How to choose between URS and UDRP for a .io domain

How to choose between URS and UDRP for a .io domain. UDRP and ccTLD domain recovery and defense across .io. Email the firm to assess your case.

A startup discovers that the exact .io domain matching its brand has been registered by someone who has never operated in the technology sector – pointing it at a monetized parking page and rejecting an approach at market rate. The question that follows is not simply "should we file?" It is "which procedure gives us what we actually need?"

To choose between URS and UDRP for a .io domain, the critical variable is the remedy you require. The URS suspends a domain for the remainder of its registration term at a lower cost and under a higher evidentiary standard – clear and convincing evidence – while the UDRP delivers transfer or cancellation through a more flexible, evidence-based test, with WIPO filing fees beginning at USD 1,500 for a single-member panel. Because .io has adopted WIPO as a dispute-resolution provider, both routes are technically available; the choice between them turns on your goal, your timeline, and how strong your bad-faith evidence is.

This page sets out the governing rules, the decision framework, the evidence that matters, and the realistic next step for a brand owner or registrant facing a .io conflict.

Does .io accept UDRP and URS filings, and which body decides?

.io operates under the governance of its registry and has appointed WIPO as a dispute-resolution provider, meaning that both the UDRP and the URS are accessible for .io domain conflicts. That single fact opens a choice most complainants never have for a legacy ccTLD such as .uk or .de, where only one national procedure applies. For .io, you are not confined to one route – but opening that choice also creates a decision that has real consequences for the remedy you receive and the standard you must satisfy.

The UDRP is the older and more widely tested instrument. Panels have applied it to hundreds of thousands of domains across gTLDs and adopting ccTLDs. Its three-element test under Paragraph 4(a) is well-settled: the domain must be identical or confusingly similar to a mark in which the complainant has rights; the registrant must have no rights or legitimate interests in the name; and the domain must have been registered and used in bad faith. All three elements are cumulative. Fail one, and the complaint fails. The remedy, if all three are proved, is transfer or cancellation.

The URS – the Uniform Rapid Suspension system – was introduced for new gTLDs but applies to .io by virtue of the same WIPO appointment. Its remedy is different in kind: not transfer, but suspension of the domain for the remainder of its term. That distinction is fundamental to the choice.

What does URS suspension actually mean for a .io registrant?

URS suspension freezes the domain – the registrant cannot transfer it, and the DNS is locked – but ownership does not change. When the registration term expires, the domain is released. There is no transfer to the brand owner. This is the ceiling of what URS can achieve, and it is a ceiling worth understanding before filing.

For a brand owner whose primary concern is stopping harm immediately – a .io domain driving phishing traffic, redirecting customers, or diluting a mark during a product launch – suspension may be exactly sufficient. It removes the domain from active use without the longer briefing cycle that a contested UDRP can require. In a less adversarial setting, URS can function as a holding measure.

But for the brand owner who wants to operate the domain, to fold it into a portfolio, or to prevent the registrant from re-registering on expiry, URS is structurally inadequate. A UDRP order transferring the domain solves those problems. A URS suspension does not.

In our practice, we see brand owners reach for URS because they associate speed with advantage. That instinct is understandable. The problem is that the speed benefit is partly offset by the higher evidentiary standard: the URS requires clear and convincing evidence of bad faith, a standard more demanding than the balance-of-probabilities analysis most UDRP panels apply. A marginal case – common fact patterns, partial evidence of intent – that would succeed under the UDRP may well fail under the URS.

How does the evidentiary standard differ, and when does that decide the choice?

The evidentiary gap between URS and UDRP is not procedural decoration. It directly governs which filing path a given set of facts can support. Under the UDRP, panels approach bad faith as a balancing exercise, considering all relevant circumstances and drawing reasonable inferences from the registrant's conduct, timing, and commercial context. Under the URS, the elevated standard of clear and convincing evidence means that ambiguity in the evidence is resolved against the complainant.

What does that mean in practice? Consider a .io domain registered the week after a brand's trademark application published, pointing at a parking page with pay-per-click links in the brand owner's commercial sector. Under the UDRP, a panel applying established consensus principles would almost certainly treat that combination as sufficient evidence of bad faith. The timing, the sector alignment, and the passive commercial use are together compelling. Under the URS, the same panel might require something more explicit – a prior demand letter, an offer to sell, or prior conduct by the same registrant – before crossing the clear-and-convincing threshold.

