Cybersquatting vs Typosquatting: The Difference, in a Table

Three terms that are not synonyms

The words are used interchangeably and mean different things. One describes a legal claim, one describes a keyboard, and one describes an appearance. Mixing them up makes a report harder to act on, because the person receiving it cannot tell what you are alleging.

Two descriptions of different things

Typosquatting describes the name. It resembles another name closely enough to be confused with it, whether through a spelling change, characters that render alike, an added keyword, or a different ending. It is an observation anyone can make by looking.

Cybersquatting describes the conduct. It is registering or using a name in bad faith when somebody else has rights in it, usually a trademark, typically to sell it back, divert its traffic, or deny it to its owner. It is a characterisation that requires evidence about intent.

The overlap is large, which is why the terms blur. A typosquatted domain used to phish a brand is almost always cybersquatting too. But a name can be typosquatting without being cybersquatting, and cybersquatting without being typosquatting.

Cases that sit in only one category

Typosquatting, not cybersquatting

A one-character variation of a common dictionary word, registered by somebody with no interest in any brand. It resembles your name because your name resembles a common word.

Cybersquatting, not typosquatting

Your exact trademark registered under a new ending by somebody who then offers to sell it to you. Nothing is misspelled; the name is identical.

Both

Your brand with a dropped letter, registered last month, serving a copy of your login page.

Neither

A defensive variation you registered yourself and forgot about, which is the most common single explanation for findings on a first check.

Typosquatting is about the keyboard

Typosquatting narrows the question to names a person reaches by accident. The transformations are small and mechanical, which is what makes them easy to generate and easy to recognise.

Omission

exmple.test. A finger does not land.

Repetition

exampple.test. A key repeats.

Transposition

exmaple.test. Two letters arrive in the wrong order.

Substitution

exsmple.test. A neighbouring key is struck instead.

Wrong ending

example.net or example.cm. One character of the ending is dropped.

Except when nobody is typing at all

A typo domain does not need anybody to make a typo. Once registered, it can be placed in an email, an advertisement, a text message or a printed code, where the reader never types anything and only glances at the name. The misspelling then serves as camouflage rather than as a trap for clumsy fingers.

That is the practical reason to treat a typo domain with mail records configured as more pressing than one that resolves nowhere. The mechanism that matters is delivery, not accident.

Cybersquatting is about the claim, not the spelling

Cybersquatting, or domain squatting in everyday use, describes registering a name associated with another person or organisation, frequently in the hope of selling it or drawing traffic from it. Whether a given registration is actionable is a question of rights and conduct, not resemblance.

Under ICANN's Uniform Domain-Name Dispute-Resolution Policy, a complainant has to establish three things together.

1. The domain is identical or confusingly similar to a trademark or service mark in which the complainant has rights.
2. The holder has no rights or legitimate interests in respect of the domain.
3. The domain was registered and is being used in bad faith.

All three limbs have to hold. A name that merely looks like a brand satisfies at most the first, and the first is the easiest of the three. A reseller, a fan site, a critic, a business with the same name in another sector, and a person who registered a dictionary word years before the brand existed can all hold a confusingly similar name legitimately. The same logic applies long before anyone files anything. If similarity were sufficient, every review queue would be full and none of it would mean anything.

How the law treats each

Two instruments cover most of the ground for generic endings, and they answer different questions.

The Uniform Domain-Name Dispute-Resolution Policy is an administrative procedure that every registrant of a generic domain accepts as a condition of registration. A complainant proves the three elements above on paper, a panel decides, and the remedies are limited to cancelling the name or transferring it to the complainant. The panel cannot award money judgments or costs. At WIPO the filing fee for one to five names with a single panellist is USD 1,500, and a case with no procedural problems normally completes within two months of WIPO receiving the complaint. Typosquatting carries a complainant through the first element, because panels treat a common, obvious or intentional misspelling of a mark as confusingly similar to it. It does nothing for the other two, which are about the registrant, not the string.

The Anticybersquatting Consumer Protection Act is a United States statute and a court route. A person is liable under it who has a bad faith intent to profit from a mark and registers, traffics in or uses a domain name that is identical or confusingly similar to it. Because it is a court, it can award what a panel cannot: statutory damages of not less than USD 1,000 and not more than USD 100,000 per domain name, and it allows an in rem action against the name itself in the district of the registrar or registry where the registrant cannot be reached. It is slower, more expensive and available only where a United States court has jurisdiction.

