Trademark & Legal Risks When Buying Expired Domains
Buying an expired domain transfers the name to you, but it does not transfer any right to a trademark contained in that name. This is the trap that catches out otherwise-careful buyers: if a domain matches a protected brand, the trademark owner can take it from you — and potentially sue you — no matter how legitimately you acquired it or how much you paid. Prior ownership by someone else offers you no protection whatsoever.
The risk is concentrated in brandable names, which is exactly the category many investors chase because they seem valuable. A generic descriptive phrase carries almost no trademark risk; a name that echoes a real company is a legal liability that no amount of domain value or backlink authority can justify. Understanding where that line sits is what keeps a domain investment from turning into a dispute you can't win.
Cybersquatting, UDRP, and the ACPA
Two legal mechanisms govern trademark disputes over domains, and both are worth understanding before you buy anything brand-adjacent. The first is the UDRP (Uniform Domain-Name Dispute-Resolution Policy), an arbitration process run through bodies such as WIPO that lets a trademark holder reclaim a domain without going to court. To succeed, the complainant generally has to show three things: that the domain is identical or confusingly similar to their mark, that you have no legitimate interest in the name, and that it was registered and used in bad faith. If they prevail, the domain is transferred to them and you're left with nothing.
The second is the ACPA (US Anti-Cybersquatting Consumer Protection Act), a federal law that allows trademark owners to sue over bad-faith registration of names matching their marks. Unlike the UDRP, the ACPA puts real money on the line — statutory damages can run to tens of thousands of dollars per domain. Across both mechanisms, the decisive phrase is "bad faith." Registering or holding a brand's domain in the hope of profiting from its name — by reselling it to the brand, diverting its traffic, or trading on its reputation — is precisely the behaviour these rules exist to punish, and buying the domain second-hand from a previous registrant does nothing to shield you.
How to Check a Name Before Buying
Screening a name takes only a few minutes and should be routine. Start by searching the major trademark databases — the USPTO in the United States, the EUIPO in the European Union, and the WIPO Global Brand Database internationally — to see whether the name, or a close variant, is registered as a mark. Follow that with a straightforward Google search: if an active company clearly operates under the name, treat that as a serious warning even if no formal registration surfaces, because unregistered "common law" trademark rights can exist through use alone.
Next, check the domain history through the Wayback Machine. If the domain previously hosted a real brand's website, that brand very likely still holds rights to the name, and its earlier presence is exactly the kind of evidence that establishes their claim in a dispute. Pay particular attention to confusingly similar names, too — deliberate misspellings like "gooogle," pluralised brands, and "brand + product" combinations such as "nikeshoes" are classic cybersquatting patterns that carry the same risk as an exact match. Finally, bear in mind that trademarks are registered within specific classes of goods and services, so a name might be safe in an unrelated field yet risky within the trademark's own industry; this nuance is one of several reasons that, for a significant purchase, a professional trademark search or legal opinion is money well spent.
Highest-Risk Domains to Avoid
Some categories are dangerous enough that no metrics should tempt you. Exact matches of well-known brands are the obvious one, but the same logic extends to deliberate misspellings or "typo" versions of brands (typosquatting), to a brand name combined with a product or location keyword, and to the names of celebrities, sports teams, and trademarked products. The common thread is that the domain derives its apparent value from a brand association — and that association is the very thing that makes it legally indefensible. However strong such a domain's authority might be, the combined risk of losing it and paying damages almost always outweighs any SEO benefit it could offer.
Safer Practices
Steering clear of trouble is mostly a matter of choosing the right kind of name in the first place. Favour generic, descriptive, or invented words that have no brand attached, and confirm that your intended use is unrelated to any existing mark — a discipline that also happens to reinforce niche relevance in a way that avoids conflict. Treat it as a bright-line rule that if a name is valuable specifically because of a brand association, that's the clearest possible sign to walk away. And for any high-value purchase, invest in a proper trademark search or a short consultation with an attorney; the cost is trivial next to a UDRP loss or an ACPA claim.