Domains, Social Handles and Cybersquatting: What a Trademark Gets You

In 2025, someone used gearerospaces.com, a misspelling of GE Aerospace with two extra letters, to email the accounts-receivable staff at GE's business partners about an "Engine sales agreement." According to the complaint, the scheme "almost resulted in a fraudulent transfer of [USD] 800,000." GE filed a complaint with the World Intellectual Property Organization (WIPO) on August 6, 2025, and on September 26 a panel ordered the domain transferred to GE (WIPO Case No. D2025-3149). The decision came 51 days after GE filed, and WIPO's filing fee for a case like this is $1,500. GE got the domain. It did not get any money.

That case shows what a trademark does online and what it does not. A trademark gives you ways to take back a name someone is misusing. It does not reserve a domain or a social handle for you, and the fast remedies get the name back or switch it off, but pay you nothing.

What a trademark does not do

It does not reserve a username. Instagram and Threads say usernames "are provided on a first-come, first-served basis and may not be reserved." If the handle you want belongs to an account that looks abandoned, Instagram's advice is to "choose an available version of the username" by adding periods, numbers or other characters. Its help page offers no way to claim the dormant one.

It does not reserve a domain. Even ICANN's FAQ on the Trademark Clearinghouse, the database that gives trademark owners early access to new domain endings, says that "[a]llocation of domain names in a particular TLD occurs according to the registry policies for that TLD." A TLD is a domain ending such as .shop, and each one sets its own rules.

And the reverse is also true: registering a domain or a company name does not, by itself, give you trademark rights. The USPTO's own training material says a domain name registration "[d]oes not create a registered trademark," and neither does registering a trade name with your state. Meta tells brand owners the same thing: a business registration "usually doesn't itself create a trademark right." A name becomes a trademark by being used as a brand for goods or services, or by being registered as one.

Getting a domain back: two routes

Route 1: a UDRP complaint (fast, cheap, no money)

The Uniform Domain-Name Dispute-Resolution Policy, or UDRP, is ICANN's process for disputes over .com and other generic domain endings. You file with a provider such as WIPO, and a panel decides on written submissions. There is normally no hearing, and no court is involved.

To win, you must prove all three of these:

1. The domain is identical or confusingly similar to your trademark. Panels ignore the ending, so .com, .shop and .ai are all treated the same.
2. The person who holds it has no rights or legitimate interest in it.
3. They registered it and are using it in bad faith.

WIPO's filing fee is $1,500 for one to five domains decided by a single panelist, a fee it has not changed since 2002; a lawyer's time is extra if you use one. A case "normally should be completed within 2 months." Since March 2026, WIPO has also offered a priority track, for $4,000, that aims to reach a decision about a month after the case starts. The only remedy is canceling or transferring the domain. In WIPO's words, the panel "cannot award money judgments, nor lawyers' costs."

Three limits catch founders off guard:

• A pending application is not enough. WIPO's guidance says a pending trademark application "would not by itself establish trademark rights" for a UDRP case. An unregistered brand can still qualify, but only if you prove consumers already associate the name with you.
• If they had the domain first, you usually lose. Where someone registered the domain before your trademark rights existed, "panels will not normally find bad faith." The narrow exception is someone who grabbed the name to cash in on your brand before it was protected: for example, someone who registered it right after news of your product launch, a former employee using inside knowledge, or someone who registered it right after you filed your trademark application.
• A disclaimer does not save a squatter. In the case over madonna.com (WIPO Case No. D2000-0847, decided October 12, 2000), the holder had bought the domain for $20,000, registered MADONNA as a trademark in Tunisia, and run an adult site with a disclaimer. The panel found the disclaimer "insufficient to avoid a finding of bad faith" and transferred the domain to the singer.

The process is busy. WIPO handled 6,282 domain name cases in 2025, its highest on record.

