Back to Domains Glossary

What is the ACPA? Anticybersquatting Consumer Protection Act

The Anticybersquatting Consumer Protection Act (ACPA) is a 1999 US federal law allowing trademark owners to sue people who register, traffic in, or use domain names identical or confusingly similar to distinctive or famous marks, intending in bad faith to profit. It separately protects living people’s names. Courts can transfer domains and award damages in trademark cases.

More About ACPA

Congress passed the ACPA in November 1999 to deal with a rising number of cybersquatting incidents. It's part of the Lanham Act, the primary US trademark statute, codified at 15 U.S.C. §1125(d). The same year, ICANN adopted the Uniform Domain Name Dispute Resolution Policy (UDRP), an administrative alternative to going to court.

Bad faith under the ACPA

The test is a bad-faith intent to profit from someone else's mark. Under the ACPA, a trademark owner can sue anyone who registers, traffics in, or uses a matching domain name with that intent. The statute lists nine factors courts weigh, including:

  • Offering to sell the domain to the mark owner (or anyone else) for financial gain without having used it, or intending to use it, for a real site
  • Registering multiple domains the person knows match other people's distinctive or famous marks
  • Giving materially false contact information to the registrar, which also creates a rebuttable presumption that the violation was willful (15 U.S.C. §1117(e))

There's a safe harbor, too: a court won't find bad faith where the registrant believed, and had reasonable grounds to believe, that using the domain was fair use or otherwise lawful. The factor list points the same way: bona fide noncommercial or fair use of the mark on the site weighs against bad faith.

Marks and names the ACPA covers

The ACPA protects marks that were either distinctive or famous when the domain was registered, whether or not they're federally registered. Famous marks get one extra basis for a claim: a domain that dilutes the mark is also actionable. Personal names have parallel protection under 15 U.S.C. §8131, which covers registering a living person's name as a domain without consent, with the specific intent to profit by selling it.

The scope limit to know: the ACPA is US federal law. It can't reach a squatter no US court has jurisdiction over, which is why disputes with foreign registrants often go through the UDRP instead, or through the in rem route described below.

Damages and other remedies

A winning plaintiff can recover the defendant's profits, their own actual damages, and the costs of the action. Or they can elect statutory damages instead: $1,000 to $100,000 per domain name, as the court considers just (15 U.S.C. §1117). The court can also order the domain forfeited, cancelled, or transferred to the mark owner.

Shields v. Zuccarini shows what that looks like in practice: the owner of the Joe Cartoon trademark sued a typosquatter who had registered five slight misspellings of joecartoon.com. The award, upheld on appeal in 2001, came to $10,000 per domain name, $50,000 in all, plus attorney's fees.

ACPA vs. UDRP

Both target cybersquatting; the practical differences are forum, remedies, speed, and cost:

A side-by-side comparison of the two cybersquatting dispute routes. An ACPA case is a federal lawsuit that is slower and costlier but can award money damages plus the domain; a UDRP case is an administrative proceeding before an ICANN-appointed panel that is faster and cheaper but can only cancel or transfer the domain.
  • UDRP: an administrative proceeding under ICANN's policy, decided by an appointed panel rather than a court. Remedies are limited to cancelling the domain or transferring it to you; there are no money damages. A standard case ends in about 2 months, and WIPO offers an expedited track that delivers a decision within a month of the case starting.
  • ACPA: a federal lawsuit. It can award statutory damages plus the domain itself and ends in a binding court judgment, but it's slower and costs far more.

The decision rule: file a UDRP complaint when all you want is the domain cancelled or transferred and you can prove its 3 requirements: a matching mark, no legitimate interest on the registrant's side, and bad-faith registration and use. Talk to a trademark attorney about an ACPA suit when you need something only a court can give, such as money damages, discovery, or an enforceable judgment. A squatter contesting your complaint isn't by itself a reason to litigate. And losing a UDRP doesn't close the courthouse door: the policy lets either party take the dispute to court afterward.

Suing an anonymous or foreign squatter

The ACPA anticipates the situation WHOIS privacy creates. When you can't identify the registrant, or no US court has personal jurisdiction over them, §1125(d)(2) lets you file an in rem civil action against the domain name itself, in the judicial district where its registrar or registry is located. Remedies in an in rem action are limited to forfeiture, cancellation, or transfer of the domain.

What to do if someone squats your trademark

  1. Document the bad faith. Screenshot the site, save any offer to sell you the domain, and note whether the same registrant holds other look-alike names.
  2. Pull the domain's WHOIS record for the registrant's contact details. A privacy service in the record doesn't end the matter; that's exactly the situation the in rem route exists for.
  3. Pick your route: a UDRP complaint when you just want the domain, an ACPA suit when you need court-ordered remedies like damages, or simply buying the domain when the asking price is lower than either. A domain broker can handle that negotiation for you.

Frequently Asked Questions

Because it trades on someone else's trademark in bad faith. The ACPA is a civil statute, not a criminal one: enforcement falls to the trademark owner, who has to sue (or file a UDRP complaint) to stop a squatter, and a losing squatter risks damages and the domain itself.
Yes, with a narrower remedy set than trademarks get: injunctive relief, including transfer of the domain, plus costs and attorney's fees at the court's discretion, but no statutory damages. The protection covers living people only, and only where the squatter meant to profit by selling the name.
WIPO charges $1,500 for a standard single-panelist UDRP case covering up to 5 domain names, or $4,000 for its expedited one-month track. An ACPA suit has no fixed price; it's federal litigation, which is why WIPO calls the UDRP much faster and more cost-effective than court.
Generally no. ACPA liability requires the mark to have been distinctive or famous at the time the domain was registered, so a mark that gained its reputation later can't support a claim against your earlier registration.
Special Offer

Domain Registration

Search for the perfect domain name and register yours before someone else does! Click below to check availability and see special offers.

Domain Names