How to structure escrow for a .ca domain purchase

How to structure escrow for a .ca domain purchase. UDRP and ccTLD domain recovery and defense across .ca. Email the firm to assess your case.

A buyer wires six figures for a .ca domain, the seller disappears, and the registrar has no authority to reverse the transfer. That scenario is avoidable. Structuring escrow correctly before a .ca transaction closes is the single most reliable way to ensure the domain and the payment move simultaneously – and that neither party is exposed to default by the other.

To structure escrow for a .ca domain purchase, the parties agree on a neutral escrow service, deposit the purchase price before any transfer instruction is issued, and release funds only after CIRA confirms the registrant of record has changed to the buyer. Because .ca operates under CIRA's Canadian Presence Requirements and the CIRA Domain Dispute Resolution Policy (CDRP), a pre-closing due-diligence review of chain of title and prior dispute history is not optional – it determines whether the buyer can lawfully hold the domain and whether the asset is free of encumbrance. A properly structured transaction takes a few business days to close once diligence clears, or longer where registry or registrar processing creates a queue.

This page covers the CIRA eligibility rules, chain-of-title and prior-dispute checks, escrow mechanics, and the red flags that should pause or kill a deal.

What governs .ca domain ownership and transfer?

CIRA is Canada's registry authority for .ca, and it imposes eligibility rules that have no direct parallel in the gTLD world. A registrant of a .ca domain must meet CIRA's Canadian Presence Requirements – either being a Canadian citizen, permanent resident, or a legally recognized Canadian entity – at the time of registration and throughout the registration period. A buyer who does not qualify cannot hold the domain regardless of what the purchase agreement says.

This eligibility requirement shapes every .ca transaction. Confirming the buyer's eligibility is not a formality; it is a condition precedent to closing. A non-qualifying buyer cannot receive the transfer, and a seller who transfers to a non-qualifying party may face registry enforcement. We regularly advise purchasers who discover the eligibility issue only after they have signed a letter of intent, which means structuring the deal around an eligible nominee or abandoning it entirely.

Transfer mechanics also differ from gTLD practice. The .ca transfer process involves an authorization code (EPP code or "Auth-Info" code) issued by the losing registrar, a gaining-registrar confirmation, and a CIRA back-end approval. Each step carries its own window, and any mismatch in the sequence – for instance, a seller revoking the auth code before the escrow condition is met – can leave the transaction in limbo. The escrow structure must account for each step explicitly.

What due-diligence checks are mandatory before a .ca acquisition?

Chain-of-title and prior-dispute review for a .ca domain are the foundation of safe acquisition. A domain with a prior CDRP proceeding, an unresolved WIPO complaint, or a contested registration history carries contingent liability that transfers with the asset unless the buyer negotiates appropriate representations and warranties.

The minimum pre-closing checklist covers five areas.

• CIRA WHOIS / RDDS review: confirm current registrant identity, registrar of record, expiry date, and any lock status. A domain in "clientTransferProhibited" or "serverTransferProhibited" status cannot transfer without the registrar's or CIRA's intervention; those locks must be resolved before escrow opens.
• CDRP and WIPO dispute-history search: CIRA's CDRP applies a bad-faith-registration test to .ca domains. A prior complaint – even a withdrawn one – signals that a trademark owner has targeted the domain. An open complaint makes the domain untransferable pending the decision; a transfer completed mid-proceeding does not stop the case and may result in an order against the new registrant.
• Trademark-clearance review: the buyer should identify whether any registered or common-law trademark corresponds to the domain string. A domain confusingly similar to a mark held by a third party is a live CDRP risk. In our practice, we have seen buyers close on a domain only to receive a CDRP complaint within weeks of transfer, because the diligence step was skipped entirely.
• Historic use and SEO footprint: archived use of the domain at a prior address can carry reputational risk (phishing, spam blacklisting, or adult content) that persists even after the content is replaced. A clean domain on a blacklisted IP history is still a clean domain; a domain with blacklisting tied to its own string requires more work.
• Chain of registration: who has held the domain, for how long, and through which registrars. A domain that has changed hands several times in a short period – especially at irregular pricing – may indicate a prior hijacking or a distressed forced-sale. The CIRA log and registrar records should be requested as part of due diligence.

In a transaction that closed in autumn 2024 (a single .ca brand-term domain, mid-five-figure price), we identified a withdrawn CDRP complaint in the domain's history. The seller had not disclosed it. We negotiated a price reduction and a specific warranty against any reinstatement of that claim before releasing escrow funds. The deal closed; the warranty was never called.

For an assessment of your .ca domain acquisition – including chain-of-title review and CDRP risk – contact info@cognomenlaw.com.

How should escrow be structured for a .ca domain purchase?

A properly structured escrow for a .ca domain purchase separates the payment obligation from the transfer obligation and makes each conditional on the other. Neither party should be in a position where they have performed without the counterparty having done the same.

