A brand is one of the most valuable assets a modern business owns, and increasingly it lives almost entirely online. Customers find a company through a search engine, judge it by its reviews, buy from it on a marketplace, and recognize it by a logo that may flash across a smartphone screen a thousand times before it is ever seen on a physical shelf. The same connectivity that lets a small company reach a global audience also lets bad actors reach that company's customers — to sell counterfeits under its name, to register confusingly similar domain names, to impersonate its executives on social media, or to siphon its search traffic through paid advertising keyed to its trademarks. Trademark law in the internet context "continues to develop and remains somewhat unsettled compared to other areas of intellectual property law," as Practical Law's treatment of the subject puts it, which means brand owners must police their rights continuously rather than rely on a one-time legal event. This article explains, in plain language and with concrete examples, how the law lets brand owners defend against online threats, and how to build a practical program that puts the law to work.

The discussion assumes no prior legal background but does not talk down to lawyers. Every technical term is defined the first time it appears, the controlling statutes and leading cases are cited so that a practitioner can verify and build on them, and recurring hypothetical parties — chiefly an invented company called Acme Outdoor Gear, Inc. ("Acme") — are used to make abstract doctrines tangible. Acme is fictional; any resemblance to a real company is coincidental.

What "Brand Protection Online" Actually Means

"Brand protection" is shorthand for the legal and operational work of making sure that, when a consumer encounters a company's name, logo, packaging, or other identifier on the internet, that encounter is genuine — that the goods are authentic, the seller is authorized, and the source of the goods is who the consumer believes it to be. The law's central tool for this purpose is trademark law, but online enforcement also draws on copyright (through the Digital Millennium Copyright Act), customs and import law (the Tariff Act), the private contractual rules of domain registrars and online marketplaces, and a thin layer of defamation and unfair-competition law for reputation harms.

It helps to begin with the core concept. A trademark is any word, name, symbol, design, or combination of them that identifies and distinguishes the source of goods or services and signals their consistent quality. The legal protection attaches not because the mark is clever but because consumers have come to rely on it as a shorthand for "this comes from the company I trust." Trademark law therefore protects the consumer's expectation as much as the owner's investment; its touchstone, as we will see repeatedly, is likelihood of confusion — whether a meaningful number of ordinary consumers are likely to be confused about who stands behind a product. For the foundational vocabulary, see Trademark Basics; for a deeper treatment of the confusion analysis that runs through nearly every doctrine below, see our companion article Navigating the Maze of Trademark Confusion--Key Considerations for Brand Owners.

Online brand protection is best understood as a layered defense. The foundation is registration — securing the federal trademark rights that give an owner standing and remedies. On top of that sits monitoring — systematically watching the channels where infringement occurs. And on top of that sits enforcement — the graduated set of tools, from a marketplace takedown form to a federal lawsuit, by which an owner stops the conduct it discovers. The remainder of this article walks through each layer, doctrine by doctrine, and then assembles them into a repeatable program.

The Foundation: Federal Trademark Registration and Online Rights

Why Registration Matters More Online Than Off

In the United States, trademark rights arise from use in commerce, not from registration; a business that sells goods under a mark acquires "common law" rights in the geographic area where it operates. (For how those unregistered rights work and where they stop, see Trademark Rights Under Common Law.) But common law rights are a weak foundation for online enforcement, because the internet has no geography. A company selling only in Denver can be confused with an infringer selling only in Atlanta the moment both appear in the same search results — and the Supreme Court's framework for adjudicating geographically remote good-faith users, the Tea Rose-Rectanus doctrine, was built for a world of physical territories that the internet has scrambled (see Stone Creek v. Omnia--Knowledge Destroys Good Faith Under the Tea Rose-Rectanus Doctrine). Federal registration on the Principal Register, administered by the United States Patent and Trademark Office (USPTO) under the Lanham Act, solves this by granting rights that are national in scope.

Federal registration confers a bundle of advantages that matter enormously for online enforcement. It provides constructive nationwide notice of the owner's claim (15 U.S.C. § 1072) and a legal presumption of validity, ownership, and the exclusive right to use the mark nationwide (15 U.S.C. § 1057(b)). It gives access to federal court and to the Lanham Act's powerful remedies, including injunctions, the defendant's profits, damages, and — critically in the counterfeiting context discussed below — treble damages, statutory damages, and attorney's fees. After five years of continuous use, a registration can become incontestable (15 U.S.C. § 1065), which forecloses several defenses an infringer might otherwise raise. And registration is the entry ticket to nearly every online enforcement program that matters: the Uniform Domain Name Dispute Resolution Policy gives weight to registered marks, U.S. Customs records only federally registered marks, and marketplace programs such as Amazon Brand Registry require a registration (or a pending application in some tiers) before they will enroll a brand.

The practical lesson is that online brand protection begins long before any infringer appears. A business should clear and register its core marks early — ideally before launch — and should consider registering in the international classes that cover not just its current goods but its foreseeable expansion, including software, downloadable content, and (increasingly) virtual goods. On timing and the strategic question of when to file, see When to Trademark Your Brand. Before filing, a business should conduct a thorough clearance search to confirm the mark is available and will not itself infringe; our guide How to Conduct a Comprehensive Trademark Clearance Search walks through that process, and How to File a Trademark Application With the USPTO covers the mechanics of registration. A documented clearance search has a second payoff that recurs in enforcement: it can later defeat an adversary's claim that your use was willful, as explained in The Shield of Good Faith--How Trademark Clearance Searches, Attorney Opinions, and USPTO Approval Can Protect Against Willful Infringement Claims.

The Lanham Act in One Paragraph

The Lanham Act (15 U.S.C. §§ 1051–1141n) is the federal trademark statute and the backbone of nearly every claim discussed here. Three sections do most of the work. Section 32, 15 U.S.C. § 1114, creates a cause of action for infringement of a registered mark. Section 43(a), 15 U.S.C. § 1125(a), reaches unregistered marks, trade dress, and false designations of origin and false advertising — it is the all-purpose unfair-competition provision. (For its false-advertising dimension in the technology context, see False Advertising and Lanham Act Section 43(a)--Competitor Claims in Technology Marketing.) Section 43(c), 15 U.S.C. § 1125(c), protects famous marks against dilution, meaning the gradual whittling-away of a famous mark's distinctiveness (dilution by blurring) or the tarnishment of its reputation, even absent any consumer confusion. A fourth provision, Section 43(d), 15 U.S.C. § 1125(d) — the Anticybersquatting Consumer Protection Act — is the specialized weapon against domain-name abuse and gets its own section below. Two more sections, 34(d) and 35 (15 U.S.C. §§ 1116(d), 1117), supply the extraordinary remedies — ex parte seizures, treble and statutory damages — that make counterfeiting litigation worthwhile.

