How to recover a stolen .tv domain under the applicable domain rules

How to recover a stolen .tv domain under the applicable domain rules. UDRP and ccTLD domain recovery and defense across .tv. Email the firm to assess your case.

Your .tv domain goes dark overnight. The registrar account shows a new owner. Someone has hijacked the name you built an audience around — and every day it stays in a stranger's hands, your viewers land somewhere else. The question is not whether to act. It is which mechanism moves fastest and leaves the best evidentiary record.

To recover a stolen .tv domain, the primary arbitral route is a UDRP complaint filed with WIPO, because the .tv registry has appointed WIPO as its dispute-resolution provider and the zone operates under the UDRP. A parallel track — registrar-level escalation to lock the domain and reverse the unauthorized transfer — is often the first practical step, before any formal filing. A standard WIPO case is typically decided within about two months, with a WIPO filing fee starting at USD 1,500 for a single-member panel. Where arbitration cannot reach the harm, court action remains available.

This page covers how .tv domain recovery works, what evidence you need, which route fits your situation, and what the realistic next step looks like.

Why does the UDRP apply to .tv domains?

.tv is a country-code top-level domain assigned to Tuvalu, but the registry has contracted with ICANN and appointed WIPO as its dispute-resolution provider, making the UDRP fully applicable. That means the same three-element test that governs .com recovery governs .tv recovery: all three elements of Paragraph 4(a) must be proved. You must show that the domain is identical or confusingly similar to a mark you hold; that the current registrant has no rights or legitimate interests; and that the domain was registered and is being used in bad faith. For a theft scenario, the bad-faith analysis often centers on the unauthorized transfer itself — a registrant who obtained control through account compromise, phishing, or social engineering rarely has a credible legitimate-interest argument.

The .tv zone is popular with broadcasters, streamers, content platforms, and media brands precisely because the extension signals video content. That commercial value is also what makes .tv domains attractive targets for hijackers. We regularly advise domain owners who discover the problem only after a registrar sends an automated "your domain has transferred" notification — sometimes days after the fact.

One practical detail matters here. Because .tv operates under the UDRP rather than a bespoke ccTLD procedure, you are not limited to a single provider. WIPO handles the large majority of .tv disputes, but the Forum and CAC are also accredited for .tv filings. The choice of provider affects timeline, panelist pool, and cost — all of which feed into your recovery strategy.

What are the two tracks for recovering a stolen .tv domain?

Stolen-domain recovery requires you to run two tracks simultaneously: the registrar-escalation track and the formal-arbitration (or court) track. Neither alone is sufficient, and the first moves faster than the second.

The registrar-escalation track starts the moment you confirm unauthorized access. Contact the losing registrar — the one holding the account at the time of the transfer — and request an emergency domain lock. Many registrars maintain a 60-day transfer-lock window under ICANN's Inter-Registrar Transfer Policy; if the unauthorized transfer occurred within that window, the losing registrar has grounds to escalate to the gaining registrar and request reversal. Document every communication with timestamps. If the account was compromised via phishing or credential theft, preserve the original phishing message, server access logs, and any anomalous login notifications. That record is evidence in the arbitration that follows.

The formal arbitration track — a WIPO UDRP complaint against the current registrant — runs in parallel once you have preserved the registrar record. The UDRP complaint does not require the registrar escalation to have succeeded first; the two tracks inform each other. A registrar lock in place before the UDRP panel issues its decision prevents a second unauthorized transfer mid-proceeding.

In a recent matter (a .tv domain theft, spring 2025), we secured a registrar lock within 72 hours of the client's first contact, then filed the UDRP complaint the following week. The registrant defaulted — filed no response — and the panel ordered transfer roughly eight weeks after filing. The account-compromise evidence assembled in the registrar-escalation phase formed the core of the bad-faith showing in the complaint.

If your .tv domain has been transferred without authorization, the window to preserve critical evidence at the registrar level is short. To assess which track applies to your situation, contact info@cognomenlaw.com.

What evidence does a stolen-domain UDRP complaint require?

In a theft scenario, the evidence burden differs from a standard cybersquatting complaint. The complainant is not just showing that the registrant registered a domain in bad faith — the complainant is showing that the registrant's very title to the domain derives from bad-faith conduct, typically account compromise or fraudulent transfer. WIPO panels have consistently held that evidence of unauthorized transfer, when corroborated, satisfies the bad-faith element under Paragraph 4(a)(iii).

