How to recover a typosquatted .io domain

How to recover a typosquatted .io domain. UDRP and ccTLD domain recovery and defense across .io. Email the firm to assess your case. Transparent fees, responde…

A one-letter variant of your brand is registered under .io. It redirects visitors to a pay-per-click page, a competing service, or simply a parking lot demanding a five-figure buy-back. The domain was never yours to begin with – but it carries your name, and every day it operates, it misdirects customers and dilutes the association between your mark and your services.

To recover a typosquatted .io domain you file a UDRP complaint before WIPO, which administers .io disputes as an appointed provider. You must satisfy all three elements of Paragraph 4(a): confusing similarity to a mark you hold, no legitimate interest on the registrant's side, and registration and use in bad faith. The WIPO filing fee starts at USD 1,500 for a single-member panel covering one to five domains, and a standard case resolves in approximately two months. The only remedies available are transfer or cancellation.

This page covers how the UDRP applies to .io, what evidence moves the panel, what the process looks like end to end, and how to decide whether a UDRP complaint or an alternative route better fits your situation.

Why the UDRP applies to .io – and what that means for complainants

The .io ccTLD is the country code for the British Indian Ocean Territory, but it functions in the market as a tech-industry gTLD, widely registered by startups, software products, and developer tools worldwide. WIPO has been appointed as a dispute-resolution provider for .io, which means the UDRP – the same Policy that governs .com, .net, and hundreds of other zones – applies directly. A brand owner does not need a local connection to the British Indian Ocean Territory. Rights in a trademark, wherever registered or established through use, satisfy the first element of the test.

That is significant. Many ccTLDs impose eligibility conditions on complainants or require local trademark registrations. The .io procedure carries no such restriction. If your mark is registered in the US, the EU, or any other jurisdiction – or if it has acquired common-law rights through sustained commercial use – you may file a UDRP complaint at WIPO against a .io typosquat.

We regularly advise brand owners who discover that a typosquatter has registered a .io variant of a mark they hold in a different zone. The mechanism is the same, but the factual record on the third element often differs from a corresponding .com dispute. A .io domain aimed at developers can cause a more targeted, and more damaging, form of traffic diversion than a generic parking page.

What are the three UDRP elements and how does typosquatting satisfy them?

Typosquatting – registering a domain that incorporates a common misspelling, transposition, or partial omission of a protected mark – is one of the clearest fact patterns in UDRP jurisprudence. The three elements of Paragraph 4(a) break down as follows.

First element: confusing similarity. Panels assess this by comparing the domain string to the mark, setting aside the TLD itself (.io) as a technical necessity. A domain that adds, removes, or transposes a single letter, doubles a character, or substitutes a visually similar character is consistently found to be confusingly similar. Ownership of a registered trademark is the simplest proof. Common-law rights – established by evidence of commercial use, consumer recognition, and distinctiveness – also satisfy the element, though the evidentiary burden is higher.

Second element: no legitimate interest. Once a complainant makes a prima facie case – that is, alleges no license was granted and the registrant is not commonly known by the domain – the burden shifts. The registrant must produce evidence of a bona fide offering before notice of the dispute, a personal name corresponding to the domain, or legitimate noncommercial or fair use under Paragraph 4(c). A typosquat pointed at a pay-per-click page, a competitor's site, or a blank page rarely survives that test.

Third element: bad faith, registration AND use. The cumulative "registered AND used" requirement is the element most disputes turn on. Paragraph 4(b) lists non-exhaustive factors: registration primarily to sell to the mark owner; registration to disrupt a competitor; using a confusingly similar domain to attract users for commercial gain by creating confusion as to source, sponsorship, or affiliation; and a pattern of abusive registrations. Typosquatting satisfies the third element by design. A panel that sees a one-letter variant of a well-known mark pointed at a parking page – with no credible explanation from the registrant – will almost invariably find bad faith in both registration and use.

Passive holding presents a slight complication. If the .io domain resolves to nothing at all, the panel must infer bad faith from surrounding circumstances: the strength of the mark, the implausibility of legitimate use, and any prior conduct of the registrant. Panels have consistently held that passive holding of a domain identical or confusingly similar to a well-known mark satisfies the use limb of the third element where no legitimate purpose is conceivable.

For a read on whether the three UDRP elements are met in your .io dispute, reach us at info@cognomenlaw.com.

What evidence decides a typosquatting case at WIPO?

Evidence is the mechanism by which abstract legal elements become a concrete record the panel can act on. The complaint you file is your only submission – unlike litigation, there is no discovery, no deposition, no amended pleading after the fact. What you put in defines what the panel sees.

