How to structure escrow for a .au domain purchase

How to structure escrow for a .au domain purchase. UDRP and ccTLD domain recovery and defense across .au. Email the firm to assess your case.

You have found the .au domain you want. The seller is ready to deal. Now the real question surfaces: how do you pay for a domain name without handing over money before the transfer completes – and how do you know the name you are buying is clean enough to be worth acquiring in the first place?

Structuring escrow for a .au domain purchase means using a neutral third-party payment hold so that funds release only when the registrar confirms the domain has transferred to the buyer. Under .au registry rules administered by auDA, a domain transfer requires the incoming registrant to meet Australian eligibility requirements, and the process carries its own technical steps that a simple bank transfer cannot replicate. A competently structured escrow, paired with a chain-of-title review and a prior-dispute check, is the standard approach for any .au acquisition above a nominal value.

This page covers the auDA eligibility framework, the mechanics of escrow, pre-acquisition due diligence, the auDRP dispute history check, how to handle a tainted domain, and the realistic next step when you are ready to move.

Why is .au domain escrow different from a standard domain purchase?

The .au namespace operates under auDA's published rules, and those rules impose eligibility conditions that do not apply to generic .com transfers. A buyer who does not satisfy those conditions cannot hold the domain – so a transfer that passes escrow but fails the eligibility check is a failed deal. That asymmetry changes the entire payment structure.

For .com and other gTLDs, a buyer needs little more than an accredited registrar account and a credit card. For .au, the buyer must hold a qualifying Australian connection – typically an Australian registered business number (ABN) or Australian Company Number (ACN), an Australian registered trademark, or another qualifying basis recognised by auDA's eligibility rules. The exact current eligibility categories are maintained by auDA and should be confirmed with counsel before any transaction closes. Assuming eligibility without confirming it is one of the most common errors we see in .au acquisition work.

The practical consequence: escrow must be conditioned not only on a successful registrar transfer but on confirmation that the buyer passes the registry's eligibility screen at the receiving registrar. A well-drafted escrow instruction set will specify both conditions as release triggers.

If you are preparing to acquire a .au domain and need the escrow structure confirmed before terms are signed, contact info@cognomenlaw.com.

What does pre-acquisition due diligence cover for a .au domain?

Due diligence on a .au domain has four distinct components: chain-of-title review, prior-dispute history, trademark landscape assessment, and WHOIS/RDDS verification. Skipping any one of them can leave the buyer holding a domain that a brand owner can immediately challenge under the auDRP or in an Australian court.

Chain-of-title review traces who has held the domain and when. A domain that has changed hands repeatedly in a short period – particularly during periods of trademark activity in the relevant industry – is a warning sign. If a prior holder registered the name in circumstances that could constitute bad-faith registration under the auDRP, that history is relevant context even if the current seller claims clean title. Panels and courts look at the full registration record, not only the most recent transfer.

Prior-dispute history is equally critical. auDA's published registry data and publicly available auDRP case records can reveal whether the domain was the subject of a complaint, a failed transfer demand, or an informal dispute. A domain that survived a prior auDRP complaint may carry a factual record that helps a new owner; a domain that changed hands to evade a complaint carries a very different risk profile. We run this check as a standard part of every .au acquisition file we handle.

Trademark landscape assessment means identifying whether any registered Australian trademark – or a pending application – is confusingly similar to the domain. If one exists and the domain is commercially active, the buyer is stepping into a potential auDRP complaint the moment the transfer completes. A search across the Australian trademark register, timed to the expected closing date, is the minimum standard here.

WHOIS/RDDS verification confirms that the registrant data matches the seller's claimed identity and that the domain is not under a registrar lock or a disputed-transfer flag. An unexpected lock at the point of transfer can stall the transaction and, in a worst case, expose the buyer if the lock was placed at the instance of a third-party claimant.

How does escrow actually work for a .au transaction?

