How to recover a typosquatted .au domain

A registrant has taken a close misspelling of your brand as a .au domain – perhaps swapping a letter, doubling a consonant, or dropping a syllable – and parked it, monetized it, or pointed it at a competitor. Your Australian customers type the wrong key and land somewhere you did not authorize. The domain is not yours, yet it trades on your name every day.

To recover a typosquatted .au domain, a brand owner typically files under the auDRP – Australia's adaptation of the UDRP – and must satisfy all three elements of the standard test: the domain is confusingly similar to a trademark in which you hold rights, the registrant has no rights or legitimate interests, and the domain was registered or used in bad faith. A standard case resolves in approximately two months. The only available remedies are transfer or cancellation; no monetary damages are awarded.

This page covers the auDRP test in detail, the evidence that decides .au typosquat cases, the step-by-step process, what the procedure costs, and how it compares to going to an Australian court.

What is typosquatting, and why does it threaten .au registrants?

Typosquatting – the registration of a domain that replicates the visual or phonetic near-miss of a brand name – is one of the most consistently litigated patterns across all domain-dispute forums. In the .au zone, the risk is compounded because .au operates its own second-level structure (both brand.com.au and the newer brand.au), giving squatters twice the opportunity to capture a misspelling.

The harm is direct. A typosquatted .au domain can intercept organic search traffic, harvest affiliate revenue using the brand's reputation, host a phishing site aimed at Australian customers, or simply generate pay-per-click income from parked pages while its registrant waits for a buy-back offer. We regularly advise brand owners who discover a five-figure ransom demand attached to a domain they have never seen before.

The good news for rights holders: typosquatting is among the clearest bad-faith patterns recognized under the auDRP, and the confusing similarity between a misspelling and its mark is rarely in serious dispute. The contested ground – where cases are won or lost – is the evidence of the registrant's intent and the absence of any legitimate interest in the typo string.

How does the auDRP work for .au typosquat recovery?

The auDRP is Australia's adaptation of the UDRP, closely tracking the three-element test of Paragraph 4(a) of the UDRP but applying specifically to .com.au, .net.au, .org.au, .asn.au, .id.au, and the newer direct .au second-level domain. The complainant must establish every element; failure on any one defeats the complaint.

The three elements are:

1. Confusing similarity. The disputed domain must be identical or confusingly similar to a trademark in which the complainant has rights. For a typosquat, this element is almost always met – panels treat a misspelling that differs by one or two characters as confusingly similar to the mark it mimics. The comparison is between the domain string (without the ccTLD suffix) and the mark itself.
2. No rights or legitimate interests. The complainant must show, prima facie, that the registrant lacks any bona fide basis for the registration. The burden then shifts to the registrant to produce evidence of a legitimate interest – typically a commonly-known name, a genuine business offering, or a fair-use scenario. In typosquat cases, registrants who cannot demonstrate any pre-dispute use consistent with the domain string will struggle here.
3. Bad faith registration or use. The auDRP, like many ccTLD adaptations, reads the bad-faith limb as registration or use in bad faith in some respects – treat the precise formulation as a legal question to be confirmed with counsel for your specific case. Panel consensus treats deliberate misspelling combined with commercial use (parking, affiliate links, phishing) as paradigmatic bad faith. Passive holding of a misspelling with no plausible legitimate purpose has also been found to satisfy this element.

A typosquat registration benefits the complainant on the first element, but the second and third elements require evidence. What that evidence looks like is the practical heart of any auDRP filing.

To assess whether your .au typosquat meets all three elements, contact info@cognomenlaw.com.

What evidence decides a .au typosquat case?

Evidence is where cases are decided, and in our practice the complaints that fail are those that treat the confusing similarity as doing all the work. The panel still needs a record on the remaining two elements.

For the no-legitimate-interest element, the most useful evidence includes:

• Screenshots of the domain as it resolves at the time of filing and over time – a parking page with pay-per-click links in the complainant's sector is close to dispositive.
• RDDS/WHOIS records, noting the registrant's name and how it compares to the domain string (a registrant whose name bears no resemblance to the domain supports a finding of no legitimate interest).
• Absence of any business registration, trading name, or trademark in the registrant's name matching the domain.
• Communication records showing the registrant's only response to inquiries was a sale offer at a price exceeding the documented cost of registration – this overlaps with bad faith but directly undermines any legitimate-interest claim.