The evidence package for a stolen .tv domain typically includes:

• Proof of your prior rights: trademark registrations, screenshots of the domain in active use under your brand, registration history, WHOIS records showing your prior ownership, and any renewal receipts.
• Evidence of the unauthorized transfer: registrar notifications, server access logs, phishing or social-engineering communications received around the time of transfer, and the WHOIS record showing the change of registrant.
• Evidence that the current registrant lacks legitimate interests: parking page screenshots, redirection to a competitor, or simple non-use, each of which undermines any safe-harbor defense under Paragraph 4(c) of the Policy.
• Any communications from the new registrant demanding payment for return of the domain — a textbook Paragraph 4(b) bad-faith indicator.

One common gap we see is the failure to preserve contemporaneous records. A screenshot taken weeks after the theft may not capture the page the domain resolved to at the time of unauthorized transfer. Automated monitoring services generate dated records. If you do not use one, the WayBack Machine and cached search-engine results can partially reconstruct the picture — but they are secondary to your own contemporaneous documentation.

What about RDNH risk for a complainant? In a theft case it is low. Reverse Domain Name Hijacking — a panel finding that the complaint was brought in bad faith — is reserved for complainants who proceed despite knowing they lack a case. A genuine account-compromise situation, supported by registrar records, does not raise that risk. We have defended registrants against abusive complaints and pursued RDNH findings in appropriate cases; a well-documented theft complaint is the opposite of that situation.

When does a court route outperform UDRP arbitration?

The UDRP's only remedies are transfer or cancellation. No damages, no injunction, no costs award. For a .tv domain generating significant revenue, that limitation matters. If the hijacker has operated the domain commercially — running pay-per-click ads, signing sponsors, or redirecting your audience to a monetized competitor — the losses you have suffered are not recoverable through WIPO. Court action is the route to money.

The right route depends on the goal and the harm. Three scenarios illustrate the choice:

Scenario A — Pure transfer, no damages sought. The domain was hijacked, the new registrant is using it passively or for parking, and you want it back quickly. UDRP at WIPO is faster, cheaper, and procedurally simpler. Filing fee starts at USD 1,500; a decision arrives in about two months; no court docket, no jurisdictional complexity. This is the right path for the large majority of .tv theft cases.

Scenario B — Transfer plus damages. The hijacker monetized the domain, and the revenue loss is material. A US anticybersquatting action in court, or litigation in the registrant's jurisdiction, allows damages and — in some jurisdictions — statutory damages and attorney's fees. The UDRP does not reach money. Here, the court route runs either alongside or after the UDRP transfer order. We work with local litigation counsel in the relevant jurisdiction for any cross-border court component.

Scenario C — Arbitration compromised or ineffective. If the registrant has cycled ownership through multiple entities, or if the domain is currently held by a privacy or proxy service that obscures the real party, the UDRP complaint can still proceed — WIPO has established procedures for unmasking privacy registrations — but the evidentiary burden is higher. Where the registrar is uncooperative and the chain of title is genuinely unclear, court-based discovery may be the only way to establish ownership and compel transfer.

In our practice, the UDRP is the first-line remedy for .tv theft recovery in the vast majority of cases. Court action is the supplement for complex chains of title, material damages, or registrar non-compliance.

If you are weighing UDRP against a court action for your .tv domain, email info@cognomenlaw.com — the right path depends on the evidence you have and the remedy you need.

How do you choose between WIPO, the Forum, and CAC for a .tv complaint?

All three accredited providers process .tv UDRP complaints, but their cost structures and procedural cultures differ. WIPO's filing fee for a single-member panel covering one to five domains is USD 1,500. The Forum's entry point is approximately USD 1,300 for one to two domains on a single-member panel. The Czech Arbitration Court (CAC) offers the lowest entry point, beginning around USD 500–800. Legal fees are separate from these official forum fees in every case.

Why does provider choice matter beyond cost? Panel culture and caseload volume affect how closely panelists scrutinize evidence and how consistent the outcome is. WIPO and the Forum together account for roughly 97% of all UDRP proceedings. WIPO's panelist pool is large and international; its published decisions build the richest jurisprudential record, which matters when you need to cite panel reasoning for an unusual theft scenario. For a straightforward single-domain .tv theft with strong evidence, any of the three providers is workable. For a complex case with disputed facts, provider selection deserves deliberate attention.