Brand Assets Beyond the Word Mark

Online, a brand is more than its name. Logos, distinctive product packaging and design (trade dress), website look-and-feel, advertising taglines, and original photographs and copy are all protectable, though under different regimes. Trade dress is protected under Section 43(a) if it is distinctive and non-functional; product packaging can be inherently distinctive, while product design always requires proof of secondary meaning under Wal-Mart Stores, Inc. v. Samara Brothers, Inc., 529 U.S. 205 (2000), and can never be inherently distinctive. (For the rich case law on protecting the shape and configuration of products, see The Intricate World of Trade Dress Protection--Balancing Brand Identity and Functional Design and Design Patents vs Trade Dress Protection for Product Configurations--A Comprehensive Analysis.) Product photography and marketing copy are protected by copyright, which becomes important when a counterfeiter or unauthorized reseller scrapes a brand's own images to make a fake listing look legitimate — a fact pattern that opens the door to a DMCA takedown, discussed later. (On protecting a site's content, see Copyright Registration of Websites and Website Content; on the line between trademark and copyright, see Copyright vs Trademark--What Is the Difference.) A complete brand-protection program therefore inventories and registers all of these assets, not just the company name. For brands selling in virtual environments, the protectable-asset analysis extends to virtual goods and NFTs; see Trademark Challenges in the Metaverse and Virtual Goods--Brand Protection Strategies for Digital-First Commerce.

Cybersquatting and Domain Name Abuse

The Problem

A domain name is the human-readable address of a website, such as acmegear.com. Domain names are registered on a first-come, first-served basis through accredited registrars, and historically nothing stopped an opportunist from registering a domain incorporating someone else's brand. Cybersquatting (also called cyberpiracy) is the bad-faith registration of a domain name that incorporates another's trademark, typically in order to (1) sell it back to the brand owner at an inflated price, or (2) divert the brand's customers to the squatter's own site — often a pay-per-click parking page, a competitor, a phishing trap, or a site selling counterfeits. In the past, as the Practical Law materials note, brand owners faced this threat with "the relatively ill-fitting doctrines of trademark infringement and dilution"; in response, ICANN created administrative dispute procedures and Congress passed a purpose-built statute.

Suppose Acme launches at acmegear.com. An opportunist registers acme-gear.com, acmegear.net, acmegearoutlet.com, and acmegear.shop, parks them with ads, and offers to sell the bundle to Acme for $50,000. That is the paradigm case of cybersquatting, and Acme has two principal avenues of relief: the private administrative process known as the UDRP, and a federal lawsuit under the ACPA. They are complementary, and a brand owner should understand the tradeoffs before choosing. For broader context on the domain-name system itself, see Top Level Domain Names--An Overview.

The UDRP: Fast, Cheap, and Limited to the Domain

The Uniform Domain Name Dispute Resolution Policy (UDRP) is a contractual dispute-resolution mechanism that the Internet Corporation for Assigned Names and Numbers (ICANN) requires every registrant of a generic top-level domain (such as .com, .net, .org, and the newer gTLDs) to accept as a condition of registration. The U.S. Department of Commerce created ICANN, a non-profit private-sector corporation, to preserve the operational stability of the internet and to coordinate the assignment of domain names, IP address numbers, and protocol parameters. Because the UDRP is contractual rather than statutory, it is administered not by courts but by ICANN-approved dispute-resolution service providers — most prominently the World Intellectual Property Organization (WIPO) Arbitration and Mediation Center and the Forum (formerly the National Arbitration Forum). A complaint is decided on the papers by one or three panelists, usually within roughly two months, for filing fees that typically run a few thousand dollars.

To prevail under the UDRP, a complainant must prove three elements: (1) the disputed domain name is identical or confusingly similar to a trademark or service mark in which the complainant has rights; (2) the registrant has no rights or legitimate interests in the domain name; and (3) the domain name was registered and is being used in bad faith. The remedy is narrow but often sufficient: the panel can order the domain transferred to the complainant or cancelled. It cannot award damages, attorney's fees, or any relief beyond the domain itself.

The UDRP's virtues are speed and cost; its limits are that it reaches only the domain, that bad-faith parking and offers to sell are the easy cases while genuine disputes over legitimate competing uses are harder, and that a losing registrant can effectively override an adverse decision by filing suit in court within ten business days, which stays the transfer. For a step-by-step treatment of drafting and filing, see How to File a UDRP Complaint for Domain Name Disputes. A related mechanism, the Uniform Rapid Suspension System (URS), offers an even faster and cheaper route for clear-cut cases in the new gTLDs, but it only suspends the domain for the balance of the registration term rather than transferring it — useful for emergencies, less useful when the goal is to own the name permanently.

The ACPA: Slower, Costlier, and Far More Powerful

When the UDRP's limited remedy is not enough — when Acme wants damages, wants to deter a serial squatter, or faces a registrant who will simply re-register under a new name — the Anticybersquatting Consumer Protection Act, codified at Section 43(d) of the Lanham Act, 15 U.S.C. § 1125(d), provides a federal cause of action with real teeth. Congress passed the ACPA in 1999 precisely because the older doctrines of infringement and dilution fit cybersquatting poorly: a parked domain often involves no "use in commerce" of the kind those doctrines require.

Courts describe the elements somewhat differently, but every court requires the plaintiff to show that (1) it owns a mark that was distinctive or famous as of the date the challenged domain name was registered; (2) the defendant registered, trafficked in, or used the domain name; (3) the domain name is identical or confusingly similar to, or dilutive of, the plaintiff's mark; and (4) the defendant acted with a bad-faith intent to profit from the mark. See DaimlerChrysler v. The Net Inc., 388 F.3d 201, 204 (6th Cir. 2004); 15 U.S.C. § 1125(d)(1)(A).

