Domain name squatting: what to do if someone has taken your .au domain

You have finally settled on the name for your new business, and the first thing you do is check whether yourname.com.au is available. It is not. Someone else registered it, and the website that loads is a parked page carrying a note that the domain name is for sale. A quick search shows the domain has sat unused for years, and the asking price is many times what a registration costs. You have just encountered domain name squatting, and your first question is what you can actually do about it.

What domain squatting is, and why it matters to your business

Domain name squatting, also called cybersquatting, is the practice of registering a domain name in bad faith rather than for genuine use. A squatter typically has no real intention of trading under the name. Instead, the registration is held to block someone else from using it, or to extract a payment from the business that genuinely wants it. A common pattern is a domain held for years on a parked page, with the registrant waiting for an interested buyer to appear.

The law does not treat a .au domain name as property that can be bought and sold freely. A .au domain name is a licence, issued under rules set by .au Domain Administration (auDA), the organisation that administers the .au domain. The licence is held on conditions, and the dispute frameworks that exist, which this article works through, all operate on top of that licence model.

Not every taken domain is a squat. Another business may have legitimately registered the name first, or a person with a similar business name or surname may have got in before you. That distinction matters more than it first appears, because the main dispute process does not reward whoever registered first. It asks whether the registration was made in bad faith. Before you act, you need to work out which situation you are in, because the steps that make sense for a genuine squat look different from the steps that make sense for an unlucky coincidence.

The stakes for your business are real. The domain name that matches your brand is the address customers will type, and if that address leads to a parked page, a resale notice, or a competitor's site, you lose the traffic that should be yours and risk confusing your customers. If the squatter is holding the name to sell it, there is also a time dimension. The longer you wait, the more the squatter has invested in holding out, and the more likely the name is to be sold to someone else, including a competitor.

Five steps to take if your .au domain is squatted

The steps below follow the order a business owner would sensibly take them. The first two are about understanding your position, and the last three are about the routes available to fix the problem.

Step 1: Find out who holds the licence and record what you see

Before you contact anyone, you need a clear picture of who holds the domain and what they are doing with it. Start with a WHOIS lookup for the domain, which will show the registrant details if they are not masked by a privacy service, and the date the licence was created. If you are considering a formal dispute, auDA can provide the creation date of a .au domain licence on request, which helps establish whether the domain was registered before or after your business started using the name.

• Visit the site: Note whether it is a parked page, an active business, or a page that simply redirects elsewhere.
• Look for an asking price: A listed price well above the cost of registration is often the clearest evidence of bad faith.
• Screenshot everything: Capture the site, the WHOIS record, and any correspondence, and note the dates. Evidence of this kind can disappear quickly once the registrant knows you are interested.
• Check other namespaces: See whether the same person also holds yourname.net.au, yourname.org.au, or the .com version, because a pattern of registrations strengthens a later complaint.

Do not contact the registrant until you have this record. Once they know a genuine buyer is interested, the asking price can rise and the evidence can be tidied away.

Step 2: Check whether you actually have rights in the name

The main dispute process for .au domains, the .au Dispute Resolution Policy (the auDRP), only helps complainants who hold rights in the name. A complaint can succeed only where the disputed domain is identical or confusingly similar to a name, trade mark or service mark in which the complainant has rights. Under the policy, those rights include a registered trade mark, a company, business or trading name registered with the relevant Australian government authority, and your personal name.

• A registered trade mark: the strongest basis, obtained through IP Australia. Registration is not required to bring a complaint, but it makes the rights element easier to prove.
• A company or business name: registration with ASIC or your state or territory authority counts as a right in the name.
• Your personal name: can also support a complaint, which matters for sole traders.

If you hold none of these rights, the auDRP route is largely closed to you, and your options narrow to negotiation with the registrant or an auDA eligibility complaint (step 4). This is the step most business owners skip, and it is the one that determines whether the formal routes are available at all.

Step 3: Try the direct approach before escalating

Formal complaints cost money and take time, so it is worth attempting a direct approach first. Many apparent squats resolve cheaply. The registrant may be a coincidental holder who registered the name years ago and has no interest in it, and a written offer covering the registration costs can be enough to secure a transfer.

• Contact the registrant: use the WHOIS details, or go through their registrar if the details are masked.
• Put your offer in writing: ask for the transfer to be handled through the registrar, which is the only mechanism that actually moves the licence.
• Keep everything in writing: Emails and messages become evidence if the dispute escalates, and they help show that you attempted a reasonable resolution.

What to avoid: do not threaten legal action you are not ready to take, do not pay a ransom-style price without advice, and do not let a genuine negotiation drag on indefinitely. If the registrant is clearly a professional squatter with no interest in a reasonable transfer, move to the formal routes.

Step 4: Complain to auDA if the licence should never have been issued

.au domain names are restricted to Australian registrants, and each second-level namespace, such as com.au, net.au and org.au, has its own eligibility and allocation rules. A registrant who does not meet those rules holds a licence they should not have, and anyone can complain about it through the complaints process set out in Part 3 of the .au Licensing Rules.

• What the process covers: A complaint that a registrant does not meet the eligibility or allocation requirements for the licence, or that a registrar has failed to meet its responsibilities under the rules.
• What it does not cover: Intellectual property disputes. If your complaint is really that the domain infringes your trade mark or business name, it belongs in the auDRP process in step 5, not the auDA complaints process.
• The possible outcome: Where a licence should not have been issued, auDA can cancel it, which puts the domain back into the general pool for registration.

