How to file a UDRP complaint for a .finance domain

How to file a UDRP complaint for a .finance domain. UDRP and ccTLD domain recovery and defense across .finance. Email the firm to assess your case.

A financial services brand discovers its name registered as a .finance domain — pointing at a competing advisory site, a phishing page, or simply a parking page demanding five figures to transfer. The owner wants the domain back. The question is whether the UDRP applies to .finance and what it takes to prevail.

The UDRP fully applies to .finance, a new generic top-level domain delegated under ICANN's expansion program. To recover the domain, a complainant must satisfy all three elements of Paragraph 4(a) of the UDRP: the domain is confusingly similar to a mark in which the complainant has rights; the registrant lacks rights or legitimate interests; and the domain was registered and is being used in bad faith. A standard case before WIPO runs approximately two months from filing to decision, with transfer or cancellation as the only available remedies.

This page sets out what applies in .finance, how to assemble and file the complaint, what the panel will weigh, and when UDRP is the right route versus other options.

Why the UDRP governs .finance disputes

.finance is a new generic top-level domain, and every accredited registrar operating in it is bound by ICANN's Uniform Domain Name Dispute Resolution Policy. That policy has governed gTLD disputes since 1999 and applies automatically to .com, .net, .org, and hundreds of newer gTLDs including .finance. No separate application or opt-in is needed.

Because .finance is a gTLD, none of the ccTLD-specific procedures — Nominet DRS for .uk, EURid ADR.eu for .eu, DENIC dispute entries for .de — apply here. The UDRP is the administrative path. Court action in the relevant jurisdiction remains available for cases where the Policy's remedies are insufficient or the registrant's location makes judicial enforcement preferable, but for most complainants in the financial services sector the UDRP is the faster, lower-cost starting point.

What does that mean practically? It means that a UK-based asset manager, a US broker-dealer, or a Singapore fintech firm can file a UDRP complaint against a .finance domain registrant located anywhere in the world, before WIPO in Geneva, using a single set of procedural rules. The result — a panel-ordered transfer — will be implemented by the registrar regardless of the registrant's jurisdiction.

Following WIPO's 2025 record caseload of 6,282 domain-name cases, new-gTLD disputes including .finance extensions have formed a growing share of the docket. Panels adjudicating these disputes apply the same UDRP elements they apply to .com. The new zone does not change the test. It does, however, affect the context in which bad faith is assessed — financial-sector branding concerns carry specific weight with panelists when a domain is used in a manner likely to mislead consumers about financial services.

What must a complainant prove? The three UDRP elements

A complaint that does not establish all three Paragraph 4(a) elements fails, regardless of how clearly the registrant's conduct looks abusive. Each element is distinct, and panels treat a shortcoming in any one as fatal. Here is what each requires in the context of a .finance domain.

Element one: confusing similarity to a mark. The complainant must hold trademark rights — registered or, in some jurisdictions, unregistered common-law rights — and the domain must be identical or confusingly similar to that mark. In .finance disputes, panels apply the standard comparison: strip the TLD, compare the remaining string to the mark, and assess whether a consumer would perceive a connection. A domain that adds a generic financial term — "loans", "advisors", "capital" — alongside a registered mark is routinely found confusingly similar. The .finance TLD itself can heighten confusion for a financial-sector mark because it reinforces the apparent association.

Element two: no rights or legitimate interests. The complainant cannot prove a negative outright. Instead, it must make a prima facie case that the registrant lacks any rights, shifting the burden of production to the respondent. The three Paragraph 4(c) safe harbors the respondent can invoke are: use of the domain in connection with a bona fide offering of goods or services before notice of the dispute; being commonly known by the domain name; or legitimate noncommercial or fair use without intent to mislead. In practice, financial-services domains registered by parties with no recognizable industry presence and pointed at pay-per-click pages rarely survive this element.

Element three: bad faith in registration AND use. Both halves of this element are required. Panels look at Paragraph 4(b) factors — registration primarily to sell to the mark owner; disruption of a competitor; intentional attraction of users by creating confusion — but also at circumstantial evidence. Passive holding of a domain confusingly similar to a well-known financial brand has long been treated by panels as sufficient use in bad faith. A .finance domain parked after registration, with no active development, fits squarely into that pattern.

At this stage, many brand owners ask whether the evidence already in hand is enough to sustain a complaint. To assess whether the three UDRP elements are met for your .finance domain, reach us at info@cognomenlaw.com.

