How to structure escrow for a .xyz domain purchase

A buyer wires a five-figure sum for a .xyz domain, the seller pockets the money, and the transfer never arrives. That situation is not hypothetical. It plays out regularly in the secondary market for new-gTLD names, where informal deals still outnumber properly structured closings. Structuring escrow for a .xyz domain purchase eliminates that risk entirely – and does considerably more besides, because a well-run closing also catches tainted chain of title before funds change hands.

To structure escrow for a .xyz domain purchase, the parties agree on a neutral third-party escrow agent, deposit funds before any transfer instruction is sent to the registrar, confirm that the domain has no active UDRP complaint, prior adverse decision, or ownership dispute, and release funds only after the gaining registrar confirms the transfer is complete. The .xyz zone operates under the UDRP administered by WIPO, the Forum, and other approved providers, meaning a domain with a troubled history can be stripped from a buyer after closing. Due diligence and proper escrow sequencing are the only reliable safeguards.

This page covers the legal context for .xyz transactions, the due-diligence checks a buyer must run, the mechanics of escrow from deposit to release, and the steps COGNOMEN takes when handling a .xyz closing.

Why does .xyz escrow require more than a standard payment hold?

Escrow in a domain deal is not a simple payment processor. It is a legal arrangement that sequences fund release against confirmed registrar transfer – and for a .xyz name, the sequencing must also account for the Policy risk the buyer inherits. The .xyz registry operates as an ICANN-accredited gTLD, which means the UDRP in full applies to every name in the zone. A buyer who acquires a domain without checking its dispute history steps into whatever liability the previous registrant created.

Consider two situations. In the first, the seller registered the .xyz name legitimately, used it for a bona fide business, and the name has never been the subject of a complaint or an adverse panel decision. Standard escrow mechanics are sufficient: fund deposit, transfer verification, release. In the second situation, the seller registered the name after a brand owner's trademark became famous, parked it on a pay-per-click page, and received a UDRP complaint that the seller quietly settled or ignored before listing the domain for sale. The new buyer – who may have paid a market rate – has acquired a name that a future complainant can argue was registered in bad faith at inception. The transfer to a new registrant does not reset that bad-faith registration date.

That distinction drives everything about how COGNOMEN structures a .xyz closing. The escrow arrangement is the payment mechanism. The due-diligence review is what makes the escrow meaningful.

What due-diligence checks apply before closing a .xyz purchase?

Four categories of review must be completed before an escrow agent is instructed to release funds. Each addresses a different layer of risk that is specific to the .xyz zone and to UDRP-governed gTLDs more broadly.

Chain-of-title verification. The RDDS (WHOIS) record shows the current registrant but rarely shows the full ownership history. Older registrations may have passed through multiple resellers, expired, been back-ordered, or been transferred by a prior UDRP panel decision or a court order. A buyer should request a certified transfer history from the registrar where possible, and verify that the seller is the legal registrant of record – not merely an account holder on a platform that holds the domain in its own name. In our practice, we regularly identify cases where the listed seller is a reseller platform whose legal title differs from what the buyer believed they were purchasing.

Prior UDRP complaint search. WIPO and the Forum both maintain public case-filing archives. Any UDRP complaint filed against the .xyz domain – decided, withdrawn, or pending – is searchable. An adverse transfer decision on record is an obvious red flag; but a withdrawn complaint can be equally telling. A seller who settled a dispute by making a payment to a brand owner, or who withdrew the domain from an earlier sale under pressure, may be offering the domain precisely because the dispute risk has become unmanageable. The search must cover all four approved UDRP providers, not WIPO alone.

Trademark conflict assessment. A domain may have a clean dispute history and still carry forward-looking UDRP risk if the name is confusingly similar to a registered trademark held by a third party who has not yet filed. Confusing similarity under Paragraph 4(a)(i) of the UDRP is assessed objectively: a panel compares the domain to the mark without regard to the registrant's intent. Before funds clear, a buyer should commission a trademark clearance search in the jurisdictions where the domain is intended to be used, and assess whether the name's registration date predates any relevant mark.

Registrar lock and transfer eligibility. A domain that has been transferred within the past 60 days is typically subject to a registrar transfer lock under the ICANN transfer policy. A seller who recently acquired the domain in a flip, or who transferred it between their own accounts, may be offering a name that cannot actually be transferred for weeks. The escrow timeline must build in the lock period check, or the buyer risks being unable to receive the transfer at all.

To run a pre-acquisition due-diligence review on a .xyz domain before committing to an escrow, contact info@cognomenlaw.com.

How is a domain escrow structured step by step for a .xyz deal?

A properly structured .xyz escrow follows five sequential stages, each of which has a defined trigger and a defined consequence if the trigger is not met. The sequence protects both sides.