The heart of an ACPA case is bad faith, and Congress did not leave courts to guess at it. Section 1125(d)(1)(B)(i) lists nine non-exclusive factors that courts weigh, including: the defendant's trademark or other intellectual-property rights, if any, in the domain name; whether the domain name consists of the defendant's own legal name or a nickname; the defendant's prior use of the domain name in connection with a bona fide offering of goods or services; any bona fide noncommercial or fair use of the mark on the site; the defendant's intent to divert consumers in a way that could harm the mark's goodwill, either for commercial gain or to tarnish the mark; the defendant's offer to sell the domain name without having used it for a bona fide purpose; the defendant's provision of false or misleading contact information when registering; the defendant's registration of multiple domain names known to be confusingly similar to others' marks; and the extent to which the mark is distinctive or famous. The statute also includes a safe harbor: bad faith "shall not be found in any case in which the court determines that the person believed and had reasonable grounds to believe that the use of the domain name was a fair use or otherwise lawful." 15 U.S.C. § 1125(d)(1)(B)(ii). The leading early case interpreting these factors, Sporty's Farm L.L.C. v. Sportsman's Market, Inc., 202 F.3d 489 (2d Cir. 2000), cautioned that the factors are a guide, not a scorecard, and that the ultimate question is the defendant's intent — a point courts have repeated ever since.

The ACPA's remedies are what make it attractive. A successful plaintiff can win an injunction and transfer or cancellation of the domain, and — uniquely — can elect statutory damages of between $1,000 and $100,000 per domain name, as the court considers just, under 15 U.S.C. § 1117(d). That election spares the plaintiff from having to prove actual damages, which are often impossible to quantify in a parking case, and it makes serial squatting genuinely expensive: a defendant who registered Acme's mark across a dozen TLDs faces exposure that scales with the count of domains rather than with any demonstrable harm.

Two further features deserve mention. First, when the squatter cannot be found or is overseas — common, since registrants often hide behind privacy services or supply false WHOIS data — the ACPA authorizes an in rem action against the domain name itself in the judicial district where the registrar, registry, or other domain-name authority is located. 15 U.S.C. § 1125(d)(2). The catch is that in rem actions yield only transfer or cancellation, not monetary relief. Second, the difficulty of identifying registrants has grown since the EU's General Data Protection Regulation (GDPR) prompted registrars to redact WHOIS data in 2018; brand owners now frequently must sue a "John Doe" and serve a subpoena on the registrar to unmask the registrant, sometimes via a motion for expedited discovery before the Rule 26(f) conference. ICANN's evolving access regimes have not fully solved the problem.

A final caution cuts the other way. The ACPA forbids reverse domain name hijacking — the abuse of these mechanisms by a trademark owner to seize a domain from a legitimate holder — and provides a domain registrant who has been wrongly stripped of a name a cause of action to recover it, including against a complainant who used the UDRP in bad faith. 15 U.S.C. § 1114(2)(D)(iv)–(v). And courts have repeatedly held that registrars and registries are generally not proper defendants absent their own bad faith. See Rigsby v. GoDaddy Inc., 59 F.4th 998 (9th Cir. 2023); Petroliam Nasional Berhad v. GoDaddy.com, Inc., 737 F.3d 546 (9th Cir. 2013) (no contributory cybersquatting liability against a registrar for merely providing registration services). The lesson is to aim enforcement at the squatter and the registrant of record, not at the infrastructure providers.

Choosing Between Them

The practical default is to start with the UDRP for clear-cut squatting where recovering the domain is the only objective, because it is fast and cheap. Reserve the ACPA for cases involving serial squatters, demonstrable monetary harm, the need for damages to deter, registrants who will not be deterred by a mere transfer, or registrants who are anonymous and must be reached in rem. The two are not mutually exclusive — a brand owner can litigate the ACPA in court while a UDRP transfer is otherwise tied up, and the ACPA can even be used to challenge an adverse UDRP decision — but they should be sequenced deliberately as part of an overall strategy, not fired off reflexively. A measured first move in many cases is a cease-and-desist demand to the registrant; on drafting one that is firm but proportionate, see Drafting a Trademark Cease and Desist Letter and the general primer Writing a Demand Letter Basics.

Confusion in the Search Engine: Keyword Advertising and Metatags

Long before counterfeiters and squatters dominated the docket, the most heavily litigated online trademark issue was the use of someone else's mark to capture search traffic. Two practices dominate: metatags and keyword advertising.

Metatags and the Initial Interest Confusion Doctrine

A metatag is hidden code in a web page that historically helped search engines categorize the page. In the early internet, a competitor might bury a rival's trademark in its metatags so that searches for the rival would surface the competitor's site. The leading case, Brookfield Communications, Inc. v. West Coast Entertainment Corp., 174 F.3d 1036 (9th Cir. 1999), held that such use could constitute infringement under an "initial interest confusion" theory — the idea that even confusion that is dispelled before any sale can be actionable because it improperly captures the consumer's initial attention and trades on the goodwill the mark owner built. The court's much-quoted billboard analogy compared the practice to posting a sign on the highway advertising a competitor's store at an exit where the trademark owner's store actually sits. Metatag litigation has faded as search engines stopped relying on keyword metatags, but the initial-interest-confusion doctrine it generated remains influential and contested — some circuits apply it cautiously, wary that it can sweep in ordinary comparative advertising — and it carries directly into the keyword-advertising context.

Keyword Advertising

Keyword advertising is the practice, central to search-engine business models, of selling advertisers the right to have their ads displayed when a user searches for a particular term — including a competitor's trademark. If a user searches "Acme tents," a competitor may have purchased "Acme" so that its own ad appears, labeled as a sponsored result, above or beside the natural results. Brand owners have long argued that selling and buying their marks this way is trademark infringement.