The mechanics work as follows. The buyer deposits the agreed purchase price with a neutral escrow service before any transfer instruction is given to the registrar. The escrow agent holds the funds subject to a release condition: confirmation that CIRA's registry records show the buyer as the new registrant of record. The seller provides the EPP auth code to the gaining registrar only after the escrow service confirms receipt of the buyer's funds. The gaining registrar initiates the transfer; CIRA processes it; the buyer confirms completion; and the escrow agent releases payment to the seller.

Several structural points deserve specific attention.

• Release trigger: define the release condition precisely. "Successful transfer" is ambiguous – specify that release requires CIRA's registry WHOIS confirming the buyer as registrant, not merely the gaining registrar's acknowledgment of the transfer request.
• Escrow service selection: the service must be licensed for the transaction value and jurisdiction. For cross-border .ca transactions, confirm the service's Canadian or US licensing and its dispute-resolution process if a party claims a failed transfer.
• Auth-code timing: the seller should deliver the auth code to the gaining registrar simultaneously with the escrow agent confirming fund receipt. A gap between these two events creates a window where the seller could revoke the code or the domain could expire.
• Registrar selection for the buyer: the buyer should choose a CIRA-accredited gaining registrar before escrow opens. The gaining registrar's processing time varies and should be factored into the escrow period.
• Escrow period and extension: CIRA and registrar processing occasionally causes delays. Build a defined extension period – typically five to ten business days – into the escrow agreement, with automatic extension if the transfer is pending but not completed through no fault of either party.
• Failure mechanics: if the transfer does not complete within the agreed period, the escrow agreement must specify whether funds revert automatically to the buyer or whether the parties must agree to extend or terminate. Automatic reversion is the buyer-protective default.

The purchase agreement underlying the escrow should include representations from the seller that the domain is not subject to any active or threatened CDRP or UDRP proceeding, that no lock other than the standard registrar lock is in place, and that the seller has the authority to transfer the domain. These representations survive closing for a negotiated period.

What is the CIRA CDRP and how does it affect a .ca transaction?

The CIRA Domain Dispute Resolution Policy (CDRP) is the mandatory arbitration policy for .ca domains. It differs from the UDRP in material ways that affect both buyers and sellers of .ca domains. Understanding the CDRP test is essential to assessing whether a target domain carries dispute risk.

The CDRP requires the complainant to show that the registrant registered the domain in bad faith and that the domain is confusingly similar to a mark in which the complainant has rights. The CDRP generally does not apply retroactively in the same way as the UDRP's separate "use in bad faith" limb; the focus is principally on the intent at the time of registration. This distinction matters for buyers: a domain acquired in good faith may be harder to challenge than a UDRP respondent's domain, but a prior bad-faith registration history still shadows the asset.

The complainant must also generally meet CIRA's Canadian Presence Requirements, which reinforces that .ca disputes are a distinctly Canadian procedure. A foreign trademark owner without a qualifying Canadian presence faces a threshold hurdle before the CDRP even reaches the merits.

For a buyer, the practical implication is straightforward. If the domain has been used in ways that could have given rise to a CDRP complaint – parked with competitor advertising, offered for sale to a brand owner, or associated with a website that mimics a Canadian company – that history does not disappear on transfer. A new registrant does not inherit the prior registrant's bad-faith conduct as a legal matter, but a complainant may argue that the transfer itself was a device to disrupt the proceeding. CIRA's rules specifically address transfers during a pending complaint: the proceeding continues against the new registrant.

In our practice, we have advised buyers to request a one-to-two month pre-closing waiting period for any domain where a CDRP complaint appeared plausible, to confirm that no complaint was filed before funds changed hands. That waiting cost the buyer nothing; it would have saved a great deal if a complaint had arrived.

To weigh CDRP risk before committing to a .ca acquisition, email info@cognomenlaw.com.

How does .ca escrow compare with .com and other zone transactions?

The right route depends on the zone, the eligibility rules, and the dispute exposure the domain carries. Each zone presents different structural questions for the same transaction.

A .com acquisition is the most familiar scenario. There is no registrant-eligibility requirement; any person or entity may hold a .com. The UDRP applies to .com disputes, with the familiar three-element test: confusing similarity, no legitimate interest, and registration and use in bad faith – all three must be satisfied. Escrow for a .com transaction follows the same fund-and-release pattern, but the due-diligence checklist focuses on UDRP complaint history (searchable through WIPO's online case database) rather than CDRP history. WIPO's standard filing fee for a .com complaint starts at USD 1,500 for a single-panel case, and a standard proceeding runs approximately two months. A buyer acquiring a .com with a prior UDRP complaint faces the same shadow-risk as a .ca buyer with a CDRP history.

