Typo Domain Investment Strategy 2026: ACPA Risk, Defensive Registration
By Mustafa Bilgic, sole proprietor — domain investor since 2019 | Last reviewed: 2026-05-08
Typo domain investment is a legally risky niche of the domain industry. Names that closely resemble established trademarks face exposure under the US Anticybersquatting Consumer Protection Act (ACPA, 15 U.S.C. §1125(d)) and the ICANN Uniform Domain Name Dispute Resolution Policy (UDRP). This page summarizes the legal landscape, the practical defensive vs speculative distinction, and what counts as legitimate use.
1. ACPA — the US legal framework
The Anticybersquatting Consumer Protection Act (1999) added 15 U.S.C. §1125(d) to the Lanham Act. The key elements:
- Domain registered in bad faith with intent to profit from a mark
- Domain identical or confusingly similar to a distinctive or famous mark
- Statutory damages: $1,000 to $100,000 per domain (court discretion), plus attorney fees
- In rem actions: Trademark holder can sue the domain itself when the registrant cannot be served
The "confusingly similar" test includes letter substitution (Goggle.com vs Google.com), letter omission (Gogle.com), addition (Googlee.com), keyboard adjacency typos, and similar variations.
2. UDRP — the global mechanism
The Uniform Domain Name Dispute Resolution Policy is a contractual obligation incorporated by ICANN-accredited registrars for gTLDs. Trademark holders file with WIPO, NAF, or another UDRP provider. UDRP elements (must prove all three):
- Domain identical or confusingly similar to complainant's trademark
- Registrant has no legitimate interest in the domain
- Domain registered and used in bad faith
UDRP penalties: transfer or cancellation of domain, plus filing fees of $1,500-$5,000+ depending on number of panelists. UDRP filings increased ~5-8% YoY in 2024-2025 per WIPO statistics.
3. Defensive vs speculative — the distinction that matters
| Type | Description | Legal exposure |
|---|---|---|
| Defensive registration | Trademark holder buys their own typo (e.g., Microsoft buys microsft.com) to prevent confusion or fraud | None — owner of the trademark. |
| Speculative typo | Third party registers typo of someone else's mark to redirect traffic, send to ad PPC, or sell to trademark holder | HIGH — ACPA + UDRP exposure |
| Generic word coincidence | Domain happens to share letters with a brand but is also a generic word with independent value | Low if mark is non-distinctive; case-by-case |
| Parody / commentary | Domain used for protected First Amendment commentary or criticism | Limited if good-faith commentary; courts split |
4. Famous case examples
| Case | Outcome |
|---|---|
| Verizon vs Lance Fern (Verizonn.com etc., 2008) | $33M cybersquatting verdict (later reduced) |
| Microsoft vs unknown registrants (multiple Microsft typos) | Multiple successful UDRP transfers |
| Bank of America vs typo registrants | Multiple ACPA + UDRP victories with statutory damages |
| WIPO 2025 typo cases (multiple) | Most resulted in transfer to brand holder |
5. What is NOT cybersquatting
- Generic word that incidentally matches part of a brand (Apple Inc. cannot stop you owning apple.farm if you're a fruit farmer)
- Pre-existing common terms (Sun Microsystems vs sun-related generic domains)
- Names of competing businesses with same generic root (e.g., "auto" in many domains)
- Prior owner of the domain before the trademark filing
- Domains registered before the brand existed
6. The defensive registration market
Brands routinely register defensive typos as part of brand protection. Estimated annual spending:
- Top-100 brands: $50,000-$500,000/year on defensive registrations
- Mid-size brands: $5,000-$50,000/year
- Small businesses: $50-$500/year (basic typos)
This creates a defensive registration service industry (CSC Domain Security, MarkMonitor, GoDaddy Brand Services).