The courts have largely sided with the search engines and, in many cases, with the advertisers — but not categorically. Two questions recur. First, is there a "use in commerce" of the mark at all when it is merely an invisible trigger? The Second Circuit answered yes in Rescuecom Corp. v. Google Inc., 562 F.3d 123 (2d Cir. 2009), allowing such claims past the pleadings and rejecting the argument that an internal, unseen use of the mark falls outside the Lanham Act. Second, and decisively, is there a likelihood of confusion? The Fourth Circuit's pivotal decision in Rosetta Stone Ltd. v. Google, Inc., 676 F.3d 144 (4th Cir. 2012), held that the mere sale of a mark as a keyword does not automatically infringe, but vacated summary judgment for Google because there was evidence — including survey and anecdotal proof of actual confusion, internal Google studies, and the use of marks within the text of competitors' ads — that could let a jury find confusion.

The practical synthesis that emerged, summarized well in the post-Rosetta Stone commentary, is this: keyword-advertising suits are most likely to succeed when both (1) the defendant is a competitor or a vendor of counterfeit goods rather than a neutral search-engine intermediary, and (2) the keyword advertising is bound up with other conduct already found infringing, such as ad copy that uses the mark deceptively or the sale of counterfeits. Conversely, claims tend to fail against legitimate search engines that display sponsored links in an area segregated from the natural results and clearly labeled as advertising, because the labeling and separation cut against any finding of confusion. Brand owners who want to police keyword abuse should focus enforcement on the strong cases — competitors and counterfeiters whose ad text uses the mark — rather than chasing every advertiser who merely bids on the term, and should remember that the search platforms maintain their own trademark complaint procedures that are often faster than litigation.

A related safe harbor is nominative fair use — the use of a mark to refer to the trademark owner's own product, as a reseller or a comparative advertiser legitimately must. Telling consumers truthfully that you repair Acme tents, or that your product is compatible with Acme gear, is generally permissible so long as you use no more of the mark than necessary and do not imply sponsorship or endorsement. The line between lawful comparative reference and unlawful trading on goodwill is the crux of most keyword disputes, and it reappears below in the gray-market and gripe-site contexts.

The Counterfeiting Battlefield

Counterfeiting is the most damaging online brand threat for most consumer-products companies, and the law gives brand owners an unusually powerful arsenal — but using it effectively requires combining litigation tools with marketplace programs and customs enforcement into a single, coordinated, and global program.

What Counts as a Counterfeit

The Lanham Act draws a precise and consequential distinction. A "counterfeit" is "a spurious mark which is identical with, or substantially indistinguishable from, a registered mark." 15 U.S.C. § 1127. A narrower term, "counterfeit mark," is defined in 15 U.S.C. § 1116(d) to require that the brand owner's mark be registered on the Principal Register, in use, and registered for the very goods or services on which the counterfeit appears. The distinction matters because the Lanham Act's most extraordinary remedies — ex parte seizure orders, treble damages, and statutory damages — are available only for "counterfeit marks," not for ordinary infringement. The criminal counterfeiting statute, 18 U.S.C. § 2320, uses a parallel definition.

Counterfeiting is not limited to literal reproductions of a logo. Courts have found counterfeiting where defendants refilled genuine containers with non-genuine product (United States v. Petrosian, 126 F.3d 1232 (9th Cir. 1997), involving refilled Coca-Cola bottles), sold reconditioned goods under original labels without disclosure (Westinghouse Electric Corp. v. General Circuit Breaker & Electric Supply, Inc., 106 F.3d 894 (9th Cir. 1997)), and repaired goods with unauthorized parts so that the original marks became counterfeit (Rolex Watch, U.S.A., Inc. v. Michel Co., 179 F.3d 704 (9th Cir. 1999)). And while the civil statute once left a gap for sellers of standalone counterfeit labels not yet affixed to goods, the criminal Stop Counterfeiting in Manufactured Goods Act of 2006 closed that loophole by reaching trafficking in labels, stickers, packaging, and the like, and brand owners can reach label-sellers civilly through contributory infringement.

Civil Litigation and Its Extraordinary Remedies

The three federal civil theories against counterfeiters are the familiar Lanham Act claims: infringement of a registered mark under Section 32 (15 U.S.C. § 1114), unfair competition under Section 43(a) (15 U.S.C. § 1125(a)), and dilution under Section 43(c) (15 U.S.C. § 1125(c)), the last of which is especially useful because counterfeiters target famous marks and may put them on goods outside the owner's registrations.

What sets counterfeiting litigation apart is the remedy menu. Under 15 U.S.C. § 1117(b), a court must award treble damages or profits plus attorney's fees for intentional use of a counterfeit mark, absent extenuating circumstances. Alternatively, under § 1117(c), the plaintiff may elect statutory damages ranging from $1,000 to $200,000 per counterfeit mark per type of goods, rising to up to $2,000,000 per mark for willful counterfeiting — a number that, as with the ACPA, frees the plaintiff from proving actual loss and supplies powerful deterrence. And under Section 34(d), 15 U.S.C. § 1116(d), a court may issue an ex parte seizure order — authorizing seizure of counterfeit goods, the means of making them, and related business records without prior notice to the defendant — a drastic remedy reserved for cases where the plaintiff shows that notice would prompt the defendant to hide or destroy evidence.

These remedies matter enormously against online sellers, who are often numerous, anonymous, judgment-proof individually, and quick to disappear. A common litigation strategy is to file suit against a large group of "Doe" defendants operating storefronts on a marketplace, obtain a temporary restraining order, asset freeze, and expedited discovery, serve through electronic means and on the marketplace and the payment processors, and recover statutory damages from frozen PayPal, Amazon, or Alipay accounts — the so-called "Schedule A" or multi-defendant counterfeiting action that has become a fixture of the Northern District of Illinois and other districts. These cases let a brand owner reach dozens or hundreds of overseas sellers in a single proceeding, but they have drawn judicial scrutiny over joinder, personal jurisdiction, and the proportionality of asset freezes, so they must be pleaded carefully and supported with evidence tying each defendant to U.S. sales.

Marketplace Programs: Amazon Brand Registry and Beyond

For most brand owners, the first and most cost-effective line of defense against online counterfeits is not the courthouse but the marketplace's own brand-protection program. These are private, contractual systems, but they reach counterfeit listings faster and cheaper than any legal process, and they operate at the scale of the problem.