For the bad-faith element, the panel will look for:

• The deliberateness of the misspelling – a domain differing by one transposed letter from a well-known mark is difficult to explain as coincidence.
• The registrant's actual use of the domain: commercial content, affiliate monetization, phishing, or redirection to a competitor each independently supports a finding of bad faith under the non-exhaustive list of Paragraph 4(b) bad-faith factors.
• A pattern of abusive registrations by the same registrant – if the same holder controls other typosquats of well-known marks, that pattern is relevant.
• Timing: a registration closely following your trademark filing or a major product launch is a recognized indicator.
• Any direct offer to sell the domain to the mark owner for a sum exceeding documented registration costs.

In a recent matter (a .com.au typosquat, autumn 2024), we assembled a six-month screenshot archive, a chain of ransom emails, and a WHOIS analysis showing the registrant's portfolio of similar misspellings. The transfer was ordered, and no extension was sought.

Passive holding – where the registrant parks the domain at a blank or error page and does nothing – requires a more nuanced argument, but panels have consistently held that passive holding of a misspelling of a well-known mark, with no plausible legitimate use, can satisfy the bad-faith element. Our respondent-side work confirms that registrants who hold typosquats passively and produce no legitimate-interest evidence at the panel stage tend to lose.

Step-by-step: the auDRP process for .au recovery

The auDRP follows a structured five-stage process with defined deadlines. Understanding the timeline prevents delays that the registrant can exploit.

1. Pre-filing preparation. Gather all evidence before filing. Assembling a complete record at the outset avoids supplemental filing requests, which providers handle inconsistently. Confirm that your trademark rights are properly documented – a registered mark is the strongest basis, but unregistered rights recognized under Australian law may qualify in some cases.
2. Selection of provider and filing. The auDRP is administered by approved dispute-resolution providers; verify the current list with the .au registry (auDA) or confirm with counsel. The complaint is submitted electronically and must set out the three-element case in full, with exhibits annexed.
3. Commencement and response window. Once the provider formally commences the case, the registrant has 20 days to file a response. Many registrants in typosquat cases default – they do not file – and a default does not automatically mean the complainant wins, but it removes the contested record from consideration.
4. Panel appointment and decision. After the response window closes, the provider appoints a single panelist (or a three-member panel if requested). The panelist reviews the written record, applies the auDRP test, and issues a decision.
5. Registrar implementation. A transfer order is passed to the registrar, who implements it after the mandatory ten-business-day waiting period, during which the losing party can seek court relief to stay the transfer. In practice, very few respondents seek a stay.

The full arc from filing to registrar implementation typically runs approximately two months for a standard single-panel case. Procedural detours – supplemental filings, requests for time extensions, a three-member panel – add weeks.

If you are ready to file or need a read on your evidence package, email info@cognomenlaw.com.

What does auDRP recovery actually cost?

Cost in a domain dispute has two distinct components: the official provider filing fee and the legal fee for preparing and arguing the complaint. These should never be conflated.

For the auDRP, official provider fees are set by each approved provider and are generally comparable in structure to UDRP fees, though the precise schedule varies by provider and number of domains. Verify the current fee schedule directly with the provider before filing. As a reference point, WIPO's standard UDRP single-member panel fee begins at USD 1,500 for one to five domains; auDRP-specific provider fees follow a similar range in structure, though they are set independently by each Australian-approved provider.

Legal fees for auDRP complaint preparation are separate from the provider fee. Market rates for a straightforward single-domain complaint are typically in a comparable range to UDRP preparation – commonly in the USD 3,000 – 7,000 range for a standard case, depending on complexity and the volume of evidence. A typosquat case with a strong documentary record tends to sit toward the lower end of that range; a case requiring unregistered-rights argument or a contested three-panel proceeding will cost more.

The economic calculus is straightforward for most brand owners: the combined cost of an auDRP proceeding is almost always less than a buy-back demand from a well-funded squatter, and it is substantially less than court litigation. That comparison drives most filing decisions we help clients make.

How does the auDRP compare to an Australian court for .au?

The right route depends on your goal and the registrant's conduct. The auDRP and the Australian courts are not alternatives in every sense – they are distinct tracks with different remedies and different costs.

