FAQ: reverse an unauthorized transfer of a .tv domain

FAQ: reverse an unauthorized transfer of a .tv domain. UDRP and ccTLD domain recovery and defense across .tv. Email the firm to assess your case.

A .tv domain you built value into disappears overnight. The registrar's account now belongs to someone else. The WHOIS record shows a stranger as the new registrant. This is domain theft – and the clock starts the moment you notice it.

Reversing an unauthorized transfer of a .tv domain typically runs through two tracks: an emergency registrar escalation to freeze the name, followed by either a UDRP proceeding before WIPO (because .tv operates under the UDRP) or, where arbitration cannot reach, a court action for cybersquatting or conversion. The 20-day response window under the UDRP and the registrar's own lock policies make early action essential. No procedure guarantees recovery; outcomes depend on the evidence you can produce of the compromise and your prior rights.

The questions below address the mechanics, the evidence, and the realistic next steps for .tv domain theft recovery.

When Can I Reverse an Unauthorized Transfer of a .tv Domain?

You can pursue reversal as soon as you have documented evidence that the transfer was unauthorized – meaning it was not initiated by you or anyone you authorized, and it resulted from account compromise, social-engineering of the registrar, or a fraudulent inbound transfer request.

Because .tv is a ccTLD administered by the Government of Tuvalu but operated in the gTLD model – using ICANN-accredited registrars and explicitly adopting the UDRP – the same dispute route available for .com applies here. WIPO administers UDRP proceedings for .tv. That means the three-element test under Paragraph 4(a) of the UDRP governs: confusing similarity to a mark you hold, no legitimate interest of the current registrant, and registration and use in bad faith.

Unauthorized transfer by account compromise ordinarily satisfies the bad-faith element. The challenge is that the bad-faith registrant may re-transfer the domain quickly, making the registrar-lock step critical. In our practice, the first 48 hours after discovery determine how much of the evidence trail is recoverable and whether a lock can be placed before a second transfer occurs.

For an assessment of your domain dispute, contact info@cognomenlaw.com.

Does WIPO or a Court Decide a .tv Dispute?

For most unauthorized-transfer situations involving a .tv domain, WIPO is the primary forum – because .tv has adopted the UDRP and WIPO is its principal administrator.

A WIPO UDRP complaint for a single domain on a single-member panel carries a filing fee of USD 1,500. The process runs in five stages: complaint, response, panel appointment, decision, and registrar implementation. A standard case is normally resolved within about two months from filing. The only remedies available are transfer or cancellation – the UDRP awards no damages.

When does a court matter instead? Several situations push a .tv theft case toward litigation. First, if the thief has already monetized the domain and you want damages, only a court can award them. Second, if the compromise involved criminal conduct – phishing, unauthorized account access, identity fraud – a court action or law-enforcement referral may run in parallel with the registrar escalation. Third, if the registrar is unresponsive to an emergency lock request and the domain is migrating across registrars, a court injunction can halt the transfer where an administrative process cannot. We regularly advise clients to hold both paths open in the first week and to choose between them once the registrar's initial response clarifies how cooperative the process will be.

The decision matrix in brief: if you want the domain back with no monetary claim and the registrar will cooperate with a lock, WIPO is faster and less expensive. If you need damages or the registrar is the problem, court is the necessary route – handled with local litigation counsel in the relevant jurisdiction.

What Evidence Decides the Outcome in a .tv Theft Case?

Evidence of compromise is the foundation of any .tv theft recovery. A panel or court will look for documentation that the transfer was not authorized by the legitimate registrant.

The strongest evidence package typically includes: registrar account access logs showing login from an unfamiliar IP or device; email-provider compromise logs demonstrating that the account used to authorize the transfer was itself hijacked; registration history showing the complainant as the original and continuous registrant; proof of trademark rights (a registered mark, prior use evidence, or both); and correspondence with the registrar's abuse team showing when the complaint was raised. Screen-captured WHOIS data at multiple timestamps – before and after the unauthorized transfer – fixes the timeline.

What weakens a claim? A gap in the registration history, a domain that changed hands commercially and then the seller claims theft, or a situation where the account credentials were shared without a formal authorization record. Panels have consistently held that a complainant bears the burden on all three UDRP elements; in a theft scenario the bad-faith element is usually the easiest to establish, while the "rights in a mark" element trips up registrants who relied entirely on common-law use without documenting it.