Two more routes sit alongside. Uniform Rapid Suspension applies to the generic endings launched since 2012, sets the burden of proof at clear and convincing evidence, and suspends the name for the balance of its registration period rather than transferring it. Country-code registries run their own schemes: Nominet's Dispute Resolution Service for .uk turns on whether a registration is abusive, meaning it takes unfair advantage of or is unfairly detrimental to another party's rights, with a mediation stage first. These are legal processes with costs, deadlines and evidentiary standards. Involve counsel before filing rather than after.

Cases that went to a panel or a court

Five cases show where the line falls. Two are UDRP panels deciding on rights and bad faith with nothing misspelled. One is a court deciding that deliberate misspellings are actionable, and one is a regulator acting against the same registrant at scale. One is a court deciding that a confusingly similar name, used to criticise, is not cybersquatting at all.

Read across the rows. Both WIPO cases were cybersquatting without typosquatting: the names were spelled correctly and the decisions turned on conduct. Zuccarini was both, and the court's point was that the intentional registration of misspellings of distinctive names, causing a user who makes a slight typing error to reach an unintended site, is confusingly similar within the statute. Lamparello was neither, despite a name one letter from the mark, because the use was criticism rather than profit. Resemblance was present in all four and decided none of them.

Which UDRP element each gets you

Panels treat the first element as a threshold test, a relatively straightforward comparison between the mark and the domain name that establishes standing to bring the complaint. Typosquatting gets you through it and no further.

Cybersquatting is what the remaining two elements are about, and the evidence for them is concrete: registration timing relative to your mark, an offer to sell the name for more than documented out-of-pocket costs, a pattern of registering other people's marks, and what the name has actually been used for. None of that is visible in the string. All of it is visible in the record.

What a domain check contributes to each

A public check produces the factual record underneath either route: the registration date from RDAP, the registrar, what DNS returns, whether mail is configured, whether certificates have been issued, and what public scanners observed historically.

That record is directly useful for an abuse report, because it establishes what the name is and when it appeared. It is a starting point for a dispute, because registration timing and a pattern of related registrations speak to bad faith.

What it does not do is characterise conduct. This site labels review priority under published rules and says explicitly that similarity is not intent. Calling a domain cybersquatting is a legal conclusion, and no checker is entitled to make it for you.

Related terms worth keeping straight

Domain squatting

The everyday term for cybersquatting, also used for speculative registration of names for resale where no mark is involved.

Combosquatting

A brand combined with a keyword, such as brand-login. The brand is spelled correctly, which is what makes it effective in a message.

Homograph attack

A name using characters from other scripts that render almost identically to the ones expected.

Bitsquatting

A name one bit different from the target, which exploits memory errors in machines rather than mistakes by people.

Brandjacking

Impersonation of a brand across channels generally, of which domains are one part.

Abuse report or dispute?

The routes available to you turn on which description applies, because they have different standards of proof. An abuse report is about conduct happening now. You tell a registrar, a hosting provider or a browser blocklist what a name is doing, with evidence, and ask them to act under their own terms of service. It is fast, it costs nothing but time, and it does not require you to prove anything about trademarks.

A dispute is about rights. It is slower, it has a fee, and it ends with the name transferred or cancelled. Use typosquatting when you are describing what a name looks like. Use cybersquatting when you are making a claim about why it was registered, and be ready to support it. Most findings in a first report are neither, and deciding which is which is the work the evidence exists to support.

Common questions

Is typosquatting a form of cybersquatting?

Often, but not always. A typo domain used to trade on a brand is cybersquatting as well. A typo of a dictionary word registered with no interest in any brand is typosquatting alone, and a correctly spelled brand name registered to sell back is cybersquatting alone.

Is domain squatting the same as cybersquatting?

In everyday use, yes. Domain squatting is the informal term, cybersquatting is the one the policy and the statute use, and both turn on rights and bad faith rather than on how the name is spelled.

Is cybersquatting illegal?

In the United States it is actionable under the Anticybersquatting Consumer Protection Act, with statutory damages of USD 1,000 to USD 100,000 per domain name. Everywhere a generic domain is registered, the UDRP allows a trademark holder to seek transfer or cancellation, which is a remedy rather than a finding of illegality.

Can you sue for typosquatting?

In the United States, yes: Shields v. Zuccarini held that intentional misspellings are confusingly similar under the ACPA and upheld USD 10,000 per domain. Elsewhere the usual route is a UDRP complaint, where a misspelling satisfies the first element and the other two still have to be proved.

How do I report a typosquatting domain?

Preserve the registration record, DNS answers and any message first. Then report what the name is doing to the hosting provider, the registrar and the browser blocklists under their abuse routes. A dispute for the name itself is a separate, slower decision.