Cybersquatting is the act of registering, selling, or using a domain name that closely resembles an existing trademark, without the trademark owner’s permission and typically in bad faith. The goal is usually to extort money from the legitimate brand owner to release the domain, or to deceptively redirect customers to a different website. Either way, it causes real harm: brand dilution, customer confusion, and in some cases direct financial loss.
This guide covers the types of cybersquatting, the UAE laws that address it, which dispute resolution process actually applies depending on the domain extension involved, and how to respond if it happens to your brand.
Types of Cybersquatting
- Typosquatting. Registering a domain name that’s a slight misspelling of a well-known brand, such as “goolge.com” instead of “google.com.”
- Identity theft. Using a domain resembling a brand to redirect customers to a fraudulent site designed to capture personal information.
- Trademark infringement. Using a domain name that incorporates a trademark specifically to trade off the brand’s existing goodwill.
- Extortion. Acquiring domain names tied to organizations specifically to demand payment for their transfer.
UAE Laws Against Cybersquatting
UAE Trademark Law (Federal Decree-Law No. 36 of 2021)
This law governs trademark registration in the UAE and makes unauthorized use of a registered trademark illegal. A trademark owner can file a complaint where a domain name improperly incorporates their registered brand.
UAE Cybercrime Law (Federal Decree-Law No. 34 of 2021)
The Cybercrime Law doesn’t use the specific term “cybersquatting,” but it addresses the underlying conduct, bad-faith registration and use of a domain name to deceive or extort. Under this law, creating a fake website, account, or email falsely attributed to a natural or legal person carries a penalty of imprisonment and a fine of not less than AED 50,000 and not more than AED 200,000.
Also check: Trademark Dispute Resolution
TDRA Regulations on Domain Name Registration
The UAE Telecommunications and Digital Government Regulatory Authority (TDRA) oversees .ae domain registration and prohibits registering domain names that closely resemble existing trademarks. Trademark owners can report domains registered to harm their business.
Executive Regulations of the UAE Trademark Law (Cabinet Resolution No. 57 of 2022)
These regulations set out enforcement mechanisms for trademark protection, including measures specifically addressing domain name disputes.
Need Expert Advice?
Contact the team at Farahat & Co. for professional support and expert insights for businesses operating in the UAE.
DNDRS Versus UDRP: Which Process Applies to Your Domain Dispute
Which dispute resolution mechanism applies depends entirely on the domain extension in question, and confusing the two is a common and avoidable mistake.
| Factor | UAE Domain Name Dispute Resolution System (DNDRS) | Uniform Domain-Name Dispute-Resolution Policy (UDRP) |
|---|---|---|
| Applies to | .ae and .امارات domains | Generic top-level domains such as .com, .net, .org |
| Administered by | .aeDA (the UAE domain registry) | ICANN-accredited providers, commonly the WIPO Arbitration and Mediation Center |
| Typical resolution path | Mediation first, then an impartial expert if unresolved | Filed complaint reviewed by a panelist under UDRP rules |
| Fallback if unresolved | UAE judicial authorities | Court action in the relevant jurisdiction |
A brand owner dealing with a lookalike .ae domain should go through DNDRS, not UDRP, and vice versa for a .com or .net domain. Filing under the wrong process wastes time and can delay actual resolution of the dispute.
Must check: Trademark Registration Services
Worked Example: Responding to a Typosquatting Case
A UAE retail brand discovers that “brandnaame.ae”, a one-letter misspelling of its registered trademark, is redirecting visitors to a competitor’s site. Since this is a .ae domain, the correct path is DNDRS, not UDRP. The brand gathers evidence (screenshots of the redirect, WHOIS registration data, proof of its own trademark registration), sends a legal notice to the domain holder requesting transfer, and files a DNDRS complaint with .aeDA when the holder doesn’t respond. Because the misspelling is clearly deliberate and the redirect to a competitor demonstrates bad faith, this is a comparatively straightforward case for an impartial expert to resolve in the brand owner’s favor, provided the trademark registration and evidence are properly documented from the outset.
How to Protect Your Trademark from Cybersquatting
- Register your trademark. Registration with the UAE Ministry of Economy is the foundation for any cybersquatting complaint or court action.
- Secure your domain names proactively. Register the .ae version of your brand alongside common extensions like .com, .net, and .org before a squatter does.
- Monitor domain registrations. Domain monitoring services can flag new registrations that closely resemble your brand before they cause real damage.
- Report violations promptly. Notify the UAE Ministry of Economy, and pursue DNDRS or UDRP depending on the domain extension involved.
Filing a Cybersquatting Complaint in the UAE
- Gather evidence. Document the infringing domain, its content, and how it violates your trademark rights.
- Send a legal notice. Formally request the domain holder transfer the domain.
- File a complaint with the UAE Ministry of Economy if the holder doesn’t comply.
- Use DNDRS or UDRP, depending on whether the domain is .ae/.امارات or a generic extension.
- Take legal action in UAE courts under the Cybercrime Law and Trademark Law if other methods don’t resolve the dispute.
Common Mistakes When Responding to Cybersquatting
- Filing under the wrong dispute process. DNDRS and UDRP apply to different domain extensions, filing the wrong one delays resolution.
- Delaying evidence collection. Screenshots, WHOIS data, and redirect evidence can change or disappear if the infringing site is taken down before it’s documented.
- Skipping the legal notice step. Many domain holders relinquish a squatted domain once formally notified, without needing to escalate to a full dispute process.
- Not registering the trademark first. Registration is the foundation of most enforcement options, pursuing action without it weakens the case considerably.
- Assuming one enforcement route covers everything. A brand with both a .ae and a .com lookalike domain needs to pursue DNDRS and UDRP separately, not a single combined process.
Penalties for Cybersquatting in the UAE
Penalties vary by the severity of the infringement and can include fines, transfer of the domain to the rightful trademark owner, imprisonment in serious cases, and other business restrictions such as being barred from operating in the UAE market.
Frequently Asked Questions (FAQs)
What is cybersquatting under UAE law?
What is the difference between DNDRS and UDRP?
What law in the UAE addresses cybersquatting?
What is the penalty for creating a fake website under UAE Cybercrime Law?
What should I do first if I discover a cybersquatted domain?
Can a cybersquatting case be resolved without going to court?
Need Expert Advice?
Contact the team at Farahat & Co. for professional support and expert insights for businesses operating in the UAE.
How Farahat & Co. Can Help
Farahat & Co. supports businesses with trademark registration, domain name dispute resolution, and cybersquatting expert witness services across the UAE.
Contact Farahat & Co. today to discuss your cybersquatting and trademark protection requirements.