In a recent matter (a .tv domain theft, summer 2025), we built the rights evidence from a combination of service-mark use records and a domain registration predating the registrant's claimed business activity by several years. The unauthorized-transfer finding followed without contested supplemental filings.

What If the Registrant Does Not Respond?

Under the UDRP, a registrant (respondent) who does not file a response within 20 days of commencement is in default. The case proceeds on the complaint alone.

Default does not mean automatic transfer. The panel still evaluates whether the three elements are met on the evidence submitted. In practice, panels in default cases scrutinize the complaint carefully – a poorly evidenced complaint can still fail even when unopposed. That is why the quality of the initial complaint filing matters as much in a default scenario as in a contested one.

Where the domain has been re-registered to a privacy or proxy service and the underlying registrant is unknown, the complaint is served on the privacy service and the registrar of record. If no response arrives, the panel proceeds. The registrar implements any transfer order after a brief implementation window, typically around ten business days following the decision, absent a court challenge.

Can the Decision Be Appealed or Challenged?

The UDRP has no internal appeal mechanism. A panel decision is final within the administrative proceeding. Either party may, however, bring a court action challenging the decision before the relevant court within a defined period – typically ten business days after notification of the decision – and the registrar will await the expiry of that window before implementing a transfer.

A successful respondent can also challenge an adverse decision in court, or a successful complainant can seek to enforce a transfer that the current registrant is attempting to block. In a .tv domain matter, the "relevant court" depends on where the registrar is located or where the parties are based, which adds cross-border complexity. We have defended registrants in post-decision court challenges where the underlying UDRP complaint was itself abusive – a scenario the UDRP calls Reverse Domain Name Hijacking (RDNH).

Note that an RDNH finding within the UDRP carries no financial penalty. Its function is reputational – a public record that the complainant abused the process. If the complainant caused tangible loss through an abusive filing, a separate court action is the only route to monetary relief.

What Is the Deadline Once a Case Starts?

The critical deadline for a respondent is 20 days from the date the UDRP complaint is formally commenced by the chosen provider. Missing that window means the case proceeds on default, removing the opportunity to present a legitimate-interest defense or contest the bad-faith allegations.

For a complainant, there is no formal statute of limitations within the UDRP itself, but delay weakens a claim in practice. A complainant who waited years after discovering the unauthorized transfer, without explanation, hands the respondent a passive-holding argument and a laches-adjacent narrative. Neither formally bars the complaint, but panels notice unexplained delay when weighing the totality of the evidence.

On the registrar side, most registrar abuse policies impose their own internal deadlines for emergency lock requests – commonly within 30 to 60 days of the alleged unauthorized transfer. After that window closes, the registrar may treat the transfer as complete and decline to act unilaterally. That is why contacting the registrar immediately, before filing any formal proceeding, is the first action in any .tv theft scenario.

To weigh UDRP against a court action for your case, email info@cognomenlaw.com.

What Are the Realistic Next Steps After Discovery?

Discovery of an unauthorized transfer triggers a short, sequenced set of actions. Acting in the right order preserves evidence and options; acting out of order can foreclose either the administrative or the court path.

Step one: document everything immediately. Screenshot the current WHOIS/RDDS record, download your own registrar account history, and preserve all emails related to the account. Step two: contact the registrar's abuse channel – not customer support – and request an emergency lock on the basis of unauthorized transfer. Step three: assess whether WIPO UDRP or court action fits the specific facts, considering the evidence available, the identity of the new registrant, and whether monetary damages are sought. Step four: if UDRP is the route, prepare the complaint with the full evidence package; if court, retain local litigation counsel in the relevant jurisdiction. Step five: monitor WHOIS/RDDS throughout the proceeding to detect any attempt at a second onward transfer.

In a matter we handled in early 2026 – a .tv domain stolen through a credential-phishing attack – the registrar lock was secured within 36 hours of the account compromise, which prevented a secondary transfer to a privacy-proxy registrant. The subsequent WIPO proceeding ran its standard course, and transfer was ordered on the evidence of compromise alone.

The realistic timeline from discovery to transfer order, assuming UDRP is the chosen path and no procedural complications arise, is roughly two to three months. Court routes run longer and cost more – but are the only path when damages matter or when the registrar itself is unresponsive.