Route 2: a federal lawsuit (slower, but money is possible)

The Anticybersquatting Consumer Protection Act (15 U.S.C. § 1125(d)) lets a brand owner sue someone who registered, trafficked in or used a confusingly similar domain with "a bad faith intent to profit" from the mark, but only if the mark was already distinctive when the domain was registered. A squatter who got there before your brand existed usually escapes this law too. The court can order the domain transferred, and the brand owner can choose statutory damages "of not less than $1,000 and not more than $100,000 per domain name" instead of proving its actual losses (15 U.S.C. § 1117(d)).

Two details matter. If you cannot find the squatter, or no U.S. court has power over them (common when they are abroad), you can sue the domain itself in the district where its registrar or registry is located, but then the domain is the only remedy. And there is a safe harbor: a holder who "had reasonable grounds to believe" the use was fair or lawful is not acting in bad faith.

New domain endings: the Trademark Clearinghouse

ICANN, which manages the domain system, took applications for a new round of domain endings from April 30 to August 12, 2026, so more endings are coming. For new endings, a registered trademark buys two things through the Trademark Clearinghouse:

• Sunrise: a window of at least 30 days to register matching domains before the public can.
• Claims: for at least 90 days afterward, anyone trying to register a matching name sees a warning notice, and you are told if they register it anyway.

The Clearinghouse takes registered trademarks (plus a few marks protected by treaty or statute, or validated by a court), not pending applications. It costs $155 per trademark for one year, and using Sunrise requires proof that you use the mark. For clear-cut squatting on a new ending, there is also the Uniform Rapid Suspension System, which needs a registered word mark in current use and "clear and convincing evidence." It suspends the domain for the rest of its registration term; it does not transfer it to you.

Social handles: what the platforms will and will not do

Meta's and TikTok's trademark help pages describe removing content and accounts, not handing the username to you. Meta's and Instagram's terms do let them change a username that infringes someone's rights, which can free the name up, but nothing we found promises to give it to the person who complained.

• Meta (Facebook, Instagram, Threads). A trademark report asks for your registration number "if applicable," so a registration helps but is not strictly required. Meta also warns that "not every use of your trademark in a username is necessarily a trademark infringement," that it "can't adjudicate disputes between third parties," and that it regularly gives the person you reported your name and email address. Its bulk enforcement tool, Brand Rights Protection, is for owners of a registered trademark.
• TikTok. Infringing content "may be taken down," and repeat or severe infringers can be banned. Its policy describes removal and bans, not username transfers, and it says fan pages about a brand are "generally permissible" as long as they do not claim to speak for or be associated with the brand. Impersonation is banned separately under its community guidelines.

Renames are the riskiest moment

In January 2026, Anthropic objected that the name of an open-source AI agent, Clawdbot, was too close to Claude, the name of its AI models. The developer, Peter Steinberger, renamed the project Moltbot and changed the project's GitHub and X names at the same time. In the gap between releasing the old names and claiming the new ones, crypto scammers grabbed the old handles and used them to promote a fake token called CLAWD, which traders drove to more than $16 million in market value within hours, according to Decrypt (January 28, 2026). Reports differ on exactly which accounts were taken, and Steinberger regained control. We wrote about the trademark side of the story in Clawdbot Lost Its Name.

The lesson: don't rename the old account. Keep it under the old name, post a pointer to the new one, and open a separate account under the new name. If a platform forces a rename, have a second account logged in and ready to claim the old name at once, and know that even seconds can be too long.

One place a pending application is enough: Amazon

Amazon Brand Registry, which gives you access to Amazon's brand-protection tools, accepts "an active, registered trademark or a pending trademark application" for your brand name or logo, from a trademark office in a country with an Amazon store. The mark must be a word mark or a design that contains words, letters or numbers.