Escrow for a domain purchase is structurally simple: buyer funds are deposited with a neutral escrow agent before any domain transfer is initiated, and the funds release to the seller only when the transfer is confirmed at the registrar level. The complexity lies in the conditions and the timing.

A properly structured escrow instruction set for a .au acquisition will specify, at minimum:

• The exact domain name and the registrar where the name currently sits;
• The buyer's confirming eligibility documentation under auDA rules;
• The transfer mechanism – typically an authorisation code (auth code or EPP key) delivered by the seller to the escrow agent, then passed to the buyer's registrar;
• The condition for funds release: confirmation of successful transfer, not merely delivery of the auth code;
• A dispute procedure for the escrow agent to follow if the transfer fails or is disputed mid-process;
• A refund trigger if the eligibility check fails at the receiving registrar;
• A timeline – typically the number of calendar days within which transfer must complete before the escrow is unwound.

The escrow agent must be a provider that handles domain-specific transactions. Generic commercial escrow services may not understand that a domain transfer is a multi-step registry process, not a simple asset handover. Misaligned instructions – for example, releasing funds on delivery of the auth code rather than on confirmed registry transfer – have caused real disputes. We have seen sellers receive payment for names that the registry later declined to transfer because of eligibility failures.

In a recent matter (a .au commercial domain, autumn 2024), we structured a two-stage release: an initial holding deposit confirmed at contract signing, with the balance released only after auDA-compliant transfer was verified at the gaining registrar. The seller's registrar required a standard transfer period, and the buyer's eligibility documentation was submitted and cleared before any auth code was exchanged. The transaction closed without incident.

To structure escrow for a .au domain purchase and confirm the release conditions before funds move, email info@cognomenlaw.com.

What is the auDRP and how does prior-dispute history affect a .au acquisition?

The auDRP is Australia's adaptation of the UDRP, and it closely tracks the three-element test of the original Policy with one significant nuance: in some respects the bad-faith limb is read as "registered or used" in bad faith rather than the cumulative "registered and used" standard that applies under the UDRP. That distinction matters for buyers conducting due diligence, because a domain that was registered in good faith could still be challengeable on use grounds.

The three elements a complainant must prove under the auDRP mirror those of the UDRP: (1) the domain is identical or confusingly similar to a name or trademark in which the complainant has rights; (2) the registrant has no rights or legitimate interests in the domain; and (3) the domain was registered or is being used in bad faith. The auDRP does not award monetary damages. The only remedies are transfer or cancellation.

For a prospective buyer, the prior-dispute history check therefore has two distinct purposes. First, it identifies domains where a complaint was filed and rejected – meaning a panel assessed the registrant's legitimate interest and found it credible. That record can strengthen a new owner's position if the same complainant returns. Second, it identifies domains where a complaint was filed and the case was settled or withdrawn before a decision – a murkier record that provides no panel finding to rely on. In either scenario, understanding what happened, and why, is essential before funds go into escrow.

How does the auDRP compare to a national court route? The auDRP is faster and cheaper than Australian court litigation, and the remedy is limited to transfer or cancellation. A court action in Australia can reach damages and injunctions, but the cost and timeline are substantially higher. For most .au acquisition due-diligence questions, the auDRP track is the primary risk lens – but if a dispute arises after the purchase that requires damages or urgent interim relief, the court route becomes relevant. We coordinate with local litigation counsel in the relevant jurisdiction for matters that require Australian court proceedings.

What makes a .au domain "tainted" – and can a tainted domain be acquired safely?

A domain is tainted for acquisition purposes when its registration history carries a material risk that a third party has, or will assert, a legally cognizable claim to it. That can mean a domain registered by a prior holder to exploit a trademark owner's goodwill, a domain that was the subject of an unresolved auDRP complaint, or a domain that was transferred in apparent evasion of a pending dispute.