Amazon Brand Registry is the most prominent. Enrollment requires a registered (or, in some regions, a pending) trademark and gives the brand owner access to a suite of tools: a streamlined process for reporting infringing or counterfeit listings; Project Zero, which couples Amazon's automated counterfeit-detection scanning with a self-service tool that lets enrolled brands remove counterfeit listings directly without waiting for Amazon to act; Transparency, a serialization program in which each authentic unit carries a unique code that Amazon scans before shipment so that uncoded units are intercepted; and the Counterfeit Crimes Unit, through which Amazon partners with brands and law enforcement to pursue counterfeiters in court. Other marketplaces — eBay's VeRO (Verified Rights Owner) program, Walmart Marketplace, Etsy, Alibaba's IP Protection Platform, and major social-commerce platforms — operate analogous notice-and-takedown systems.

The strategic point is that these programs are a brand owner's highest-leverage tool: they are free or low-cost, they operate continuously and at scale, and they reach conduct (such as listings by overseas sellers) that litigation can address only with great difficulty and expense. Enrolling in them and feeding them disciplined, well-documented reports should be the backbone of any consumer-products brand's online program. Their limits are equally important to understand: they are governed by the marketplace's terms of service, not by law; takedowns can be reversed on the seller's appeal; and an aggressive or careless campaign can draw a counter-notice, a seller's claim that the brand owner submitted bad-faith reports, or even suspension of the brand's own reporting privileges. Reports must be accurate and substantiated, which is why a disciplined authentication process (below) is not a nicety but a prerequisite.

The Tariff Act and Customs Seizures

A distinct and powerful tool addresses counterfeits at the point of importation — ideally before they ever reach a U.S. consumer. U.S. Customs and Border Protection (CBP) is empowered under the Tariff Act of 1930 to seize and forfeit imported goods bearing counterfeit marks (19 U.S.C. § 1526; see also 15 U.S.C. § 1124). The gateway to this protection is recordation: a brand owner that has a federally registered mark may record it with CBP through the agency's online Intellectual Property Rights e-Recordation (IPRR) system for a modest per-mark fee. Once a mark is recorded, CBP's officers at ports of entry can detain, seize, and ultimately destroy shipments of counterfeit goods bearing that mark, and CBP will provide the brand owner with information about seizures — including, in many cases, the importer and the quantity — to support follow-on enforcement.

Recordation costs little and can stop counterfeits before they enter the stream of commerce, which is why it belongs in every product brand's program. Crucially, recordation is only the first step. As the anti-counterfeiting practice materials emphasize, brand owners that go further — supplying CBP with product-identification guides, authentication criteria, and training — often see significant increases in seizures, because front-line officers cannot interdict what they cannot recognize. Recordations should be audited periodically to confirm they remain current and cover the goods where problems are emerging. The customs relationship dovetails with the marketplace and litigation tools: seizure data feeds the brand's centralized database of sellers and sources, and an interdicted importer is a strong candidate for a Schedule A suit or criminal referral.

Criminal Referral

Finally, trafficking in counterfeit goods is a federal crime under 18 U.S.C. § 2320, carrying substantial prison terms and fines, with enhanced penalties where the counterfeits are drugs, military goods, or other products that endanger public safety. Brand owners cannot prosecute, but they can refer matters to CBP, Homeland Security Investigations (HSI), the FBI, and the Department of Justice, and a well-documented brand — one that can hand investigators a clean evidentiary package, a chain-of-custody record, and an authentication declaration — materially increases the odds that a referral is taken up. Criminal referral is the right tool for organized, large-scale counterfeiting rings that civil litigation alone cannot deter.

Gray Market Goods: Genuine, but Not Authorized

Not every unauthorized online seller is a counterfeiter. Gray market goods (also called parallel imports) are genuine branded products that were manufactured for, or first sold in, a foreign market and then imported into the United States outside the brand owner's authorized distribution channel. A retailer who buys authentic Acme jackets cheaply abroad and resells them online in the United States is dealing in gray-market goods. The products are real, so a simple "counterfeit" theory fails — yet the brand owner is often harmed, because the gray-market goods may carry different warranties, lack U.S.-required labeling, undercut authorized dealers' pricing, or differ materially from the U.S. version.

The First-Sale Doctrine and Its Exceptions

The legal treatment turns on the doctrine of trademark exhaustion — the first-sale doctrine. Trademark owners have the right to control the nature and quality of goods bearing their marks and therefore may control the first authorized sale of a product; but once they authorize that sale, they generally cannot use trademark law to control the product's downstream resale, because the mark then accurately tells the buyer it is receiving a genuine article. See El Greco Leather Products Co. v. Shoe World, Inc., 806 F.2d 392, 395 (2d Cir. 1986); Sebastian International, Inc. v. Longs Drug Stores Corp., 53 F.3d 1073, 1074 (9th Cir. 1995). The defense, however, has well-developed exceptions, and the governing question in every gray-market case is the same as in all infringement litigation: likelihood of confusion — whether something about the defendant's goods or conduct is likely to confuse consumers about what they are buying. See Am. Circuit Breaker Corp. v. Or. Breakers Inc., 406 F.3d 577, 584 (9th Cir. 2005).

Two exceptions do most of the work for brand owners. First is the material differences exception: where gray-market goods differ materially from the authorized U.S. version — in warranty coverage, ingredients, packaging, language, quality-control standards, or labeling — their sale can constitute infringement, because consumers are deceived about the nature of what they are buying. The threshold for "material" is deliberately low: any difference that consumers would likely consider relevant to a purchasing decision can qualify, including the absence of a U.S. warranty, a different formulation, or even a missing or altered lot-tracking code. The second, related exception is the quality-control exception: a reseller who interferes with or bypasses the trademark owner's legitimate, substantial, and non-pretextual quality-control measures — for example, by removing batch codes that enable recalls, or by selling product that never passed the owner's inspection regime — sells goods that are deemed non-genuine even if physically identical, because the mark no longer guarantees the controlled quality consumers expect. See Zino Davidoff SA v. CVS Corp., 571 F.3d 238, 243 (2d Cir. 2009) (removal of unique production codes that supported anti-counterfeiting and recall efforts defeated the first-sale defense). The doctrine reflects a settled principle: a defendant cannot strip away the very controls that make a branded good trustworthy and still claim it is selling the "genuine" article.

