What Is Domain Squatting? How to Protect Your Startup Name

Quick answer: Domain squatting is the practice of registering a domain name, usually one matching a brand, trademark, or a name likely to become valuable, with no intent to build a real site, purely to resell it later at a markup or to profit from traffic mistakenly directed there. Startups are common targets because a founder often settles on a name publicly (a tweet, a Show HN post, a pitch deck circulated to investors) before locking down every TLD, giving a squatter a window to register the ones left open.

If you've ever searched for a name and found the exact .com sitting on a page that says "this domain is for sale" with no actual business behind it, you've seen domain squatting. It's a real risk for early-stage founders specifically because the naming process itself creates exposure: you research a name, maybe check it on social media, discuss it with a co-founder over email, and in that window between deciding on a name and registering every relevant TLD, someone else can register it first.

How Domain Squatting Actually Works

A squatter monitors newly trademarked names, trending startup names from Product Hunt or Y Combinator batches, or simply registers common, brandable words in bulk speculatively, betting that some percentage will become valuable later. When a squatter holds a domain matching your exact business name, you're left with three options: negotiate a purchase (often at a significant markup over registration cost), choose a different TLD or a modified name, or, if the squatter is using your specific trademark in bad faith, pursue a legal remedy under the Anticybersquatting Consumer Protection Act (ACPA) in the U.S. or through ICANN's Uniform Domain-Name Dispute-Resolution Policy (UDRP) internationally.

Is Domain Squatting Illegal?

Not inherently. Registering an available domain is legal regardless of intent, and speculative domain registration (buying names you think might become valuable someday) is a legitimate, if aggressive, business. It becomes legally actionable specifically when the squatter registers a domain matching an existing trademark in bad faith, meaning with clear intent to profit from your brand recognition rather than coincidental overlap. This distinction matters because it means legal recourse generally requires you to already hold trademark rights in the name; a domain matching a name you've only informally discussed, with no trademark filed, gives you far less legal standing to reclaim it.

Why Startups Are Common Targets

Three patterns make early-stage companies more exposed than established businesses:

Public naming moments create a signal. A Show HN post, a tweet announcing a new name, or a Product Hunt launch all broadcast a name publicly before every TLD is necessarily locked down. Automated monitoring tools exist specifically to catch these signals and register available variants within hours.

Founders often check only the primary TLD. If you check and register the .com but not the .io or .ai, and your product is developer- or AI-focused, a squatter recognizes that gap and can register the TLD you skipped, sometimes with the specific intent of forcing you to buy it back once you realize the gap.

Trademark filings are public record. A USPTO trademark application becomes searchable public information, and squatters do monitor these filings for company names that haven't yet locked down every relevant domain.

Practical Steps to Avoid It

Register every TLD you might plausibly need at the moment you commit to a name, not after. This is the single highest-leverage action: the gap between deciding on a name and registering it across .com, .io, and .ai is exactly the window a squatter exploits. Checking and registering all three simultaneously, rather than sequentially over days or weeks, closes that window entirely.

Delay public announcement until domains are secured. If you're still deciding between two or three finalist names, avoid tweeting, posting, or circulating a pitch deck with the specific name until the domains are registered. The few days of delay costs far less than negotiating a squatted domain back.

Consider a defensive registration of adjacent TLDs even if you don't plan to use them. A $10 to $15 .net or .co registration, even one you never build on, prevents a squatter from acquiring it and later using it to redirect confused traffic or attempt to sell it back to you.

If you're already squatted, check the registration date and use pattern before paying. A domain registered years before your company existed, with an actual site or history behind it, likely isn't opportunistic squatting and negotiating a fair purchase price is reasonable. A domain registered within days of your public naming announcement, sitting parked with no content, is a much stronger case for either a UDRP complaint (if you hold a trademark) or simply choosing a different TLD rather than rewarding the behavior.

When Legal Action Makes Sense

If you hold a registered or even a pending trademark, and a squatter registered a domain matching that mark in clear bad faith (parked page, immediate resale offer, no legitimate business use), a UDRP complaint through a body like the WIPO Arbitration and Mediation Center is often faster and cheaper than U.S. federal litigation under the ACPA, typically resolving in 2 to 3 months. Without a trademark filed, your legal options narrow considerably, which is one more reason the trademark and domain-availability steps work best done together rather than domain-first, trademark-later.