How do you file a UDRP complaint for a .finance domain at WIPO?

Filing at WIPO is the most common path: WIPO and the Forum together handle approximately 97% of all UDRP proceedings, and WIPO's published procedures for new gTLDs including .finance are well established. Here is the sequence.

Step 1 — Pre-filing assessment. Before drafting, confirm the complainant holds trademark rights the panel will recognize, identify the registrant (review WHOIS/RDDS records, noting that registrant data is often privacy-shielded), and build the evidence file. Evidence that materially strengthens the complaint includes the mark registration certificate, RDDS data showing registration date relative to the mark, screenshots of the domain's current use, and records of any unsolicited buy-back offer from the registrant. Where the domain is being used for phishing or financial fraud — a real concern in this sector — preserve screenshots and header data immediately, as that content is often removed quickly.

Step 2 — Draft and file the complaint. WIPO's online filing center accepts the complaint, the evidence annex, and the filing fee simultaneously. The complaint identifies the disputed domain, the forum, the complainant's mark rights, and the three elements with supporting argument. For 1–5 domains before a single-member panel, the WIPO filing fee is USD 1,500. If the complainant selects a three-member panel, the fee rises to USD 4,000. Multiple .finance domains may be joined in a single complaint where the registrant is the same holder across all of them.

Step 3 — Commencement and response period. WIPO reviews the complaint for formal compliance, notifies the registrar, and commences the case. From commencement, the respondent has 20 days to file a response. If no response is filed, the panel proceeds on the complaint alone. A default does not guarantee a transfer — the panel still independently reviews the elements — but the absence of a counter-narrative significantly shapes the outcome.

Step 4 — Panel appointment and decision. WIPO appoints the panel from its roster. A single-member panel is the standard; either party may request three members, with the higher fee shared. The panel issues its decision, typically within 14 days of appointment, and the registrar implements a transfer or cancellation within roughly 10 business days of the decision, absent a court challenge by the respondent.

Step 5 — Registrar implementation. Once a transfer order issues, the registrar moves the domain to the complainant's designated account. A 10-business-day implementation window applies by default. End to end, a standard uncontested .finance UDRP case typically closes in approximately two months from filing.

In a recent matter — a .finance domain complaint filed in autumn 2024 — we assembled the brand-rights record for a fintech company whose mark had been registered as a .finance domain roughly six months after the complainant's EU trademark issued. The registrant never responded. The panel transferred the domain in approximately eight weeks from commencement.

What evidence is decisive in a .finance UDRP?

The complaint wins or loses on the evidence behind each element. Panels do not conduct independent investigation; they rule on what the parties submit. In our practice, the evidence gaps that most often undermine otherwise strong complaints in financial-sector cases are predictable — and avoidable.

Mark rights evidence. A certified copy or official printout of the trademark registration, with filing and registration dates clearly visible, is essential. Where the complainant relies on common-law rights — an unregistered mark built through use — panels require substantially more: evidence of the extent of use, consumer recognition, and the geographic scope of the reputation. Financial brands with strong registered marks in multiple jurisdictions are in the strongest evidentiary position.

Registration date and bad-faith timing. The gap between the complainant's trademark priority date and the domain registration date is one of the first things a panel looks at. A domain registered years before the complainant's mark was filed faces an uphill fight on bad faith. Conversely, a domain registered within days of a major product launch or funding announcement — a pattern we see with regularity in the fintech space — strongly supports an inference of targeting.

Use-in-bad-faith evidence. Screenshots of the domain's live content, captured and dated, are critical. Pay-per-click landing pages with financial-sector ad categories, competing financial advisory services, phishing pages mimicking the complainant's brand, or bare parking pages with a "for sale" notice each support different aspects of the bad-faith analysis. Preserve this evidence early. The registrant can change the site's content after receiving the complaint, and a panel will look at the record as filed, not at what the page says on decision day.

Evidence of a buy-back demand. If the registrant contacted the complainant unsolicited with a price for the domain — or vice versa — that correspondence is significant. An unsolicited offer at a price exceeding out-of-pocket registration costs is one of the Paragraph 4(b) bad-faith indicators. Preserve every email, message, or broker communication.

