Somebody, somewhere, is probably registering a domain that looks a little too much like yours right now, and based on the latest numbers, more brands than ever are noticing.
GigaLaw’s Q2 2026 Domain Dispute Digest shows 2,324 Uniform Domain-Name Dispute-Resolution Policy (UDRP) decisions across the five ICANN-approved providers in Q2 2026, covering 3,349 disputed domain names. That’s up 11.9% in decisions and 11.1% in domain names compared to the same quarter last year. Not a rounding error, and not a fluke either. The largest UDRP provider alone, The World Intellectual Property Organization (WIPO),, is on pace for its own record year, with disputes tracking about 6% higher annually.
By the time there’s a UDRP ruling, the damage is already done
Here’s the part that should actually get your attention: a UDRP decision isn’t step one. It’s the last step, after the domain was registered, after it was likely already live, after a complaint was drafted and filed, and after months of back-and-forth before a panel finally ruled. By the time a decision comes down, that infringing domain has often already fooled a customer, phished an employee, or quietly chipped away at brand trust. The 11.9% increase isn’t just a stat about panels being busier. It’s a lagging indicator of how much squatting, spoofing, and impersonation was already happening months ago, and probably still is.
And it’s worth noting that when trademark owners do file, they tend to win. 95.1% of this quarter’s decisions ended in a transfer back to the rightful owner, only 4.5% were denied, 0.4% were canceled, and reverse domain name hijacking (bad-faith complaints against legitimate registrants) showed up in just 0.8% of cases. If you’ve got a legitimate claim, the odds are firmly in your favor. The hard part isn’t winning the case. It’s noticing the domain in time to avoid needing one.
So why is this happening more?
- TLDs keep multiplying, which means there are simply more places to park a lookalike domain than there used to be. .com is still where most squatters land (2,392 of this quarter’s 3,349 disputed domain names), but .shop, .online, and .site show the copycats are spreading to newer territory too.
- Scammers have gotten more ambitious. Domains aren’t just sitting there anymore, they’re actively being used in phishing and smishing campaigns dressed up as real companies.
- UDRP works, and works reliably, but it’s a cleanup crew, and a slow one. Decisions land months after the mess was made.
The move nobody regrets: get ahead of it
Filing a UDRP after the fact is a bit like calling a locksmith after the house has already been robbed. Useful, necessary, but not exactly proactive. The smarter play is knowing about the lookalike domain the day it’s registered, not the day it starts causing problems. That means active monitoring, a fast read on which new registrations actually pose a risk, and an enforcement plan that’s ready to go the moment something crosses the line, UDRP or otherwise. We wrote about this exact idea recently in our blog “Your attackers already have a map. Do you?, the side with the better visibility usually wins.”
Bottom line
An 11.9% jump in UDRP decisions isn’t a headline to skim past. It’s a nudge. If nobody’s currently keeping an eye on who’s registering domains that look suspiciously like yours, now’s a reasonable time to start. Talk to our Corporate Brand Services team anytime, we’re happy to walk through what proactive monitoring and enforcement could look like for your brand. Check out our 101domain UDRP Resource Page.