How to recover a .au domain after a failed buy-back negotiation

How to recover a .au domain after a failed buy-back negotiation. UDRP and ccTLD domain recovery and defense across .au. Email the firm to assess your case.

A registrant demands five figures for a domain that carries your Australian trademark. You countered. They refused. The negotiation has stalled, and the domain is still pointing at a parked page or, worse, a competing service. What now?

To recover a .au domain after a failed buy-back negotiation, the standard route is the auDRP – Australia's adaptation of the UDRP – which tracks all three elements of Paragraph 4(a): confusing similarity to a mark you hold, no rights or legitimate interests in the registrant, and bad-faith registration or use. A standard auDRP case typically resolves within roughly two months, and the only available remedies are transfer or cancellation of the domain. No monetary damages are awarded.

This page sets out the auDRP test, the evidence that decides outcomes, the forum mechanics, and when a court route is the better call.

What is the auDRP and when does it apply to .au domains?

The auDRP is Australia's domain-dispute procedure, administered through .au registrations, and it closely tracks the three UDRP elements established under the ICANN Policy. If you hold a trademark – registered in Australia or with demonstrable common-law rights – and a third party registered a .au domain that matches or closely resembles it, the auDRP gives you a formal, relatively fast path to force a transfer or cancellation without going to court.

The procedure applies to second-level .au domains: .com.au, .net.au, .org.au, and the direct .au second-level space introduced in 2022. Each of these zones sits under auDA, the .au registry authority. auDA has approved auDRP providers, and a complaint is filed directly with one of them rather than with ICANN forums such as WIPO or the Forum – though those providers may be familiar to practitioners who work across gTLD and ccTLD disputes.

Why does that distinction matter? Because the governing rules are Australian in scope. Eligibility for .au registration historically required an Australian nexus – a registered Australian Business Number, an incorporated entity, or trademark rights filed with IP Australia. That nexus requirement means the population of potential abusive registrants is somewhat narrower than in the .com space, but buy-back demands still arise, and they arise regularly. We advise brand owners who have already attempted a private purchase and been refused or priced out; the auDRP is typically the next logical step.

One important nuance: in some respects the auDRP reads the bad-faith limb as "registered or used" in bad faith rather than the cumulative "registered and used" standard under the UDRP. Treat that distinction as a substantive advantage in certain cases – particularly where a domain was registered opportunistically but has since gone dormant. In our practice, passive holding of a .au domain that was plainly registered to intercept your brand is a fact pattern that can support a transfer order. We address it in the evidence section below.

How do the three auDRP elements work in practice?

A complainant must satisfy all three elements of the applicable Paragraph 4(a) equivalent. Fail on one and the complaint fails entirely. Here is how each element plays out after a buy-back negotiation has collapsed.

Element one: confusing similarity. You need a trademark. Registered rights in Australia are the clearest proof – an IP Australia trademark registration establishes rights without further argument. Unregistered, common-law rights are accepted but require evidence of use and recognition in the market: brand promotion, revenue figures, media coverage. A domain that incorporates your mark verbatim, with only a generic suffix or minor variation added, almost always clears this element. The failed buy-back negotiation itself is irrelevant to element one; this is a textual comparison between the domain and the mark.

Element two: no rights or legitimate interests. The complainant carries the initial burden, but panels generally accept that simply asserting there is no connection between the registrant and the mark shifts the burden in practice. The registrant then needs to show a bona fide offering of goods or services before receiving notice of the dispute, common recognition by the name, or legitimate noncommercial use. A registrant who has sat on the domain and made a buy-back demand has typically already undermined any legitimate-use argument. They have revealed the commercial motivation. That is evidence you should preserve.

Element three: bad faith. This is where the failed negotiation becomes an asset rather than a liability. Paragraph 4(b) of the applicable rules lists specific bad-faith indicators, including registration primarily to sell the domain to the trademark holder at a price exceeding out-of-pocket costs. A documented demand for a five-figure sum – particularly one sent before any use of the domain for a genuine commercial purpose – goes directly to this factor. Preserve every message, every email, every intermediary communication. Do not delete them. Screenshot with metadata intact.

The passive-holding scenario deserves specific attention here. Some registrants, once a buy-back negotiation fails, simply park the domain and wait. Under the UDRP strict standard, passive holding has been treated as bad-faith use in appropriate circumstances. Under the auDRP, where the bad-faith limb may be read disjunctively, a domain registered in bad faith is already suspect even without active use. We analyze the specific version of that limb carefully in each .au matter, because it determines how much of your evidence argument should rest on registration conduct versus current use.

What evidence decides the outcome of a .au domain dispute?