The customs and statutory backdrop completes the picture. The Supreme Court's decision in K Mart Corp. v. Cartier, Inc., 486 U.S. 281 (1988), upheld CBP's authority to bar some — but not all — gray-market imports and mapped out the affiliate and common-control exceptions to that authority. And the "Lever rule," from Lever Brothers Co. v. United States, 877 F.2d 101 (D.C. Cir. 1989), now reflected in CBP regulations at 19 C.F.R. § 133.23, lets a brand owner block the importation of materially different goods even where the foreign and domestic producers are affiliated, provided the owner records the mark and the material differences with CBP. See also Iberia Foods Corp. v. Romeo, 150 F.3d 298 (3d Cir. 1998).

The Gray-Market Playbook

For Acme, the practical playbook against gray-market sellers is to (1) document the material differences between its authorized U.S. goods and the gray-market versions, and document its quality-control regime in enough detail to show it is substantial and uniformly enforced; (2) record the differences and the prohibition with CBP where the affiliate/common-control framework allows, and pursue the Lever-rule remedy at the border; (3) enforce contractual distribution restrictions against its own authorized dealers who divert product, since diversion frequently begins inside the authorized channel; and (4) use marketplace programs to remove listings that mislead consumers about warranty or authorization. Gray-market enforcement is doctrinally trickier than counterfeiting because the goods are genuine, so it rewards careful factual development of the differences — a vague assertion that "these aren't our authorized goods" will lose, while a side-by-side showing of a missing U.S. warranty, a foreign-language safety insert, and a stripped lot code will usually win.

Copyright's Online Tool: DMCA Notice-and-Takedown

Trademark is not the only weapon. When an infringing online listing copies a brand's original creative content — its product photographs, its marketing copy, its videos, its website design — the brand owner can invoke copyright through the notice-and-takedown procedure of the Digital Millennium Copyright Act (DMCA), 17 U.S.C. § 512.

The DMCA creates a "safe harbor" that shields online service providers (marketplaces, social platforms, hosts) from monetary liability for user-posted infringement provided they meet conditions including expeditiously removing infringing material when they receive a proper notice and lack actual or "red flag" knowledge of the infringement. The practical consequence is that a copyright owner can force the removal of infringing content by sending a compliant takedown notice under § 512(c)(3), identifying the copyrighted work, identifying and locating the infringing material, providing contact information, and including the required statements — a good-faith belief that the use is unauthorized, and a statement under penalty of perjury that the notifier is authorized to act. Because counterfeit and gray-market listings frequently steal the brand's own product images to look authentic, a DMCA notice targeting those images is often a faster and surer route to removal than a trademark complaint — the copyright infringement is usually obvious on its face (the listing uses the brand's exact photograph), whereas confusion can require argument.

Two cautions apply. First, the DMCA is for copyright, not trademark; a notice that mischaracterizes a trademark grievance as copyright infringement is improper and can backfire. Second, the statute is symmetric: the alleged infringer can file a counter-notification under § 512(g), and the platform must then restore the content within ten to fourteen business days unless the copyright owner files suit. And the sender of a takedown notice must, under § 512(f) and the Ninth Circuit's decision in Lenz v. Universal Music Corp., 815 F.3d 1145 (9th Cir. 2016), form a subjective good-faith belief that the use is not authorized and is not a fair use before sending — a knowingly material misrepresentation exposes the sender to liability for the target's damages. Our dedicated guide, How to File a DMCA Takedown Notice and Respond to One, walks through both sides of the process, and How to Register a Copyright With the US Copyright Office explains how to secure the registrations that make a copyright owner's position strongest if litigation follows.

Social Media Impersonation and Brand Abuse

Social media presents brand threats that the trademark and copyright frameworks address only awkwardly. The common scenarios include impersonation accounts that pose as the brand or its executives (often to run scams or phishing); fake customer-service accounts that intercept complaints to defraud customers; counterfeit storefronts advertised through social commerce; and handle squatting, where someone registers the brand's name as a username before the brand does.

The primary remedy here is usually not litigation but the platform's own reporting tools. Every major platform — Meta's properties, X, TikTok, YouTube, LinkedIn, Pinterest — maintains both a trademark complaint channel and an impersonation/safety channel, and the impersonation channel is often faster because platforms treat impersonation as a community-standards violation that does not require the brand to prove the elements of infringement. Many platforms also offer verification badges and brand-rights manager tools that, like Amazon Brand Registry, give enrolled brands streamlined enforcement. For the broader regulatory environment of these platforms, see Social Media Law Basics.

Where platform tools fail, the legal theories are the familiar ones — Lanham Act § 43(a) for false designation of origin and false endorsement, dilution under § 43(c) for famous marks, and, where a real person's identity is misused, the right of publicity and state impersonation statutes (see Right of Publicity Basics). The right-of-publicity dimension is increasingly important as AI-generated impersonations proliferate; see The Right of Publicity Meets Digital Doubles--Deepfakes, AI Avatars, and Celebrity Likeness. Unmasking an anonymous impersonator typically requires a "John Doe" suit and a subpoena to the platform, and platform immunity under Section 230 of the Communications Decency Act, 47 U.S.C. § 230, will usually bar claims against the platform itself for a user's conduct — though Section 230(e)(2) does not bar federal intellectual property claims, an important carve-out (whose scope is contested for state-law IP claims) explored in Section 230 Reform and Platform Liability for User-Generated IP Infringement.

A practical defensive measure deserves emphasis: brands should proactively register their handles on every significant platform, even those they do not actively use, precisely to prevent handle-squatting. Like defensive domain registration, it is far cheaper than recovery after the fact.

Online Reputation and the Limits of Defamation Law

Brand owners often want to treat negative reviews, critical commentary, and "gripe sites" as brand attacks, and they ask whether the law can compel their removal. Usually it cannot, and understanding why prevents costly and counterproductive missteps.