Stage one: agreement and escrow instruction. The buyer and seller sign a short purchase agreement that specifies the domain name, the agreed price, the identity of the escrow agent, the transfer deadline, and the conditions for fund release and fund return. The agreement also identifies which party bears registrar transfer fees and which bears escrow service fees, which are typically modest relative to the transaction value. The agreement should reference the UDRP risk allocation: if a UDRP complaint is filed and upheld after closing and the domain is transferred away from the buyer, the agreement should specify whether the seller is obligated to return funds.

Stage two: fund deposit. The buyer deposits the full purchase price with the escrow agent. No funds are sent directly to the seller at this stage. The escrow agent confirms receipt and notifies both parties. The domain remains with the seller until the escrow agent issues a transfer instruction. This sequencing is essential: a buyer who pays before the escrow agent confirms receipt has no practical recourse if the seller disappears.

Stage three: due-diligence window. From the date of fund deposit, the agreement should provide a defined window – typically five to ten business days – within which the buyer's counsel completes the four-category review described above. If a material defect is found (an active UDRP complaint, an adverse decision, a trademark conflict that the seller did not disclose), the buyer instructs the escrow agent to return funds without closing. The seller should be required to cooperate with the registrar during this window by confirming that no transfer lock exists and that no UDRP complaint is pending or threatened.

Stage four: registrar transfer execution. Once due diligence is cleared, the escrow agent authorizes the transfer. The seller initiates the transfer with their registrar, the gaining registrar accepts, and – under ICANN's standard five-day transfer window for gTLDs – the transfer completes. The escrow agent monitors completion, which is typically confirmed by a RDDS query showing the new registrant of record. For .xyz, which operates on a standard gTLD transfer protocol, this process normally completes within the five-day window absent a dispute or a registrar delay.

Stage five: fund release. Only after the gaining registrar confirms the transfer and the RDDS record reflects the buyer as the new registrant does the escrow agent release funds to the seller. The release instruction is the final act. Any dispute about the transfer that arises after release – including a UDRP complaint filed by a third party against the buyer – is a separate matter handled under the Policy. The escrow does not insure against post-closing UDRP risk; that is what the pre-closing due diligence addresses.

In a recent matter involving a .xyz domain (spring 2025), we identified a withdrawn UDRP complaint in the due-diligence window. The seller had not disclosed it. The complaint had been withdrawn before a decision, but the underlying trademark conflict remained live. We instructed the escrow agent to hold funds, renegotiated the price downward to reflect the residual risk, and closed the transaction with a contractual indemnity running from the seller to the buyer for any future UDRP loss on that specific ground. The transaction closed; the buyer went in with eyes open.

How is WIPO different from a national court for a .xyz dispute?

WIPO administers UDRP cases for .xyz as an ICANN-approved provider, and the remedies it can grant are strictly limited: transfer or cancellation of the domain, nothing else. No damages. No legal costs. No injunction against the registrant's other conduct. A WIPO panel cannot order the seller in a domain transaction to repay a buyer, and a buyer who acquires a tainted domain and later loses it to a UDRP complaint has no remedy from WIPO against the seller.

That matters enormously when structuring the purchase agreement. The contractual indemnity between the parties, the fund-return trigger in the escrow agreement, and the due-diligence representations the seller makes are the only practical remedies available if the UDRP risk materializes post-closing. A national court could, in principle, adjudicate a breach-of-contract claim against a seller who misrepresented the domain's dispute history – but that litigation is slow, cross-border, expensive, and requires coordinating with local litigation counsel in the relevant jurisdiction. The purchase agreement is the first, and usually the only cost-effective, line of defense.

WIPO's UDRP procedure is also significantly faster than litigation: a standard case runs approximately two months from filing to decision. If a third-party brand owner files a UDRP complaint against a buyer shortly after closing, the buyer must respond within 20 days of commencement, assemble a legitimate-interest record, and often contest a complainant who can point to the domain's prior bad-faith registration history as circumstantial evidence. Starting that defense without counsel – and without the due-diligence record that COGNOMEN would have assembled before closing – is a significant disadvantage.

The practical comparison is this: a UDRP filed against a buyer who did proper due diligence before closing is almost always a stronger defense than one filed against a buyer who simply paid and hoped. The prior-dispute history, the trademark clearance, and the chain-of-title record all become evidence in the respondent defense. We build that record at the acquisition stage precisely because it may be needed later.

If you are facing a UDRP complaint after acquiring a .xyz domain, or need help structuring a respondent defense, email info@cognomenlaw.com.

What evidence decides the outcome of a UDRP complaint touching a .xyz transaction?