If you want the domain transferred and nothing else, the auDRP is almost always the faster and cheaper path. It is designed for that single outcome. The proceeding is entirely written; no hearings take place. The two-month timeline is set by the rules, not by court dockets. And the filing fee is a fixed, predictable amount.

If you want monetary damages – because the registrant's conduct cost you revenue, diverted customers, or enabled fraud – the auDRP cannot help. It provides no damages and no costs award. That remedy exists only in court. An Australian court action for passing off, trademark infringement, or misleading and deceptive conduct can reach money, but it operates on a longer timeline and at substantially higher cost. We coordinate with local litigation counsel in Australia for matters requiring court proceedings.

A third scenario: the registrant has committed multiple infringements across .au and other zones simultaneously. A .com.au complaint can be filed alongside a UDRP complaint for the corresponding .com, with both cases proceeding in parallel. That approach is common where a squatter has occupied multiple zones with the same typosquat. The auDRP handles the .au domain; WIPO or the Forum handles the gTLD. Both cases can be prepared from the same evidence record, which controls total preparation cost.

In a recent parallel-zone matter (a .com.au and .com typosquat, spring 2025), we filed simultaneously before two providers and obtained transfer orders in both zones within weeks of each other. The registrant defaulted in both proceedings.

Can the registrant fight back – and what is RDNH?

A registrant who receives a complaint has 20 days to file a response. In typosquat cases, most do not – the domain's purpose is transparent and a defense is difficult to construct. But some registrants do respond, and understanding their options matters to a complainant.

A respondent's strongest defenses are: evidence of a legitimate interest in the domain string pre-dating any notice of the dispute; evidence that the complainant's trademark rights are weaker than claimed (for instance, a descriptive term or a newly filed mark); or a challenge to the registration date that undermines the bad-faith finding. In most typosquat cases, these defenses fail because the misspelling itself is so deliberate that no innocent explanation is credible.

Reverse Domain Name Hijacking (RDNH) is the panel's finding that a complaint was brought in bad faith to strip a legitimate registrant of a domain. It carries no monetary penalty – it is a reputational finding on the record. In our respondent-side practice, we have pursued RDNH findings for clients where complainants overreached: for instance, where a mark was registered after the domain, or where the domain string was generic and the complainant had no plausible rights. In a genuine typosquat case filed on solid evidence, an RDNH finding against the complainant is rare – but filing without a strong record on all three elements is the scenario that creates that risk.

An AUDIENCE_MYTH worth addressing: brand owners sometimes assume that because their trademark is famous or registered, the case is automatic. It is not. The second and third elements require a factual record. A panel that finds the complainant's evidence of bad faith thin – or finds a credible response from the registrant – may deny the complaint. Filing with a complete evidence package is not optional; it is how the case is won.

What if the .au domain is just one part of a wider squatting pattern?

A single auDRP complaint covers one or more .au domains held by the same registrant. If the same bad actor holds a .com, a .com.au, and a direct .au, three related proceedings may be necessary, or a consolidated UDRP complaint can address the gTLD and any UDRP-covered ccTLDs in a single filing if the same registrant controls all of them.

Portfolio brand-protection monitoring – systematic surveillance of new registrations that misspell or otherwise misappropriate your mark across zones – is the most effective way to catch typosquats early, before they accumulate traffic, phishing history, or affiliate revenue. Early detection also helps establish the bad-faith timeline clearly: a domain registered two weeks after your Australian trademark publication that has immediately pointed at a competitor's site is a stronger bad-faith case than one registered years ago with unclear early use.

We advise brand owners on monitoring programs, priority dispute filings, and the sequencing of multi-zone recovery actions. The goal is not just to recover a domain today but to make the cost of squatting your brand uneconomical across every zone the squatter might reach.

Related at COGNOMEN

• UDRP domain recovery across gTLDs – the full service overview
• Recovering a passively held domain under the UDRP for .me
• How to prove legitimate interest in a ccTLD dispute – practical guide

Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Domain in disputeYour sideI want to recover a nameI received a complaint — I need a defensePortfolio / brand protectionWhat happenedEmailI agree to the processing of my enquiry as described in the privacy policy.Assess my case

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.