A .ca acquisition adds the eligibility layer and the CDRP-specific analysis. It also adds the Canadian registrar dimension: not all generic registrars support .ca transfers efficiently, and a CIRA-accredited gaining registrar is essential. The escrow period for a .ca transaction should generally be longer than for a .com because the CIRA back-end adds processing time.

A .uk acquisition under the Nominet system adds a third set of rules. Nominet's DRS applies an "abusive registration" test rather than the UDRP's bad-faith test, and the DRS includes a free mediation stage before any expert decision. The key procedural difference from CDRP is that Nominet's DRS test reads "registered or used" abusively – a lower threshold than the UDRP's cumulative standard. A buyer acquiring a .uk domain with a contested history should review Nominet's DRS record, which is publicly searchable.

For a buyer operating across all three zones – acquiring a portfolio of .com, .ca, and .uk domains simultaneously – the due-diligence and escrow structure must be tailored to each zone separately. A single purchase agreement can cover all three, but the release conditions, the eligibility confirmations, and the dispute-risk representations must be zone-specific. We structure multi-zone acquisitions by parallel escrow tracks, each releasing independently on zone-specific confirmation, to avoid a delay in one zone holding up payment in a zone where the transfer has already completed.

What red flags should pause or kill a .ca domain deal?

Not every .ca domain offered for sale is a clean asset. Several patterns appear repeatedly in our transaction work, and each warrants serious caution.

• An open CDRP or UDRP complaint: a domain that is already the subject of a pending complaint cannot be safely acquired until the complaint resolves. Buying mid-proceeding transfers the exposure to the new registrant without necessarily extinguishing the complaint.
• A seller who resists WHOIS disclosure or a lock-status waiver: a legitimate seller has no reason to refuse confirmation of the domain's current registry status. Resistance suggests either a lock that cannot be lifted or a chain-of-title problem the seller does not want surfaced.
• A domain string that closely matches a registered Canadian trademark: the closer the match, the higher the CDRP risk after closing. A buyer who acquires a domain confusingly similar to a Canadian trademark, even in good faith, may face a CDRP complaint from the trademark owner within months.
• A recently transferred domain: a domain that changed registrants in the sixty to ninety days before the proposed sale may indicate a prior hijacking, a forced transfer, or an attempt to launder a domain's history. The chain of title should be traced to the original registration.
• A seller demanding non-escrow payment: any seller who insists on payment outside a neutral escrow – by wire before transfer, by cryptocurrency with no recourse, or by any other unsecured method – is presenting a structural risk that no purchase agreement can adequately cure.

When a red flag appears mid-diligence, the buyer's options are renegotiation (price reduction, extended warranty, or indemnity), a pre-closing waiting period, or walking away. Escrow does not cure a bad asset; it protects the buyer's money while the asset is being assessed.

What does a properly structured .ca domain purchase agreement include?

The purchase agreement is the legal spine of the transaction. For a .ca domain, it must address at least the following points beyond standard commercial boilerplate.

First, CIRA eligibility confirmation by both parties. The seller confirms that it currently meets Canadian Presence Requirements and has the authority to transfer. The buyer confirms its own eligibility to hold the domain post-transfer. This confirmation should be a condition precedent to closing, not merely a representation.

Second, dispute-free status at closing. The seller represents that no CDRP complaint, UDRP complaint, or court proceeding is pending or threatened as of the closing date, and that the seller has not received any pre-complaint demand letter from a trademark owner relating to the domain. The survival period for this representation should be long enough to cover the typical complaint-filing window after a publicly visible transfer.

Third, the escrow mechanics in the agreement itself. The agreement should identify the escrow service by name, state the release condition precisely (CIRA WHOIS confirmation), and provide the extension and termination mechanics described above. Do not leave the escrow structure to a side letter; it should be in the main agreement so the parties' obligations are unambiguous.

Fourth, the auth-code delivery obligation. The seller must deliver a valid, unexpired EPP auth code to the gaining registrar within a defined window after the escrow agent confirms receipt of funds. A failure to deliver a valid code within that window is a material breach triggering automatic fund reversion.

Fifth, post-closing cooperation. The seller agrees to take any further actions CIRA or the registrar requires to complete the transfer – for instance, responding to a confirmation email from CIRA's system – within a short defined window. This obligation is often overlooked and becomes critical when registrars require seller-side action after transfer initiation.

The agreement should be governed by Canadian law, with a dispute-resolution clause appropriate to the parties' jurisdictions. For purely domestic .ca transactions, an Ontario or British Columbia forum clause is common. For cross-border deals – a US buyer acquiring a .ca domain from a Canadian seller – the governing law and forum clause requires careful attention to enforceability in both jurisdictions.

Related at COGNOMEN

• Domain transactions, due diligence, and brand-protection monitoring across all zones
• How to run pre-acquisition due diligence on a domain for a finance-sector buyer
• URS vs. UDRP for new gTLD and .co disputes: which procedure fits your case