For the first element, you need proof of rights: a trademark registration certificate (or printout of the relevant IP office record) showing the mark, the registration date, and the owner. If you rely on common-law rights, that means sales figures, press coverage, website traffic data, and any other evidence of recognition in the relevant market. The date matters because a mark registered after the domain was registered creates a timeline problem on the third element – though panels sometimes find bad faith where a registration was filed in anticipation of a mark's established use.

For the second element, a WHOIS or RDDS record showing no connection between the registrant and the mark is standard. Screenshots of the resolving page – the parking page, the competitor site, or the blank response – go directly to the legitimate-interest and bad-faith analysis. Capture them with a date-stamped archival tool; a single screenshot from a personal browser is harder to rely on. Web archive records supplement live evidence and show the domain's history across time.

For the third element in a typosquatting case, the domain string itself is often the most powerful single piece of evidence. A panel can see at a glance that "acmecorpn.io" is a transposition of "acmecorp." Add evidence that the registrant holds other such typosquats – panels find a pattern of abusive registrations persuasive under Paragraph 4(b) – and the case strengthens considerably. Prior communications in which the registrant demanded payment are also directly relevant.

In a recent matter – a .io typosquat, spring 2025 – we assembled a complaint for a software brand whose two-letter transposition domain had been registered the same week the brand launched its developer API. The registration timing, combined with a parking page carrying the brand's own advertising rivals, produced a straightforward bad-faith finding. The transfer order followed within approximately eight weeks of filing.

How does the UDRP process work at WIPO for a .io domain?

The process runs in five stages. Understanding each stage helps you plan the timeline and allocate resources before you file.

Stage 1 – Complaint preparation and filing. You draft the complaint, compile the annexes, pay the filing fee, and submit through the WIPO online platform. WIPO's Center conducts a formal compliance review to confirm the complaint meets the administrative requirements of the Rules.

Stage 2 – Commencement and the response window. Once the complaint is formally commenced, the registrar is notified and the respondent has 20 days to file a response. Many typosquatters default – they file nothing. A default does not mean automatic success; the panel still evaluates the complaint against the three elements. But a respondent who cannot produce any credible explanation for a one-letter typosquat rarely helps their position by responding.

Stage 3 – Panel appointment. WIPO appoints a panelist from its roster. Either party may request a three-member panel; if only the complainant requests one, the complainant pays the higher fee. If only the respondent requests one, the parties split it. WIPO's current fee for a three-member panel on one to five domains is USD 4,000. For most typosquatting cases involving a single .io domain, a single-member panel is appropriate.

Stage 4 – Decision. The panelist reviews the record – complaint, any response, and the annexes. There is no oral hearing. The decision is issued in writing and published on the WIPO database.

Stage 5 – Registrar implementation. If the panel orders transfer, the registrar is instructed to transfer the domain. There is a standard waiting period before implementation to allow any court challenge. In practice, most registrars complete the transfer promptly once that window closes.

End to end, a standard .io UDRP case at WIPO typically concludes in approximately two months from filing. WIPO also offers an expedited option for single-panel cases of up to five domains, delivering a decision in approximately one month – useful where the typosquat is causing active, ongoing harm to a live product or campaign.

To assess whether the expedited option fits your .io situation, email info@cognomenlaw.com.

Which route is right for your .io dispute – UDRP, URS, or something else?

The right route depends on what you need and how the domain is being used. Three realistic options exist for a .io typosquat.

If the .io domain is registered in bad faith and you want it transferred to you, the UDRP at WIPO is the standard path. The filing fee starts at USD 1,500, the timeline is roughly two months, and transfer is a direct remedy. This is the route we recommend for most typosquatting situations involving an established mark.

If the domain is a new-gTLD rather than a ccTLD, URS is a faster, lower-cost alternative – but URS suspends the domain for the registration term rather than transferring it, and the evidentiary standard is higher ("clear and convincing"). For a .io typosquat, URS does not apply; .io is a ccTLD that uses the UDRP, not the URS mechanism.

If the registrant is in a jurisdiction where the UDRP decision might be challenged, or if you also want monetary damages – for instance, provable revenue diverted by a typosquat that captured your customers' payments – a court action is the only route that can reach money. That means anticybersquatting litigation in the relevant jurisdiction, handled with local litigation counsel. Court proceedings are substantially more expensive and slower than the UDRP, but they offer remedies the UDRP cannot provide.

If the typosquat also covers a .com or a .uk variant of your mark, those domains may be addressed in parallel. A single UDRP complaint may cover multiple domains where the registrant is the same holder. If the .uk variant is a separate matter, the Nominet DRS applies – a distinct procedure with a free mediation stage, a different legal test ("abusive registration"), and a notably different element: the DRS reads "registered or used" abusively, a lower threshold than the UDRP's cumulative "registered and used." Addressing both a .io and a .uk typosquat in parallel, through their respective procedures, is a strategy we have managed for brand owners facing multi-zone campaigns.