When a UDRP complaint targets a .xyz domain that recently changed hands, the panel's analysis focuses on whether the registration was made in bad faith at inception – and whether the new registrant has a legitimate interest of their own. These two questions are addressed separately, and a buyer who acquires a domain from a bad-faith registrant does not automatically inherit the prior bad faith, but they do inherit the evidentiary burden of establishing their own legitimate interest.

The evidence that matters most on the bad-faith side includes: the date the domain was registered relative to the complainant's trademark rights, any pay-per-click or redirect content that appeared on the domain, communications in which the prior owner offered to sell the domain to the mark holder, and prior UDRP filings or demand letters. All of that evidence is discoverable before a closing if the buyer commissions a proper review.

On the legitimate-interest side, Paragraph 4(c) of the UDRP lists the safe harbors: a bona fide offering of goods or services under the domain name before notice of the dispute; being commonly known by the domain name; and legitimate noncommercial or fair use. A buyer who acquires a .xyz name for a planned business, begins using it in a documented bona fide way, and can show that the name corresponds to their own brand or project is in a materially stronger position than one who bought it purely for resale.

In a second matter (autumn 2024, a portfolio acquisition of several .xyz names), a brand owner filed a UDRP complaint against one of the domains within weeks of the transfer to the buyer. Because we had run the full due-diligence review before closing, we had a clean chain-of-title record, a trademark clearance confirming the name predated the complainant's first use in commerce in the relevant class, and documented evidence of the buyer's intended bona fide use. The complaint was denied. The buyer retained the name.

Which forum should handle a UDRP complaint about a .xyz domain?

The .xyz registry designates ICANN-approved UDRP providers, and as a practical matter the overwhelming majority of .xyz disputes are handled by WIPO or the Forum, which together account for approximately 97% of all UDRP proceedings across all zones. The Czech Arbitration Court (CAC) offers a lower entry-cost option. The choice of forum is made by the complainant at the time of filing, so a buyer responding to a complaint has no forum-selection right. A buyer filing a complaint – for example, against a seller who fraudulently transferred a different domain than was agreed – must select the forum at the outset.

For a buyer weighing whether to file a complaint at all, the decision depends on the relief sought and the budget. WIPO's single-member panel filing fee is USD 1,500 for one to five domains. The Forum begins around USD 1,300 for one to two domains. The CAC begins lower still. Legal fees for preparing the complaint are separate, typically in the USD 3,000–7,000 range for a straightforward single-domain matter. A court action – which could reach damages, unlike the UDRP – is substantially more expensive and requires working with local litigation counsel where the respondent or the relevant assets are located.

For most .xyz purchase-related disputes, the UDRP at WIPO or the Forum is the faster and more cost-proportionate route. Court action makes sense where the escrow fraud involves conduct beyond a domain transfer, where the amounts at stake justify extended litigation, or where the UDRP's remedies – transfer or cancellation only – are insufficient for the situation.

How does COGNOMEN handle a .xyz escrow and due-diligence engagement?

COGNOMEN's process for a .xyz transaction engagement follows a defined sequence. We begin with a conflict check and a review of the proposed terms before the buyer commits to the purchase agreement. We then run the four-category due-diligence review: chain-of-title, UDRP complaint history across all providers, trademark conflict assessment, and transfer-lock verification. We advise the client on any findings and, where a risk is identified, on the contractual mechanisms – price adjustment, seller indemnity, fund-return trigger – that can mitigate it.

Where the transaction proceeds, we draft or review the purchase agreement to ensure the escrow mechanics, the transfer timeline, and the post-closing UDRP risk allocation are accurately captured. We work with the escrow agent through the transfer window and confirm release conditions are met before authorizing fund release. Where a UDRP complaint is filed against the buyer after closing, we can transition directly into respondent defense, using the due-diligence record assembled before closing as the foundation of the evidence file.

We operate at a flat-fee structure for the due-diligence and transaction-management phase, quoted at the outset. Respondent defense, if needed, is quoted separately. We do not obscure fees, and we distinguish between the forum's filing fee – a fixed published amount – and our own legal fee, which is always presented as a separate line.

What we do not do is guarantee outcomes. A well-structured escrow and a thorough due-diligence review reduce risk materially. They do not eliminate the possibility that a third-party brand owner will file a UDRP complaint after closing, or that a panel will reach an adverse decision on the facts. We make those odds as favorable as the evidence permits.

Related at COGNOMEN

• Domain transactions, due diligence, and portfolio brand-protection services
• Structuring escrow for a .ae domain purchase and transfer
• How to check ccTLD eligibility requirements before a domain purchase

Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Domain in disputeYour sideI want to recover a nameI received a complaint — I need a defensePortfolio / brand protectionWhat happenedEmailI agree to the processing of my enquiry as described in the privacy policy.Assess my case

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.