WIPO also offers an expedited option that delivers a decision within approximately one month, available for single-panel cases of up to five domains. If the domain is actively generating harm — redirecting your audience, running a monetized stream under your brand — that expedited timeline can be worth the additional coordination effort it requires.

What happens after a UDRP transfer order is issued?

A WIPO panel decision ordering transfer triggers a mandatory ten-business-day waiting period before the registrar implements it. That window exists to allow the losing registrant to seek a stay in court. In practice, most registrants do not seek a stay, and the transfer executes at the end of the window. You regain control at the registrar level and then manage the domain under your own account.

There are two post-transfer steps that owners sometimes overlook. First, confirm that the domain's DNS records — nameservers, A records, and any CNAME or MX records — have been restored to their correct configuration. A transferred domain is not automatically reconfigured. Second, enable two-factor authentication and a registrar-level domain lock immediately. The same vulnerability that allowed the original theft may still exist if you have not closed it. We have seen second thefts within months of a first recovery, where the root account-security issue was never addressed.

In a second recent matter (a .tv domain recovery for a media operator, autumn 2024), the UDRP transfer order was implemented cleanly, but the client subsequently discovered that the hijacker had also altered several DNS records that pointed to third-party services. A post-transfer DNS audit was the step that fully restored the domain to working order.

What are the realistic timelines and costs for .tv domain recovery?

Realistic planning requires separating the registrar-escalation timeline from the formal-arbitration timeline. The registrar phase can produce a domain lock — not a transfer, but a lock — within days if you act quickly and the registrar is cooperative. Actual transfer reversal through the registrar, without a UDRP order, is far less predictable; most registrars will not reverse a completed transfer without a formal order or a very clear case of internal fraud.

The formal arbitration timeline is more predictable. A standard WIPO single-member panel proceeding for a .tv domain theft:

• Filing and formal compliance review: approximately one to two weeks.
• Commencement and response period: the respondent has 20 days after commencement to file a response. If no response is filed — common in theft cases where the registrant is operating fraudulently — the panel proceeds on the complaint alone.
• Panel appointment and decision: typically two to four weeks after the response period closes.
• Registrar implementation: ten business days after the decision, absent a court stay.

Total elapsed time: roughly two months from filing to transfer in an uncontested case. WIPO's expedited option can compress the decision phase to approximately one month for eligible cases. A contested case — where the registrant files a substantive response — adds several weeks.

On costs: the WIPO filing fee for one to five domains, single-member panel, is USD 1,500. Legal fees for a UDRP complaint in a straightforward single-domain matter typically fall in the USD 3,000–7,000 range, separate from the forum fee. Complex theft cases — where the chain of title is disputed or the registrant files a detailed response — may fall higher in or above that range. Court action is substantially more expensive and billed hourly; describe any court component as a separate budget line.

The myth we regularly hear from brand owners is that UDRP complaints are fast and free. They are faster than litigation. They are not free — and underestimating the evidentiary preparation required is the most common way a strong case becomes a weak filing.

Related at COGNOMEN

• Court action and domain theft recovery across gTLDs and ccTLDs
• Enforcing a UDRP decision: what happens when a registrar does not comply
• How complainants prove no legitimate interest in a domain dispute

About COGNOMEN

COGNOMEN is an independent boutique focused exclusively on domain-name disputes. We recover, defend, and transact internet domains across generic and country-code zones, before WIPO, the Forum, CAC, ADNDRC, and national procedures, and in court where arbitration cannot reach. We act for brand owners, domain investors, and registrants — including respondent-side defense and reverse domain name hijacking. Our practice covers .tv and all other UDRP-governed ccTLD zones, as well as ccTLD-specific procedures such as Nominet DRS, ADR.eu, and national court routes where no arbitration pathway exists. To discuss a domain, contact info@cognomenlaw.com.

By Adrian Harland – court anticybersquatting and domain theft recovery practice.

Disclaimer: This article is general information about domain-name dispute procedures and does not constitute legal advice. Outcomes depend on the specific facts, the zone, and panel or court discretion. For advice on your domain, contact info@cognomenlaw.com.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Related

• Court Recovery
• Analysis Enforce Udrp Decision Finance
• Case Prove No Legitimate Interest Fr

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.