In a recent matter – a multi-zone typosquatting campaign, autumn 2024 – a brand held a .io and a .co.uk variant side by side, both registered within days of each other. We filed a UDRP complaint at WIPO for the .io domain and a Nominet DRS complaint for the .uk variant on the same timetable. Both resulted in transfer orders. The parallel approach avoided the delay of sequential filings and prevented the registrant from parking value in one zone while the other was contested.

What does a typosquatting respondent look like – and when should you expect a defense?

Not every typosquatter defaults. Some file responses. Understanding what a substantive defense looks like helps you prepare a complaint that anticipates and addresses the counterarguments before they are raised.

The most common respondent argument in a typosquatting case is that the domain was registered for a legitimate independent project – a product or service that happens to use the same letter combination, with no intent to trade on the complainant's mark. This argument fails where the complainant's mark was established, well-known in the relevant market, and the domain was registered shortly after a public product launch or trademark filing. The closer the timing, the weaker the "independent coincidence" argument.

A less common but more dangerous argument is a challenge to the complainant's trademark rights themselves. If the mark is weak, descriptive, or covers goods and services far removed from the domain's apparent use, the panel may find the first element is not clearly met. That is a reason to build the trademark-rights section of your complaint carefully – not just attaching a registration certificate, but explaining the mark's scope, its recognition in the relevant industry, and the connection to the .io zone.

Reverse domain name hijacking (RDNH) is a finding a panel can make against a complainant who brings a bad-faith complaint to deprive a legitimate registrant. In our practice, RDNH findings are rare in genuine typosquatting cases – the factual pattern usually makes the bad faith of registration clear. But they are a meaningful risk where a complainant overstates the mark's fame, mischaracterizes the domain string as a typosquat when it is genuinely different, or files knowing the registration was prior to the mark's first use. We have defended registrants against exactly such overreach.

What are the realistic fee ranges for recovering a .io typosquat?

Domain-dispute fees split into two categories: the forum's official filing fee and the legal fee for preparing and filing the complaint. In a market where many practitioners hide one or both, we present both plainly.

WIPO's official filing fee for a UDRP complaint covering one to five domains before a single-member panel is USD 1,500. A three-member panel on the same domain count costs USD 4,000. If you withdraw or settle before panel appointment, WIPO typically refunds approximately USD 1,000 of a USD 1,500 fee.

Legal fees for a straightforward single-domain UDRP complaint – drafting the complaint, assembling the annexes, and filing – typically fall in a market range of approximately USD 3,000 to USD 7,000, depending on the complexity of the trademark record and the volume and nature of the evidence. A case involving a well-documented registered mark and a clear typosquat with a PPC parking page sits toward the lower end of that range. A case requiring common-law rights evidence, multi-zone coordination, or a lengthy bad-faith narrative sits toward the higher end.

Respondent-side fees – if you are the registrant, not the brand owner, and you receive a complaint about a .io domain you hold legitimately – fall in a comparable range. Building a legitimate-interest record, documenting good-faith registration timing, and where warranted seeking an RDNH finding is a full engagement, not a reduced service.

If a three-member panel is requested by one party, and the other party disputes the request, cost allocation follows the WIPO Rules: the requesting party typically bears the incremental fee unless the other party agrees to share it.

What happens after the panel decides – and can a decision be appealed?

The UDRP is not a court. There is no formal appeal mechanism within the UDRP itself. A respondent who loses may challenge the decision in a court of competent jurisdiction before the registrar implements the transfer. In practice, court challenges to UDRP decisions are rare, and most typosquatting cases that result in a transfer order proceed to implementation without litigation.

Once implementation occurs, the domain is transferred into the registrar account you specify. You should have a registrar account ready to receive it; WIPO will ask for the transfer-to registrar in the complaint. If the domain has been allowed to expire during the proceedings – a tactic some registrants use – the situation requires separate handling through the registrar's expired-domain processes.

If the panel denies the complaint, the domain stays with the current registrant. A denial is not a finding that the registrant acted in good faith; it is a finding that the complainant did not meet its burden on one or more of the three elements. You may not re-file the same complaint at the same forum. A materially different complaint – based on new evidence, or a different theory of bad faith – may be possible in some circumstances, but re-filing is a narrow path and panels scrutinize it carefully.

A denial also does not foreclose a court action. If the UDRP complaint fails but the underlying conduct constitutes cybersquatting under applicable national law – particularly US anticybersquatting legislation – a court route remains open, with local litigation counsel in the relevant jurisdiction.

Related at COGNOMEN

• UDRP domain recovery across gTLDs and ccTLD zones – service overview and scope
• How a multi-domain UDRP complaint recovered a group of cybersquatted names at WIPO
• Brand-protection monitoring that identified a .nl registration before active harm began