Pattern of abusive registrations. Where the respondent holds multiple domains that appear to target third-party marks — something visible through a reverse WHOIS search — panels treat that pattern as a separate Paragraph 4(b) factor. Identifying this pattern before filing gives the complaint an additional ground that is especially useful when the domain's current use is ambiguous.

If a prior complaint produced an unsatisfactory result, or if you are assessing whether the evidence you hold is sufficient to sustain the three elements, contact info@cognomenlaw.com before filing.

How does the UDRP compare to a court action for a .finance domain?

The right route depends on what the complainant needs and what the registrant's conduct makes possible. The UDRP and a court action are not mutually exclusive — the Policy expressly preserves the right to litigate — but they serve different purposes, and selecting the wrong one costs time and money.

Where the goal is domain transfer and the registrant's conduct fits the three elements, the UDRP is almost always faster and materially less expensive. A standard WIPO case runs roughly two months at a forum fee of USD 1,500 for a single-member panel, against a legal-fee market range that a specialist can estimate in advance. Court proceedings — whether US anticybersquatting litigation or the equivalent in another jurisdiction — can take months to years, with costs several multiples higher and no certainty that the registrant can be served in the relevant country.

When does a court action make more sense? First, when the complainant needs monetary damages — the UDRP offers only transfer or cancellation, no compensation for diverted revenue or harm caused by a phishing site. Second, when the registrant is actively contesting the matter and has a plausible defense under the Policy that would fail under a stricter evidentiary standard in court. Third, when the domain is being used for fraud or financial crime where regulatory or law-enforcement engagement is already in motion and a court order is needed to support it.

A third possibility applies where the registrant holds both a .finance domain and a ccTLD version of the same name — say, both a .finance and a .uk. In that scenario, the complainant can pursue a simultaneous UDRP for the .finance domain and a Nominet DRS complaint for the .uk domain. These are entirely separate proceedings under different rules. The Nominet DRS uses an "abusive registration" test and — critically — reads "registered or used" abusively, a lower cumulative bar than the UDRP's "registered and used in bad faith." Running both in parallel, timed correctly, gives brand owners coverage across zones without waiting for one result before starting the other.

For a .de counterpart of the same brand conflict, neither the UDRP nor the DRS applies. DENIC offers a DISPUTE entry to block transfer while the complainant pursues a claim through the German courts. We refer court-side work in that jurisdiction to local litigation counsel in the relevant jurisdiction.

In a parallel matter handled in spring 2025 — a complainant whose brand had been registered as both a .finance domain and a European ccTLD variant — we assessed the two procedures simultaneously, filed the UDRP for the .finance domain, and coordinated timing with the ccTLD procedure to avoid any gap during which the registrant might transfer either domain to a third party before a decision issued.

Is the UDRP the right choice for your specific .finance domain?

Not every .finance registration that looks abusive will satisfy all three UDRP elements. The most common reason strong-seeming cases fail is not a weak mark — it is a weak record on the bad-faith element. Panels have dismissed complaints where the complainant held a strong trademark but could not establish that the registrant knew of the mark at the time of registration. That knowledge is inferred from the facts: how distinctive is the mark, how long has the complainant been operating under it, and is the domain string so specific that an innocent registration is implausible?

A pre-filing element check matters more than brand owners sometimes expect. Filing a weak complaint does not just fail — it risks an RDNH finding. Reverse Domain Name Hijacking is a finding that the complaint was brought in bad faith to deprive a legitimate registrant of a domain they hold lawfully. RDNH findings carry no monetary penalty under the Policy, but they are published, attached to the complainant's record, and — in cases involving financial sector brands — visible to regulators and counterparties. We regularly advise complainants who want to understand the RDNH risk before committing to a filing.

A domain that is genuinely defensive — a brand owner wanting to hold a .finance version of its own name before a squatter does — is better addressed through pre-registration monitoring and acquisition than through a complaint. That is a transaction, not a dispute, and it involves different due-diligence considerations.

The realistic decision matrix looks like this: if the domain is registered after your mark, points at financial content, and the registrant has no evident connection to the name, a UDRP complaint at WIPO is the logical first step. If the registration predates your mark, if the registrant has any plausible claim to the name, or if the conduct involves financial fraud requiring immediate enforcement action, a different route or a sequenced strategy is needed before filing.

Related at COGNOMEN

• UDRP domain recovery across gTLDs — the full scope of the service
• How to prove no legitimate interest in a domain name dispute
• ccTLD mediation and dispute procedures — country-code domain recovery