Is It Legal to Buy Expired Domains? Trademarks and UDRP
The question comes up because the practice feels like it should be shady: someone lost a domain, and you are profiting from the lapse. In reality, expired domains are an ordinary, regulated secondary market, run through registrar auctions and ICANN-accredited drop catchers, and buying one is as legal as buying a repossessed car. The law only enters through what the name is and what you do with it. One caveat before the detail: this is general information, not legal advice, and a real dispute deserves a real attorney.
Why buying expired domains is legal
A domain is a registration, not a possession, and when the registration lapses through the full lifecycle (grace, redemption, then five days of pendingDelete), the registry releases the name for anyone to register. The previous owner's rights in the registration end with it. An entire open industry sits on that fact: GoDaddy runs 35,000+ expiring names through auction daily, DropCatch maintains 1,200+ registrar accreditations to catch deletions, and park.io catches ccTLD drops at $99 a time. None of that machinery could operate in public if the purchase itself were illegal. What the law never transferred to you, though, is anything the name might infringe, which is where the exceptions start.
Where the legal risk actually lives
Trademark law. A trademark exists independently of any domain registration, and it survives a domain's expiry; it often survives the original company too, since marks get renewed, assigned and sold. Buying acme-shoes.example at a closeout does not license Acme's mark, and using it to sell shoes invites two enforcement paths. The first is a lawsuit, in the United States typically under the Anticybersquatting Consumer Protection Act, which can add money damages on top of losing the domain. The second, far more common for domains, is the UDRP: the Uniform Domain-Name Dispute-Resolution Policy, an arbitration process every gTLD registrant agrees to as part of the registration contract, designed to transfer abusive registrations quickly without a courtroom.
What is the UDRP test, in plain English?
A complainant must prove all three of the following elements; failing any one defeats the complaint.
| Element | What the complainant must prove | What it means for a buyer |
|---|---|---|
| 1. Identical or confusingly similar | The domain matches or closely resembles a mark they hold rights in | Exact brand names and obvious typos are the danger zone; descriptive dictionary use is harder to capture |
| 2. No rights or legitimate interests | You have no genuine claim to use the name | A real business, real content or honest descriptive use builds a defense; parking a brand name does not |
| 3. Registered and used in bad faith | You took and used the name to exploit their mark | Panels generally date registration from your re-registration, so the domain's innocent past does not shield a new owner |
The remedy in a UDRP is transfer or cancellation of the domain, not damages; money enters only through the court route. For expired-domain buyers, the third element is where cases are lost. Classic bad-faith evidence patterns in panel decisions include parking a brand name with ads for the brand's competitors, and offering the name back to the mark owner at a markup. Both look exactly like what they are.
Does the previous owner have any claim?
Not once the lifecycle completes. The system already gave the prior registrant every chance to keep the name: renewal at the normal price during the 0-45 day registrar grace window, then a restore during the 30-day redemption period at a typical $80-200 fee. After the five days of pendingDelete, deletion is final and the release is first come, first served. A previous owner who simply forgot to renew has no standing to demand the name back, and dispute panels do not treat regret as a trademark. The exception, as always, is a previous owner who also holds a live mark on the name, which puts you straight back into the UDRP framework above.
How risky is the name you are looking at?
- Generic dictionary words and phrases: lowest risk. Marks can still exist in specific categories, so a five-minute search pays, but descriptive use of a common word is the hardest thing to take from you.
- Coined brandables: low to moderate. Invented words are exactly what companies trademark, so an invented word that expired deserves a proper database search before you bid.
- Defunct-company brands: moderate. The company dying does not kill the mark; registrations get renewed and assigned, and a successor can arrive with paperwork years later.
- Live brands and typos of them: high. This is cybersquatting territory no matter how legitimately the auction was run, and no vetting metric fixes it.
How do you screen a domain before buying?
The short version, since screening is a habit rather than a project: search the exact name and obvious variants in the USPTO trademark database, and in EUIPO records if Europe matters to you. Read the domain's archive history to see what the old site sold, because marks live in categories and your planned use decides the collision, a check that slots into our 15-point pre-purchase checklist. Then ask the blunt question: what is this name worth with zero association to the old brand? If the honest answer is nothing, you are buying someone else's mark. Research tools will not do this for you; DomCop can show a domain's link profile and metrics, but no domain tool clears trademarks, and the screening stays your job whether the domain costs $5 or $5,000 through any buying channel.
What you do with it matters as much as what you buy
Legality is not fixed at checkout. A generic name used for an ordinary project stays boring forever; the same name aimed at a competitor's customers manufactures the bad-faith element after the fact. The same logic runs through search policy: as covered in our guide to expired domains for SEO, what you build determines how the purchase is judged. Buyers who rebuild something genuine rarely meet either a UDRP panel or a spam policy; buyers who trade on someone else's name tend to meet both.
Frequently asked questions
Can I buy the expired domain of a company that shut down?
Usually yes, and it happens every day. The caution is that trademarks outlive companies through renewal or sale to a successor, so check whether the marks are still live before building anything that trades on the old identity. Using the name for something unrelated is far safer than reviving the dead brand.
Do I get the trademark when I buy the domain?
No. A domain purchase transfers a registration, never trademark rights. If the name matters to your business, trademark clearance and registration are separate steps with their own professionals.
What happens if I lose a UDRP?
The domain is transferred to the complainant or cancelled; the UDRP itself awards no damages against you. Court claims are a separate, rarer path that can seek money. Either way, respond by the deadline: defaults make bad-faith findings easy.
Does buying at a legitimate auction protect me?
No. The venue being legal does not clear the name. GoDaddy or DropCatch selling you a trademarked name transfers the registration, not a defense, and panels do not care where you bought it.