First, trademark law does not reach criticism. Using a brand's name to identify the brand one is criticizing is classic nominative fair use and is also protected expression under the First Amendment. A site at acmegearsucks.com that genuinely criticizes Acme is, in most circumstances, neither infringement nor cybersquatting, because the criticism is noncommercial and there is no bad-faith intent to profit. Courts have repeatedly protected such "gripe sites." See Bosley Medical Institute, Inc. v. Kremer, 403 F.3d 672 (9th Cir. 2005) (noncommercial gripe site not actionable under the Lanham Act or the ACPA); Lamparello v. Falwell, 420 F.3d 309 (4th Cir. 2005) (no likelihood of confusion or bad-faith intent to profit where a domain hosted criticism).

Second, defamation law reaches only false statements of fact — not opinion, and not true statements, however damaging. A reviewer who writes "Acme's tent leaked in the rain" states a fact that, if true, is not actionable, and if it is an honest account of the reviewer's experience, is generally protected even if mistaken about a non-defamatory detail. Pure opinions — "I think Acme's products are overpriced" — are categorically protected. And Section 230 immunizes the platforms that host reviews from liability for what their users write, so a brand cannot force a review site to remove a user's post by suing the site.

Third, brand owners should be wary of the Streisand effect — the tendency of heavy-handed legal threats over online criticism to amplify the very content the brand wanted buried — and of anti-SLAPP statutes, which in many states allow a critic hit with a meritless defamation suit to obtain early dismissal and recover attorney's fees. The federal Consumer Review Fairness Act, 15 U.S.C. § 45b, goes further and voids contract clauses that purport to penalize customers for honest reviews, and exposes businesses that use such clauses to FTC enforcement.

The realistic conclusion is that online reputation is managed, not litigated. The right responses to negative content are operational: monitor mentions, respond promptly and professionally to legitimate complaints, encourage satisfied customers to leave reviews, and reserve legal action for the narrow categories the law actually reaches — provably false factual statements that cause real harm, accounts that impersonate rather than criticize, and content that crosses into trademark infringement or counterfeiting.

Building a Practical Monitoring and Enforcement Program

The doctrines above are only as good as the program that puts them to work. A brand owner that registers its marks and then waits for infringement to find it will be perpetually behind. The following is a repeatable program, organized as a cycle of prevent, monitor, triage, enforce, and measure, illustrated with Acme. A recurring theme, drawn from the anti-counterfeiting practice literature, is that the program should be centralized and global: counterfeiting and online infringement are borderless, and a brand that centralizes instruction, coordination, and recordkeeping can allocate resources where needed, pursue wrongdoers across borders, and accumulate the know-how that scattered, reactive enforcement never builds.

Prevent

Prevention is the cheapest enforcement. Acme should register its core marks in all relevant classes (including software and virtual goods if its expansion is foreseeable); record those marks with CBP and audit the recordations periodically; defensively register the most important domain variations and the obvious typo-squats, along with key new gTLDs; register its handles on every significant social platform; enroll in Amazon Brand Registry and the analogous programs of every marketplace where it sells; and — critically — build the documentary infrastructure that enforcement requires. That infrastructure includes high-quality images of genuine products, written authentication guides that let employees, customs officers, and law enforcement distinguish genuine from fake, serialization or coding where feasible, a current schedule of authorized sellers, and a clear record of which marks are registered where.

Monitor

Monitoring should be systematic and channel-specific rather than ad hoc. Acme should deploy trademark watch services that flag new applications and registrations that may conflict with its marks (giving it the chance to oppose them at the USPTO's Trademark Trial and Appeal Board before they mature into registrations); domain monitoring that alerts it to newly registered domains incorporating its marks; marketplace monitoring for unauthorized and counterfeit listings; search and keyword monitoring to catch competitors bidding on its marks and to find listings in paid results; social-media listening for impersonation accounts and brand mentions; and image monitoring (reverse-image search) to find listings that have scraped its product photos. The goal is a single intake stream feeding a centralized, searchable database of sellers, sources, and actions taken, so that nothing discovered slips through the cracks and repeat offenders are recognized on sight.

Triage

Not every hit warrants the same response, and treating them uniformly wastes resources and invites overreach. Acme should triage by harm and provability: a counterfeit listing selling unsafe goods is a top priority; a parked typo-squat is a low-cost UDRP candidate; a competitor's keyword bid with clean, clearly labeled ad copy may not be worth pursuing at all; a negative but honest review is a customer-service matter, not a legal one. A useful framework asks, for each item: Is the conduct actually unlawful, or merely annoying? How much harm does it cause? How provable is it? And what is the cheapest tool that will fix it? Disciplined triage prevents the two classic failures — ignoring serious infringement and over-enforcing against protected speech or legitimate competition (which invites anti-SLAPP, § 512(f), and bad-faith-takedown blowback).

Enforce — The Escalation Ladder

Enforcement should climb a deliberate ladder, using the cheapest effective tool first and escalating only as needed:

  1. Platform/marketplace takedown. For counterfeit and infringing listings and impersonation accounts, the marketplace or platform reporting tool is almost always the first and best step — fast, free or cheap, and scalable.
  2. DMCA notice. Where the listing copies Acme's images or copy, a § 512 notice is often the surest removal route because the copying is plain on its face.
  3. Cease-and-desist letter. For identifiable infringers with something to lose, a well-drafted demand letter resolves many disputes without litigation. It should be firm but proportionate; an overbroad threat against protected speech or fair use can backfire and trigger an anti-SLAPP or declaratory-judgment response. See Drafting a Trademark Cease and Desist Letter; and for the recipient's perspective, Responding to a Trademark Cease and Desist Letter.
  4. UDRP/URS. For domain squatting where transfer (or, for URS, suspension) is the goal, the administrative route is fast and cost-effective.
  5. Customs enforcement. For imported counterfeits, a recorded mark plus active CBP coordination and training interdicts goods before they reach consumers.
  6. Litigation. For serial infringers, large-scale counterfeiting rings, gray-market sellers requiring proof of material differences, cases where damages and deterrence are needed, and anyone who ignores the lower rungs, federal suit under the Lanham Act and ACPA — with their treble and statutory damages, attorney's fees, asset freezes, and ex parte seizures — is the apex civil tool.
  7. Criminal referral. For organized counterfeiting that civil remedies cannot deter, referral to CBP, HSI, the FBI, and DOJ brings the weight of 18 U.S.C. § 2320.