Can a tainted domain be acquired safely? Sometimes – but only with legal structuring that accounts for the specific risk. Three scenarios arise in our practice:

Scenario one: the prior auDRP complaint was denied on the merits, and the current seller is the registrant who prevailed. That panel record is a significant asset. A buyer stepping into that registrant's position inherits a decided factual record. The risk remains that new evidence could change the calculus, or that a different complainant could emerge. But the risk is knowable and, with the right due diligence, manageable.

Scenario two: the domain changed hands after an unresolved or withdrawn complaint. No panel found for the registrant. The buyer is acquiring into an open question. Structuring the acquisition safely requires, at minimum, a legal opinion on whether the buyer's own use and holding of the domain would survive an auDRP challenge, and a clause in the purchase agreement that addresses what happens if a complaint is filed within a defined period after closing.

Scenario three: the prior history is obscure – chain-of-title gaps, mismatched WHOIS data, or a registrar transfer that cannot be traced to an arm's-length transaction. This is the highest-risk scenario. In our view, a domain with a demonstrably incomplete chain of title should either be walked away from or subjected to a full registry investigation before escrow is opened.

How should the purchase agreement be structured for a .au domain?

The escrow instruction set is the payment vehicle. The purchase agreement is the legal framework that governs the entire deal. For a .au domain of any material value, a standalone purchase agreement is necessary – a simple email exchange is not adequate to govern the representations, warranties, and dispute resolution that a domain transaction requires.

A well-structured .au domain purchase agreement will include, at minimum:

• A seller representation that the domain is free of any active complaint, pending dispute, or registrar lock placed at a third party's request;
• A seller warranty that the registration was acquired in compliance with auDA's eligibility rules and that no misleading or deceptive conduct was involved in obtaining the registration;
• Disclosure of the full prior dispute history, including any informal demands, cease-and-desist letters, or auDRP filings;
• A buyer acknowledgment of the auDA eligibility requirements and a representation that the buyer meets them;
• A condition precedent to closing: successful completion of the buyer's eligibility screen at the gaining registrar;
• An indemnity from the seller for undisclosed claims arising within a defined post-closing period;
• Governing law and dispute resolution – typically specifying the relevant Australian jurisdiction and procedure, which may include auDA's dispute framework if a post-closing eligibility issue arises.

In a recent matter (a .au brand domain, winter 2025), a buyer instructed us to review a draft agreement that contained no seller warranty on prior dispute history and no post-closing indemnity. Due diligence uncovered an informal demand letter sent to the prior holder approximately two years before the proposed sale. The agreement was revised to require full disclosure and to include a structured indemnity with a defined cap. The transaction closed on revised terms.

What does the cross-zone picture look like when a brand also holds .com?

Many .au acquisitions arise in a broader brand-protection context: the brand owner already holds the .com, and the .au is an adjacent asset. The cross-zone due diligence is additive, not duplicative. A chain-of-title review for the .au does not replicate the UDRP risk analysis for the .com – they run under different rules and different forums.

The decision between routes is worth stating plainly. If the .au domain is held by a cybersquatter and the buyer wants to recover it rather than purchase it, the auDRP is the primary recourse – not a private sale. The auDRP filing fee and timeline are substantially lower than Australian court litigation. A private purchase in that scenario hands money to a bad actor and may not even transfer clean title if the registration itself was abusive. We regularly advise brand owners who have received a buy-back demand – a five-figure offer to return a domain they never intended to sell – on whether the auDRP is a better path than the transaction.

Conversely, where the .au domain was registered in good faith by an unrelated party who simply secured the name first, a private purchase structured around proper escrow and due diligence is the right route. The two situations are factually distinct, and the legal path follows from the facts.

For brand owners managing both a .com and a .au, we also run pre-acquisition due diligence that covers both zones in a single engagement – identifying whether any prior UDRP complaints, auDRP complaints, or informal disputes touch the name across its registration history in either zone.

Related at COGNOMEN

• Domain transactions, portfolio management, and brand-protection monitoring
• How to recover a lapsed domain – applicable principles and country-code procedure
• UDRP versus national court procedure – when each route applies