Step-by-step: recover a .br domain from a serial cybersquatter

Step-by-step: recover a .br domain from a serial cybersquatter. UDRP and ccTLD domain recovery and defense across .br. Email the firm to assess your case.

A brand owner finds that a .br domain matching its mark is already taken – not by a business rival with a plausible reason, but by a registrant holding dozens of similar names across multiple brands, offering to sell the domain back at a price that bears no relation to registration cost. That pattern is the fingerprint of serial cybersquatting. The question is whether, and how, the Brazilian domain dispute procedure can put the name back in the right hands.

To recover a .br domain from a serial cybersquatter, the correct route is the SACI-Adm administrative dispute procedure administered under the rules of the Brazilian Internet Steering Committee (CGI.br) and operated by SACI. The complainant must satisfy all three elements of the applicable test – confusing similarity to a mark, the registrant's lack of rights or legitimate interests, and bad-faith registration or use – and a serial-registration pattern is among the strongest bad-faith indicators a panel can consider. A standard .br dispute typically concludes within a matter of months at a published official fee, with transfer or cancellation as the only available remedies.

This guide walks every step from pre-filing assessment through to registrar implementation, flagging the trap buried in each one.

Step 1: Confirm that SACI-Adm governs your .br dispute

SACI-Adm is the administrative resolution mechanism for .br domains and applies to registrations under the NIC.br registry. It is a distinct procedure from the UDRP – it is not operated by WIPO, the Forum, or CAC – and it draws on its own published rules. The trap here is assuming that a UDRP complaint filed with WIPO will reach a .br domain. It will not. WIPO has jurisdiction over gTLDs such as .com and .net, and over ccTLDs that have specifically adopted the UDRP or a close variant. Brazil's .br registry has not done that. Filing a UDRP complaint for a .br domain produces no result at all.

The practical confirmation checklist at Step 1 is therefore simple: verify that the domain ends in .br, confirm the registrant is on record at NIC.br (Brazil's registry), and identify which SACI-Adm dispute rules are currently in force. Counsel practicing in Brazilian administrative procedures should verify the current version of the rules, since the CGI.br has updated them over time. Do not proceed under a prior version or an assumed rule set.

One further nuance: a brand owner may hold both a .br domain it wishes to protect and a .com variant already registered by the same cybersquatter. Those disputes travel different procedural paths. The .com can go to WIPO or the Forum under the UDRP, while the .br requires SACI-Adm. We regularly advise brand owners who need to coordinate both tracks simultaneously, and the evidence gathered for one often strengthens the other.

For an assessment of whether SACI-Adm, a UDRP complaint, or both apply to your situation, contact info@cognomenlaw.com.

Step 2: Establish trademark rights before drafting anything

Every administrative domain dispute begins with the complainant's rights in a name. That is not merely a formality; in a serial-cybersquatter case it becomes the foundation on which every other element rests. Before a complaint is drafted, the rights analysis must be complete and documented.

Brazilian registered trademark rights are strong evidence. An INPI (Instituto Nacional da Propriedade Industrial) registration covering the mark is the clearest starting point. But rights can also be demonstrated through registrations in other jurisdictions, provided the panel is satisfied that the mark carries cross-border recognition. Common-law or unregistered marks based on commercial use, reputation, and marketplace recognition are sometimes recognized under ccTLD procedures, though the evidential burden is heavier. Verify what the current SACI-Adm rules require, because some ccTLD frameworks accept only registered marks while others allow broader rights bases.

The trap in this step is over-relying on a foreign trademark registration without documenting Brazilian market presence. A panel weighing a .br dispute may apply a lens focused on the Brazilian market. If the complainant's brand operates in Brazil but the only trademark evidence submitted is a US or EU registration with no Brazil-related business proof, the panel may find the rights showing insufficient. Assemble Brazilian evidence – registrations, business records, invoices, press coverage, distributor agreements – at Step 2, not after the complaint is filed.

Serial cybersquatters frequently register domains before a brand launches officially. If the domain was registered the same week as the public brand announcement, document that timeline precisely. The sequence – brand announcement, domain registration, no plausible independent reason for registration – is direct evidence of targeted bad faith.