This route is particularly useful against foreign cybersquatters holding a com.au licence without any Australian connection, because they cannot satisfy the eligibility rules, and no trade mark rights argument is needed.

Step 5: Lodge an auDRP complaint with an auDA-approved provider

Where a squatter holds a domain that mirrors your name and you have rights in that name, the main remedy is an administrative complaint under the auDRP. auDA describes it as a faster and more affordable alternative to litigation for disputes over legal rights to .au domain licences, and it applies to all .au namespaces. The complaint is filed with one of the two independent providers auDA approves, of which WIPO, the World Intellectual Property Organisation, is the best known. auDA itself does not run the proceedings.

The auDRP requires the complainant to prove three things:

• Identical or confusingly similar: The domain is identical or confusingly similar to a name, trade mark or service mark in which you have rights.
• No rights or legitimate interests: The registrant has no rights or legitimate interests in the domain, such as genuine prior use of the name in connection with goods or services.
• Bad faith: The domain was registered or is subsequently being used in bad faith. Under the auDRP, proving either registration or use in bad faith is enough, which is a point in your favour compared with the international UDRP, which generally requires both.

The policy sets out the circumstances that count as evidence of bad faith, and they map closely onto the classic squatting patterns:

• The domain was registered primarily to sell, rent or transfer it for valuable consideration in excess of the documented out-of-pocket costs directly related to the name.
• The domain was registered to prevent the owner of a name or trade mark from reflecting it in a corresponding domain name.
• The domain was registered primarily to disrupt the business or activities of another person.
• The domain is being used to attract internet users for commercial gain by creating a likelihood of confusion with your name or mark.

The complainant bears the onus of proof, so the evidence you gathered in step 1 is what the panel will assess. The fee for a complaint over one to five domains before a single-member panel is $2,000, with the complainant paying unless the respondent elects a three-member panel. The respondent has 20 days to file a response, and if they do not respond the panel decides on the complaint alone. The remedies available are cancellation of the licence or transfer of the licence to you, provided you are eligible to hold it. Decisions are binding and there is no appeals process, but a registrar waits 10 business days before implementing a transfer or cancellation, which gives a losing party time to start court proceedings instead.

If the disputed name is not a .au name, for example a .com or .net, the equivalent system is the Uniform Domain-Name Dispute-Resolution Policy (UDRP) administered by ICANN, on which the auDRP is modelled, and the same three-element test applies in broadly similar terms.

Litigation is the alternative to the auDRP, and you are not required to exhaust the administrative route first. A court action can be brought before or after an auDRP complaint. The usual claims are trade mark infringement under s 120 of the Trade Marks Act 1995 (Cth), passing off, and misleading or deceptive conduct under the Australian Consumer Law. A court can order the transfer or cancellation of the domain name, and registrars act on court orders. Litigation is slower and more expensive than an auDRP complaint, and it only makes sense where the stakes justify the cost and the squatter is worth suing.

When to bring in a lawyer

Domain disputes look simple from the outside, but the auDRP elements are applied strictly, and a complaint that is poorly drafted or does not clearly establish each element can be rejected. If the situation is familiar, meaning you have confirmed the bad faith registration and hold rights in the name, or if you are worried about the cost and risk of getting it wrong, this is where professional help earns its keep.

A lawyer working through your situation would take these steps:

• Verify your rights: Run trade mark and business name searches to confirm you hold rights that the auDRP or a court will recognise, and advise whether registration of a trade mark should come first.
• Assess the evidence: Test the evidence you gathered against each auDRP element and identify the gaps, particularly on bad faith and the registrant's lack of legitimate interests.
• Draft the complaint or response: Prepare the auDRP complaint in the form the provider requires, set out the grounds clearly, and marshal the evidence, which materially improves the prospects of success.
• Run the negotiation: Handle the direct approach to the registrant, including any offer, so that a reasonable settlement is reached on terms that actually deliver the transfer.
• Advise on litigation: If the auDRP fails, or if the facts support a court claim, advise on the prospects of trade mark infringement, passing off and misleading conduct claims, the costs and risks, and whether the squatter is worth pursuing at all.

A lawyer can also spot the practical problems that are not obvious from the policy, such as squatters who hide behind privacy services, registrants in other countries who will ignore Australian proceedings, and the enforcement difficulties that follow a successful complaint.

The test is bad faith, not who registered first

The single most useful thing to remember is that the dispute system does not reward whoever got to the registrar first. An auDRP complaint succeeds or fails on whether the registration was in bad faith and whether you hold rights in the name, so the work that wins the day happens before you contact anyone: record the parked page, the asking price, and the WHOIS details, and check that you actually hold rights in the name. That evidence is the difference between a transfer and a rejected complaint, and it can vanish the moment the squatter knows you are interested.

In summary, domain name squatting is the registration of a .au domain licence in bad faith, and your response depends on whether you are dealing with a genuine squat or a coincidence. Work through the position in order: identify the registrant and preserve the evidence, confirm your rights in the name, try a direct approach, complain to auDA if the licence should never have been issued, and lodge an auDRP complaint with an approved provider if the bad faith registration mirrors a name you hold rights in. Where the complaint process is unfamiliar or the stakes are high, a lawyer can verify your rights, draft the complaint, and advise on whether litigation is worth the cost.