Evidence is the substance of the case. The auDRP is a documents-only procedure: no oral hearing, no live witnesses, no cross-examination. The panel reads the complaint, the response, and any annexes, and decides. That structure makes the initial assembly of evidence the decisive step.

The buy-back correspondence is your first exhibit. It should show: who initiated contact, what sum was demanded, whether the demand referenced your trademark or your business by name, and whether there was any colorable claim to a legitimate reason for holding the domain. A registrant who writes "I know this is your brand and I want USD X" has handed you the third element. One who claims to have registered the domain for an independent project and was simply open to selling faces harder analysis – but the absence of any actual independent use often answers that claim.

Your trademark evidence comes next. A certificate of registration from IP Australia is ideal. If you are relying on common-law rights, compile: first-use dates, sales figures over time, advertising spend, press coverage, and any evidence that the public associates the mark with your business. Common-law rights arguments require real substance in the .au space.

WHOIS and registration history data matter too. When was the domain registered relative to your trademark first use? A registration that post-dates the mark's public launch, particularly by a short interval, is circumstantial evidence of opportunistic registration. Historical WHOIS records, where accessible through RDDS or third-party archival services, can show whether the domain changed hands before the buy-back approach.

Comparable prior use is worth examining as well. Did the registrant ever operate a genuine website? Has the domain resolved to anything other than a parking page or a redirect? Archived captures through public web-archive services are useful exhibits. A domain that has resolved exclusively to pay-per-click links in categories related to your industry is a recognized bad-faith indicator under the applicable rules.

In a recent matter – a .com.au registration in the consumer-services sector, autumn 2024 – we assembled the buy-back correspondence alongside two years of archived parking-page captures and an IP Australia registration predating the domain by three years. The panel transferred the domain within approximately nine weeks of filing. The registrant did not respond. Default cases move faster, but the evidence still matters: a panel conducting its own analysis under the applicable rules is not a rubber stamp.

Which forum do you file with, and what does it cost?

auDRP complaints are filed with an auDA-approved dispute-resolution provider. The filing fees are set by the approved providers and are separate from any legal fees. For the most current fee schedule, confirm with the provider at the time of filing; the figures can change and we do not quote current provider fees from memory in this article – contact us for a current assessment. What we can say is that the official filing fee for an auDRP proceeding is materially lower than the WIPO rate for a comparable .com case (where the WIPO filing fee starts at USD 1,500 for a single-member panel), and is comparable in range to other ccTLD dispute procedures.

The process follows five stages: complaint submission and formal review, commencement and notice to the registrant, the response period (20 days for the respondent to file), panel appointment, and the decision followed by registrar implementation. A standard case, with a single-member panel and no procedural complications, typically concludes within roughly two months of commencement. A three-member panel adds cost and may add time; the complainant and respondent share the higher fee if the respondent elects a three-member panel after the complainant requested one panelist.

The only remedies available under the auDRP are transfer of the domain to the complainant or cancellation of the registration. There are no monetary awards. If your objective requires compensation for the period of unauthorized use, the auDRP cannot provide it; that path runs through the courts with the assistance of local litigation counsel in the relevant jurisdiction.

If the buy-back route has stalled and you want a read on whether the three auDRP elements are met in your situation, reach us at info@cognomenlaw.com.

How does the auDRP compare to the UDRP for .com, and when should you consider court?

The right route depends on the domain zone and the remedy you need. Here is how the decision tree typically runs after a failed buy-back.

If the infringing party holds both a .com.au and a .com registration, you face two separate proceedings with different rules. The .com is covered by the standard UDRP, filed at WIPO (starting at USD 1,500), the Forum, CAC, or ADNDRC. The .com.au is covered by the auDRP. They can run in parallel, and panels in one proceeding will sometimes take notice of a prior decision in the other – though neither is binding on the other. In our practice, we assess whether to file simultaneously or sequentially based on the strength of the evidence portfolio and the registrant's apparent profile. A default in the first proceeding can inform strategy in the second.

If the domain is a new gTLD (.brand, .au-adjacent registrations in generic extensions), the URS is available as a suspension mechanism at lower cost – but it only suspends, it does not transfer. For a brand owner who wants the domain, URS is insufficient on its own.

If neither the auDRP nor the UDRP is viable – perhaps because the registrant has a colorable legitimate-interest argument – Australian court proceedings may be the alternative. Courts can award damages, injunctions, and transfer orders, but the process is substantially longer and more expensive. Local litigation counsel in the relevant jurisdiction handles court work; COGNOMEN coordinates the strategy and the dispute-history record that feeds into litigation.