Step 3: Build the serial-registration record as a standalone evidence module

In any domain dispute, a "pattern of abusive registrations" is one of the most compelling bad-faith indicators a complainant can present. Paragraph 4(b) of the UDRP names it explicitly; the SACI-Adm framework and other ccTLD dispute rules take comparable approaches. For a serial cybersquatter, this is not a minor supporting point – it is the centerpiece of the bad-faith case.

A serial-registration record should be assembled as a standalone evidence module, distinct from the core trademark evidence. The module should document: the number of domains held by the registrant, the variety of brands those domains reference, any public listings offering the domains for sale, any prior administrative decisions in which the same registrant lost a dispute before any panel, and any WHOIS or RDDS data showing the pattern of acquisition dates relative to brand launches.

The trap here is practical: WHOIS privacy or proxy registrations may obscure the connection between individual domain registrations and a single underlying registrant. Gather what is publicly available first. RDDS queries through NIC.br may reveal the registrant identity for .br domains. Where privacy services are in place, note that NIC.br has registration requirements that may make complete privacy harder to maintain than in gTLD space. If a prior SACI-Adm or UDRP decision names the registrant (without inventing one – look only at publicly accessible decisions), that prior adverse finding is powerful.

In our practice, we have seen serial-registration evidence shift a panel's assessment of the entire case. A disputed domain that might otherwise appear ambiguous becomes clearly abusive when placed alongside twenty other acquisitions targeting third-party brands. Build this module carefully.

How does a serial-registration pattern change the bad-faith analysis?

A pattern of conduct targeting multiple brand owners simultaneously removes the ambiguity that benefits a registrant in closer cases. Bad faith under the applicable administrative framework is not assessed in isolation for each domain; a panel reviewing a single .br domain may and often does consider the registrant's broader conduct across all known registrations.

The strongest version of this argument pairs the pattern record with evidence of an offer to sell. When a registrant holds a domain identical to a trademark, has no plausible independent basis for registration, and has offered to sell it to the mark owner – or to anyone – at a price plainly exceeding out-of-pocket costs, that combination satisfies the bad-faith element under virtually any administrative dispute framework. The UDRP's Paragraph 4(b)(i) treats this scenario as a non-exhaustive indicator of bad faith, and analogous ccTLD rules follow similar logic.

What about passive holding? Some serial cybersquatters do not operate the domain at all – no website, no email, no visible commercial use. That does not defeat the bad-faith analysis. Panels have consistently held that passive holding of a domain that incorporates a well-known third-party mark, combined with no plausible legitimate purpose, can constitute bad faith. The panel looks at the totality: the strength of the mark, the registrant's history, and whether any good-faith explanation for the registration has been offered.

One question we encounter often: what if the registrant files a response and claims the name is a dictionary word or a coincidental personal name? In a serial-registration case, that defense is substantially weakened by the pattern. A panel is unlikely to believe that a registrant who holds dozens of domain names matching third-party trademarks across multiple industries arrived at each coincidentally.

Step 4: Draft and file the SACI-Adm complaint precisely

A SACI-Adm complaint must address, element by element, the three-part test that the procedure applies. The structure closely parallels the UDRP's Paragraph 4(a), though the precise articulation of each element is governed by the SACI-Adm rules in force at the time of filing. Verify those rules with counsel before drafting; the CGI.br framework has evolved and current requirements control.

The complaint document should present each of the three elements in a separately labeled section: (1) confusing similarity between the disputed domain and the complainant's rights; (2) the registrant's lack of rights or legitimate interests; and (3) bad faith, anchored in the serial-registration module prepared at Step 3. Attach all evidence as numbered annexes and cross-reference each annex in the text. Panels cannot consider evidence that is not formally submitted.

The trap in this step is submitting an underpowered complaint and expecting supplemental filings to cure it. Most ccTLD procedures, like the UDRP, limit or prohibit unsolicited supplemental filings after the initial exchange. The complaint must be complete and evidentially sufficient as filed. If new evidence arises after filing, understand the procedure's rules on supplementals before submitting anything.

Verify the current official filing fee at the time of submission. Fee schedules are published by the administering body and may change; always confirm with the current SACI-Adm schedule rather than relying on historical figures.

To weigh UDRP against a SACI-Adm action for your case, email info@cognomenlaw.com.