This is why the state of the evidence is the first analytical step, not the last. We regularly advise brand owners who assume URS is the "easy" filing only to find that their evidence, while adequate for a UDRP win, does not meet the URS bar. Filing the wrong procedure wastes both time and money.

For a read on whether the three UDRP elements are met in your .io matter – or whether the URS standard is satisfied – reach us at info@cognomenlaw.com.

Which fact patterns favor URS and which favor UDRP for a .io domain?

The decision between the two routes for a .io dispute is clearest at the extremes. Where the evidence is overwhelming – a domain registered the same day as a mark registration, with documented offers to sell far above cost, by a registrant with a pattern of such registrations – URS is viable and faster. Where the evidence requires inference, context, or a nuanced reading of the registrant's intent, UDRP is the appropriate tool.

Fact patterns that typically favor URS for .io:

• The domain is a character-for-character copy of a well-known mark with no plausible alternative interpretation.
• The registrant has made an explicit demand to sell the domain at a price far above registration cost.
• The registrant has been found to have engaged in a documented pattern of abusive registrations at other ccTLDs or gTLDs.
• The primary goal is immediate suspension, not long-term portfolio acquisition of the domain.

Fact patterns that typically favor UDRP for .io:

• The brand owner wants to hold and operate the domain after the proceeding.
• The evidence of bad faith is circumstantial but cumulative – timing of registration, sector overlap, passive holding without use.
• The registrant is likely to mount a defense, making a contested hearing under the UDRP's more developed procedural structure more appropriate.
• The domain is one of several in a coordinated typosquatting campaign, and the complainant wants transfer orders across all of them.

In a recent matter (a .io brand-match registration, autumn 2024), we advised a technology company that its evidence – strong on similarity but thin on explicit bad-faith conduct – was better deployed in a UDRP filing than a URS, and the resulting panel transfer order resolved the dispute entirely. A URS filing on the same facts would have produced a suspension lasting less than a year, leaving the company exposed again on renewal.

How does the process compare: timeline, forum, and cost?

Both URS and UDRP for a .io domain run through WIPO as the designated provider. The procedural architecture differs meaningfully, and so do the costs.

Under the UDRP, the standard timeline from filing to decision is approximately 45 to 60 days for a single-panel case. The respondent has 20 days to file a response after commencement. WIPO's filing fee for one to five domains before a single-member panel is USD 1,500; a three-member panel for the same range costs USD 4,000. If neither party requests a three-member panel, the single-member rate applies. WIPO also offers an expedited option for single-panel cases of up to five domains, typically delivering a decision within about one month.

The URS is generally faster in its initial phase, with an examiner's determination issued more quickly than a full UDRP panel decision. The filing fee is lower than the UDRP rate. However, the lower cost must be weighed against the structural limitation: a suspension remedy, not transfer. Where URS suspends a domain for months and the registrant re-registers on expiry, the brand owner may face the same cost again – effectively paying twice for an incomplete outcome.

Legal fees are separate from filing fees and depend on the complexity of the matter, the volume of evidence, and whether a defense is filed. In the market, UDRP legal fees for a straightforward single-domain matter typically fall in the USD 3,000 to 7,000 range, with respondent defense work in a comparable range.

The cost-efficiency calculation for .io disputes therefore runs as follows: if URS succeeds and the registrant does not re-register, the lower fee produces a satisfactory outcome. If the registrant re-registers, or if URS fails on the evidentiary standard, the brand owner will likely need a UDRP filing anyway, and the total expenditure exceeds what a single UDRP filing would have cost at the outset.

To weigh URS against UDRP for your .io domain and get a clear-eyed assessment of which route fits your evidence, email info@cognomenlaw.com.

What evidence decides the outcome, regardless of the route chosen?

Evidence, not procedure, is where most .io disputes are actually won or lost. The formal test differs between URS and UDRP, but the evidentiary building blocks are closely related. A well-constructed evidence record serves both procedures; a thin one fails at either.

The core evidence categories for a .io complaint are:

• Trademark rights: registration certificates, date of first use, date of application, and geographical scope. For marks registered after the domain was created, complainants must establish that the registrant knew or should have known of the mark.
• Identity or confusing similarity: a side-by-side analysis of the domain and the mark. Panels routinely ignore the TLD itself in this analysis, comparing the second-level label to the mark.
• Absence of legitimate interest: WHOIS records, RDDS data, website screenshots, and any absence of a bona fide business connected to the domain label.
• Bad faith: registration date versus mark priority; communications in which the registrant offered to sell; pay-per-click revenue links in the brand's sector; prior abusive registrations by the same registrant; passive holding without any identifiable legitimate purpose.