A second scenario where court outperforms auDRP: the domain has been transferred to a succession of registrants to frustrate any single-registrant auDRP complaint. Multiple holders, multiple shells, serial transfers – that pattern requires a different kind of intervention. We have seen it in the .au space, particularly where the original buy-back demand was large enough to suggest a sophisticated operation rather than an opportunistic individual registration.

In a recent matter – a .au direct second-level registration in the professional-services sector, spring 2025 – the registrant responded to the auDRP complaint with a legitimate-interest defense based on an asserted ABN registration. The claimed business had no web presence and no verifiable trading history. We produced the archived ABN records and the ASIC company history alongside the buy-back correspondence; the panel rejected the defense and ordered transfer. The case was resolved in approximately ten weeks.

To weigh the auDRP against an Australian court action for your specific situation, email info@cognomenlaw.com.

What are the respondent's likely defenses, and how do you counter them?

Understanding the defenses a respondent will raise – and preparing to rebut them – is as important as building the complainant's affirmative case. A buy-back negotiation that failed often means the registrant already believes they have a story to tell. Here are the most common defenses in .au proceedings following a failed negotiation.

The registrant claims prior rights. They assert that they registered the domain because they had a matching business name, trademark application, or ABN before the complainant's mark was well-known. If the claim is genuine, it may be dispositive. If it is manufactured post-dispute, the evidence usually falls apart quickly: ASIC records are dated, IP Australia applications are timestamped, and trading history leaves a verifiable footprint. Gather the registrant's ASIC records and ABN registration date before they do.

The registrant claims the domain has commercial value independent of your mark. A domain composed of common words – or a descriptive phrase that happens to match your brand – gives the registrant more argumentative space. In those cases, the buy-back demand price, the absence of any independent use, and the timing of registration relative to your brand's public launch carry greater weight. The combination of a high asking price and zero independent use has persuaded panels that the registration was speculative rather than legitimate.

The registrant argues the buy-back demand was a legitimate offer, not a ransom. Panels are sophisticated about this argument. There is a difference between a domain investor selling a name at market rates and a registrant who registered a name specifically to extract payment from its natural owner. The distinction turns on intent at the time of registration. Evidence of that intent – Google Alerts set on your brand name, registration within hours of a press announcement, a demand letter referencing your trademark by name – all point toward the former rather than the latter.

Reverse Domain Name Hijacking (RDNH). This applies in the auDRP as well as the UDRP. If a complainant files a complaint without a credible case – for example, where the registrant demonstrably registered the domain before the complainant's trademark existed – the panel may find the complaint constituted an abuse of the process. An RDNH finding does not carry a monetary penalty, but it is a reputational mark against the complainant. We assess RDNH exposure before filing every complaint; for registrant-side defense, we build the RDNH argument where the facts support it.

How do you prepare a strong auDRP complaint after a failed negotiation?

The preparation phase determines the strength of the case more than any procedural step. Once the complaint is filed, the evidence is largely fixed; supplemental filings are permitted in limited circumstances, but panels generally disfavor them. Build the file before filing.

Start with a trademark audit. Confirm the status of every registered mark that could apply: the registration number, the goods and services classes, the first-use date, the renewal status. A lapsed mark will not support a complaint. A mark registered after the domain was created faces a harder argument on element three, though acquired distinctiveness and common-law rights before the registration date can bridge that gap in some cases.

Archive the buy-back correspondence in a form that cannot be disputed: full email headers, any messaging-platform screenshots with timestamps and sender handles, any third-party broker communications. If the demand was made through a domain broker or anonymous intermediary, that fact is itself relevant – panels recognize that intermediaries are sometimes used to obscure the registrant's identity during extortionate negotiations.

Research the registrant's identity to the extent the RDDS data permits. Post-GDPR-adjacent privacy redaction is common even in the .au space, but auDA's WHOIS policy requires disclosure of certain registrant data for .au registrations. If the listed registrant is a privacy service, the complaint should request that the provider reveal the underlying registrant; procedural rules allow this.

Consider whether to request a single-member or three-member panel. A single-member panel is faster and less expensive. A three-member panel is warranted where the case involves a genuinely close call on element three, where you anticipate a sophisticated response, or where a prior complaint on the same or related domain was decided adversely. We discuss panel composition with every client before filing.

Finally, draft the complaint with the panel reader in mind. auDRP panels are domain-dispute specialists who read many complaints. A complaint that states the elements clearly, leads with the strongest evidence, and does not overreach on the legal argument is more persuasive than one that buries the key fact in a long narrative. Precision matters. Overstatement invites skepticism.

Related at COGNOMEN

• UDRP domain recovery across gTLDs – WIPO, the Forum, CAC, and ADNDRC
• Recover a typosquat .me domain through the UDRP
• Domain escrow and acquisition for .mx domains