needed differs depending on which was used.

Is there a UDRP for .pl, or does it go to Polish courts?

There is no UDRP procedure for .pl. Poland's .pl zone is administered by NASK, which has not adopted the UDRP or an equivalent arbitration-based transfer mechanism for theft disputes. Claims to reverse an unauthorized transfer of a .pl domain therefore proceed before the Polish civil courts, with local litigation counsel in Poland handling the court filings. NASK does publish rules governing registration and transfer, and those rules are the contractual foundation for the court claim. A court action also allows the claimant to seek interim relief – a temporary injunction blocking further transfer of the domain – while the substantive case is heard. That injunction is the practical equivalent of the registrar lock that WIPO or the Forum can request in a UDRP matter, but it requires a court application rather than a form submission.

What evidence is needed to reverse an unauthorized transfer of a .pl domain?

The evidence that courts and registrars find persuasive falls into three categories. First, proof of the original registration: registration confirmation emails, invoices for renewal fees, WHOIS screenshots predating the incident, and any correspondence with NASK or the registrar establishing that you were the account holder. Second, evidence of unauthorized access: server logs, registrar access logs (obtainable via a subject-access or court-ordered disclosure request), email provider security alerts, or records of the phishing or SIM-swap event. Third, evidence of your continued legitimate interest: the domain's role in a live website, a trademark registration that corresponds to the name, or commercial use that demonstrates ongoing reliance. We regularly advise registrants that a gap in any one of these three areas is the most common reason a recovery claim stalls. The registrar may also hold internal logs of the transfer event; obtaining those early – through a formal preservation request – is a step we take at the outset of every theft recovery matter.

Can I reverse an unauthorized transfer of a .pl domain for more than one domain at once?

Yes, but the procedural approach depends on how the transfers are connected. If multiple .pl domains were taken in a single account-compromise event and they share the same chain of evidence, a single court action can address all of them, typically naming each domain as a separate subject of the claim. This consolidation is efficient and avoids conflicting interim orders. If the domains were transferred through different mechanisms or to different recipients at different times, the court may treat them as related but procedurally distinct claims. The practical question is whether the evidence of unauthorized access is common to all domains or specific to each. In either case, the interim relief application – seeking to block further transfer of all affected domains while the case proceeds – should be filed simultaneously, covering every domain in the portfolio that was compromised.

How long does it take to reverse an unauthorized transfer of a .pl domain?

Timelines for Polish court proceedings vary, and we will not invent a figure that civil litigation does not reliably produce. The interim-relief stage – the application for a temporary injunction or registrar lock – can move within a matter of weeks if the evidence is clear and the application is well-constructed. The substantive case, which determines the permanent restoration of the domain, takes longer: Polish civil courts can be measured in months, and in complex cases with contested facts, longer still. The registrar escalation that runs in parallel with the court action can sometimes produce a voluntary freeze or reversal faster than the court itself, particularly where the registrar's own internal policies identify the transfer as irregular. Acting within the first 24 to 72 hours of discovering the unauthorized transfer materially improves the odds of a quick voluntary freeze and limits the technical damage – DNS changes, SSL certificate changes, and email hijacking – that accumulates after an account is taken over.

What does it cost to reverse an unauthorized transfer of a .pl domain at Polish courts?

Polish court proceedings carry official court fees set by statute, and those fees vary with the value of the claim. Where the claim is framed as a contractual or property dispute, the court fee is calculated as a percentage of the claimed value – the market or commercial value of the domain. Legal fees for Polish local litigation counsel are separate and are typically billed on an hourly or matter-stage basis; the market range varies with the complexity of the claim and the seniority of counsel engaged. We handle the strategic and evidence-preparation layer – establishing the three evidentiary categories, preparing the registrar escalation, and coordinating with local litigation counsel in Poland – while Polish counsel manages the court filings directly. For a current fee estimate, contact us at info@cognomenlaw.com with the domain name and a summary of the transfer event.

What are the possible outcomes when you reverse an unauthorized transfer of a .pl domain?

The realistic outcome set has four entries. First, the best case: the registrar or the current holder agrees voluntarily to reverse the transfer on receipt of a formal demand supported by strong evidence, and the domain is restored without court proceedings. This happens more often than claimants expect when the evidence is unambiguous and the demand is made promptly. Second, a court-ordered transfer: the Polish court finds in the claimant's favor and compels the registrar and NASK to restore the domain to the original registrant. Third, a partial remedy: the domain is restored, but the damage done in the interim – DNS changes, email interception, website compromise – is addressed separately or not at all through the domain action alone. Fourth, an unsuccessful claim: the evidence is insufficient, the current holder mounts a credible defense, or the court denies interim relief and the domain moves again before the case concludes. No outcome is guaranteed. The facts of the compromise, the quality of the evidence, and the speed of the initial escalation are the three variables that separate the first outcome from the fourth.