The Paragraph 4(b) bad-faith factors in the UDRP – registration to sell to the mark owner, to disrupt a competitor, to attract users by confusion, or a pattern of abusive registrations – each correspond to a specific evidence type. Building the complaint or the URS submission around the factor most clearly supported by the evidence, rather than asserting all four, is often the stronger approach.

Panels and URS examiners also consider timing. A domain registered the day after a brand's trademark published in a national register, or one week before a major product launch, speaks to knowledge and intent without requiring direct evidence of the registrant's state of mind.

What is the respondent-side angle, and can an RDNH finding arise in .io proceedings?

Not every .io dispute favors the complainant. Registrants who hold .io domains for genuine, documented reasons – a personal name, a dictionary word, a business concept predating the mark at issue – have the same Paragraph 4(c) safe harbors available to them under the UDRP as any other registrant. A bona fide business offering before notice of the dispute, common knowledge by the registrant's own name, or legitimate noncommercial or fair use: these are the statutory defenses, and panels take them seriously.

Where a complaint is brought in bad faith – to deprive a legitimate registrant of a domain they acquired and hold for proper reasons – a UDRP panel may make a finding of Reverse Domain Name Hijacking (RDNH). RDNH is a reputational finding. There is no monetary penalty, but the finding is published and associated with the complainant's name. We have defended registrants against abusive .io complaints and pursued RDNH findings where the complainant's conduct warranted it.

In a recent matter (a .io personal-name domain, spring 2025), we built the legitimate-interest record, documented good-faith registration predating the complainant's mark by several years, and the panel denied the transfer and made an RDNH finding. The registrant retained the domain.

The URS also recognizes abuse by complainants, though the procedural record for RDNH-equivalent findings under URS is less developed. For a registrant facing a URS filing that appears pretextual, the UDRP's fuller procedural record and more developed case law on respondent rights make it the more defensible forum.

How does .io compare to other zones when choosing a dispute route?

The right route depends on the zone, and .io sits in a distinctive position in the domain dispute map.

For a .com or other legacy gTLD domain: only the UDRP applies (URS is available for new gTLDs; .com is not a new gTLD, so URS does not apply there). The Forum and WIPO both accept .com complaints; the filing fee at the Forum begins around USD 1,300 for one to two domains. The choice between WIPO and the Forum for .com turns on panel composition preferences and the complainant's assessment of how each forum's panels have handled analogous fact patterns – a nuanced question we address separately in our UDRP practice.

For a .de domain: no UDRP or URS applies. Disputes proceed through the German courts, with a DENIC DISPUTE entry available to block transfer during litigation. Brand owners facing cross-border situations – a .com and a .de both held by the same registrant – must run two separate proceedings in two different forums.

For a .uk domain: the Nominet DRS applies, not the UDRP. The DRS test is "abusive registration," which reads "registered or used" abusively – a structurally lower cumulative bar than the UDRP's "registered and used in bad faith." Nominet's process includes a free mediation stage before any expert decision. Fees differ significantly from WIPO.

For a .eu domain: the ADR.eu procedure at the Czech Arbitration Court applies. Remedies can include transfer where the complainant meets EU eligibility requirements.

.io, by contrast, sits closer to a new gTLD than a legacy ccTLD in terms of available procedures. The WIPO appointment means the evidence standards and procedural rules are familiar to practitioners who handle .com disputes. That familiarity reduces uncertainty for both complainants and respondents. It also means that a brand owner already managing a .com complaint can pursue a .io matter through the same forum with a consistent evidentiary record.

Where a registrant holds both the .com and the .io, a single UDRP complaint covering both domains – filed at WIPO – may be possible if both are held by the same registrant. The USD 1,500 WIPO filing fee covers up to five domains before a single-member panel, making a consolidated filing cost-effective when the evidence for both domains is the same.

Related at COGNOMEN

• URS and new gTLD disputes – the full COGNOMEN practice overview
• New gTLD launch protection – pre-registration brand defense strategy
• Case study: recovering a lapsed domain in a ccTLD proceeding