What to do

1. Claim the domain and the handles the same day you pick the name, before you announce it. Names go to whoever asks first, and someone who registers the domain before your brand exists is hard to dislodge.
2. File your federal application early, and know what each stage gets you. A pending application gets you into Amazon Brand Registry. A registration gets you into the Trademark Clearinghouse, the URS, Meta's Brand Rights Protection tool, and easier standing in a UDRP case. Run a knockout search before you file so you are not building on a name someone else already owns.
3. Pick the remedy for the goal. To get a domain back, a UDRP complaint costs WIPO's $1,500 filing fee, plus a lawyer's time if you use one, and takes about two months. To recover money, you need a lawsuit, usually in federal court under the ACPA and often alongside trademark-infringement claims. Expect real legal costs.
4. When you rename, keep the old accounts. Open new accounts under the new name instead of renaming the old ones, and keep renewing the old domain.
5. Treat lookalike domains as a payments risk. GE's two-letter misspelling nearly redirected $800,000. Have your finance team confirm any change to a partner's bank details by phone, at a number you already have. And watch for new filings and domains that copy your name: Watch Alerts flag new USPTO applications that conflict with your mark, and our trademark monitoring guide covers the rest.

Sources

• General Electric Company v. kreardon james, WIPO Case No. D2025-3149 (September 26, 2025): https://www.wipo.int/amc/en/domains/decisions/pdf/2025/d2025-3149.pdf
• Madonna Ciccone v. Dan Parisi, WIPO Case No. D2000-0847 (October 12, 2000): https://www.wipo.int/amc/en/domains/decisions/html/2000/d2000-0847.html
• ICANN, Uniform Domain-Name Dispute-Resolution Policy: https://www.icann.org/resources/pages/policy-2024-02-21-en
• WIPO, guide to the UDRP and fee schedule: https://www.wipo.int/amc/en/domains/guide/ and https://www.wipo.int/amc/en/domains/fees/
• WIPO Jurisprudential Overview 3.0: https://www.wipo.int/amc/en/domains/search/overview3.0/
• WIPO caseload: https://www.wipo.int/amc/en/domains/statistics/cases.jsp and the January 14, 2026 release, https://www.wipo.int/amc/en/domains/news/2026/news_0001.html
• 15 U.S.C. §§ 1117(d) and 1125(d): https://www.law.cornell.edu/uscode/text/15/1117 and https://www.law.cornell.edu/uscode/text/15/1125
• ICANN, Rules for Uniform Domain Name Dispute Resolution Policy: https://www.icann.org/resources/pages/udrp-rules-2015-03-11-en
• WIPO, "Updated WIPO UDRP Fee Schedule and NEW Services" (March 9, 2026): https://www.wipo.int/en/web/amc/w/news-domain-name-disputes/2026/news_0005
• USPTO, "Trademark basics: Learn the fundamentals": https://www.uspto.gov/sites/default/files/documents/tm-basics-learn-fundamentals.pdf
• Instagram and Meta help pages on trademark reports and usernames: https://help.instagram.com/182492381886913, https://help.instagram.com/2039132876317734, https://www.facebook.com/help/440684869305015, https://help.instagram.com/187322279623266, https://help.instagram.com/222826637847963
• Meta Terms of Service: https://www.facebook.com/terms.php and Instagram Terms of Use: https://help.instagram.com/581066165581870
• TikTok intellectual property policy and community guidelines: https://www.tiktok.com/legal/page/global/copyright-policy/en and https://www.tiktok.com/community-guidelines/en/integrity-authenticity
• Trademark Clearinghouse FAQ and pricing: https://trademark-clearinghouse.com/faq-help/ and https://trademark-clearinghouse.com/credit-card-payment/; ICANN's Trademark Clearinghouse FAQ: https://newgtlds.icann.org/en/about/trademark-clearinghouse/faqs
• ICANN, Uniform Rapid Suspension System, its procedure (https://itp.cdn.icann.org/en/files/registry-operators/urs-procedure-redline-21feb24-en.pdf) and the 2026 round: https://www.icann.org/resources/pages/urs-2014-01-09-en and https://newgtldprogram.icann.org/en
• Amazon Brand Registry: https://sell.amazon.com/brand-registry
• Decrypt, "Clawdbot Chaos: A Forced Rebrand, Crypto Scam and 24-Hour Meltdown" (January 28, 2026): https://decrypt.co/356191/clawdbot-chaos-forced-rebrand-crypto-scam-24-hour-meltdown