Step 5: Prepare for a default – and for a contested response

Many serial cybersquatters default. They have no legitimate defense to mount, and filing a response draws professional attention to registrations they would rather not explain. When a respondent fails to reply within the applicable response window – in UDRP proceedings that is 20 days from commencement; SACI-Adm sets its own deadline which should be confirmed from the current rules – the panel proceeds on the complaint record alone.

A default is not an automatic win. The panel still applies the test. A complaint that fails to establish one of the three required elements will be denied even if the respondent does not participate. That is why the complaint must be evidentially complete on its face.

When a registrant does respond in a serial-cybersquatter case, the response typically falls into one of two patterns: a bare denial offering no supporting evidence, or a claim to some independent legitimate use of the name. The bare denial has little force against a documented serial-registration record. The legitimate-use claim requires the panel to weigh whether the registrant's asserted basis – a descriptive meaning, a personal name, a prior business – is credible given the broader pattern. Panels have consistently found that a registrant cannot manufacture legitimate interests through post-complaint website content or a sudden claim to a prior intended use that left no evidentiary trace.

In a recent matter (a .br cybersquatting complaint, spring 2025), we prepared a complaint against a registrant holding a portfolio of brand-name domains across several industries. The respondent filed a brief answer asserting a personal connection to the name and attaching a social media profile created approximately one week before the complaint was filed. The panel found that the profile did not predate the complainant's trademark rights and declined to give it weight. Transfer followed.

Step 6: Manage the timeline and the registrar implementation

Once a decision is rendered in favor of transfer, the work is not over. The registrar must implement the order. Under UDRP procedures, a standard implementation window applies and the registrant has an opportunity to file a court action in the registrar's jurisdiction to stay the transfer. SACI-Adm operates its own implementation mechanics; confirm the precise post-decision steps with counsel and monitor the NIC.br registry to verify that the transfer has taken place.

The trap in this step is assuming implementation is automatic and immediate. Registrar processing, any stay-period mechanics, and NIC.br's technical procedures all take calendar time. Do not plan a product launch, a campaign, or a press release around a domain transfer date until the transfer is confirmed in the registry.

A standard UDRP case at WIPO resolves in roughly two months from filing to decision. SACI-Adm has its own published timeline; verify the current expected duration. If the matter is contested and the panel considers complex evidentiary questions, additional time is possible. Plan accordingly.

What if the same registrant holds .com and .br variants of the same name?

Multi-zone cybersquatting is more common than a brand owner expects. A serial cybersquatter targeting a brand will often register the .com, the .br, and one or more other ccTLD variants simultaneously. Each zone requires its own procedure. The .com goes to WIPO, the Forum, CAC, or ADNDRC under the UDRP; the .br goes to SACI-Adm; other national ccTLDs follow their own governing procedures.

Should the complaints be filed simultaneously, or sequentially? There is no universal rule. Parallel filing creates two live proceedings at once, maximizing speed but also administrative burden. Sequential filing – resolving the .com first and then presenting that decision as additional evidence in the SACI-Adm proceeding – can strengthen the record, but it extends the total timeline. In our experience, the right choice depends on how urgently the brand owner needs each specific domain and whether the SACI-Adm proceeding is strengthened by a prior favorable UDRP decision or can stand independently on its own evidence.

If the dispute also involves genuine trademark infringement – active websites causing consumer confusion, phishing, or commercial harm – the brand owner may need to weigh administrative proceedings against court action in Brazil. Administrative procedures are faster and cheaper, but they do not award damages. Brazilian courts can reach injunctive relief and monetary compensation, but at substantially higher cost and over a longer timeline. That trade-off should be assessed at the outset, not after an administrative proceeding has concluded.

For matters involving phishing or fraudulent use of a domain in ways that harm third parties, compare the guidance on recovering a phishing domain, which sets out the additional evidence considerations that arise when the domain is actively weaponized.

Related at COGNOMEN

• UDRP Recovery Services – full-service UDRP complaint filing across WIPO, Forum, CAC, and ADNDRC
• Recovering a phishing domain – evidence strategy when a domain is used for fraud
• ccTLD transfer remedy FAQ – how national procedures handle the transfer remedy