Measure and Repeat

Finally, a program should measure its own effectiveness — counting listings removed, domains recovered, repeat-offender rates, seizure volumes, and time-to-takedown — and feed those metrics back into prevention and monitoring. Counterfeiting in particular is a game of whack-a-mole, and a program that does not track repeat offenders and adjust will spend forever removing the same seller's relisted goods. Tying the metrics to defined objectives, and coordinating activities globally, multiplies their effect: a centralized program that shares know-how across markets consistently outperforms scattered, reactive enforcement.

Worked Example: Acme's Bad Week

To tie the pieces together, suppose Acme discovers, in a single week, five problems. (This scenario is hypothetical.) A seller on a major marketplace is offering counterfeit Acme tents using Acme's own product photos. Someone has registered acme-gear-outlet.com and is running a phishing site that harvests Acme customers' login credentials. A competitor has bought "Acme" as a search keyword and its ad reads "Acme Tents — Official Store." An Instagram account named "Acme Gear Support" is intercepting customer complaints to run a refund scam. And a customer has posted a one-star review saying the tents leak.

Acme's response maps cleanly onto the program. The counterfeit listing gets a marketplace takedown report and a DMCA notice for the stolen photos, with the seller flagged for the Counterfeit Crimes Unit and, if the seller is a repeat offender importing from abroad, a CBP referral and a possible Schedule A suit drawing on seizure data and the company's authentication declaration. The phishing domain gets a UDRP complaint (or an ACPA suit if Acme wants damages and to deter what looks like a serial squatter, or an in rem action if the registrant is hidden behind a privacy service), plus an urgent abuse report to the registrar and host given the active phishing — credential theft is an emergency that the routine ladder should not slow down. The competitor's deceptive ad — which uses the mark in the ad text and falsely claims to be the "Official Store" — is a strong keyword case under Rosetta Stone because it pairs a competitor with deceptive ad copy, warranting a search-platform trademark complaint and a cease-and-desist letter, possibly suit. The impersonation account gets an impersonation report to Instagram (faster than a trademark complaint, because the platform need not adjudicate confusion) and, if it persists, a John Doe suit and subpoena to unmask and stop the operator. And the negative review gets no legal response at all — it is protected, the platform is immune under Section 230, and the right answer is a prompt, professional customer-service reply and, if the leak is a real defect, a product fix. The lesson of Acme's bad week is that a single intake, disciplined triage, and a tool-matched escalation ladder turn what looks like chaos into routine.

Key Takeaways

Brand protection online is a layered, ongoing program, not a one-time legal event. It rests on a foundation of federal trademark registration, which unlocks national rights and access to every meaningful enforcement channel. The Lanham Act supplies the core causes of action — infringement, unfair competition, and dilution — and its specialized provisions add the ACPA against cybersquatters (with statutory damages up to $100,000 per domain) and the counterfeiting remedies of treble and statutory damages, ex parte seizures, and attorney's fees (statutory damages up to $2,000,000 per mark for willful counterfeiting). The UDRP offers a fast, cheap route to recover squatted domains; marketplace programs like Amazon Brand Registry and CBP recordation under the Tariff Act stop counterfeits at scale and at the border; the DMCA removes listings that steal a brand's images; and platform reporting tools handle social-media impersonation. The law's limits are as important as its powers: keyword advertising and gripe sites are often lawful, gray-market goods require proof of material differences or interference with quality control, and honest criticism is protected by the First Amendment, Section 230, the Consumer Review Fairness Act, and anti-SLAPP statutes. The brands that succeed are those that prevent, monitor, triage, and enforce systematically — matching each threat to the cheapest tool that resolves it, escalating deliberately, and measuring the results.

Frequently Asked Questions

Do I have to register my trademark to protect my brand online? Not strictly — U.S. trademark rights arise from use — but federal registration is close to essential online. It provides nationwide rights, a presumption of validity, access to federal court and the Lanham Act's powerful remedies, and entry to UDRP proceedings, CBP recordation, and marketplace programs like Amazon Brand Registry. Begin by clearing and registering your core marks early; see How to File a Trademark Application With the USPTO.

Should I use the UDRP or sue under the ACPA to recover a domain name? Use the UDRP when your only goal is to recover the domain in a clear squatting case; it is fast (about two months) and inexpensive. Use the ACPA in federal court when you need monetary relief (statutory damages of $1,000–$100,000 per domain), face a serial squatter, want deterrence that a transfer will not provide, or must reach an anonymous registrant in rem. The two can be coordinated. See How to File a UDRP Complaint for Domain Name Disputes.

Can I stop a competitor from buying my trademark as a search keyword? Sometimes. The mere purchase of a keyword is usually lawful when the resulting ad is clearly labeled, segregated from natural results, and does not deceptively use your mark. It becomes actionable, under cases like Rosetta Stone v. Google, when a competitor or counterfeiter uses your mark in the ad text in a way that suggests sponsorship, or where there is evidence of actual consumer confusion — especially when the keyword advertising is tied to other infringing conduct. Focus enforcement on those strong cases.

What is the fastest way to remove a counterfeit listing? Usually the marketplace's own brand-protection program (such as Amazon Brand Registry, including Project Zero and Transparency, or eBay's VeRO). If the listing also copies your product photographs or copy, a DMCA takedown notice targeting that content is often even faster, because the copyright violation is obvious on its face. Keep your reports accurate and substantiated — careless or bad-faith reports can be reversed and can expose you to liability.

Are gray-market goods illegal? Not inherently. Gray-market goods are genuine products imported outside authorized channels, and the first-sale doctrine generally permits their resale. They become actionable when they differ materially from the authorized U.S. version — in warranty, packaging, ingredients, or quality control — or when the seller has interfered with your legitimate quality-control measures (for example, by stripping batch codes, as in Zino Davidoff v. CVS). The key is documenting the material differences and your quality-control regime; the controlling framework runs through K Mart v. Cartier and the Lever rule.

Can I force a website to take down a negative review or a "gripe site"? Almost never. Trademark law does not reach honest criticism (see Bosley and Lamparello), defamation law reaches only false statements of fact (not opinion or true statements), and Section 230 immunizes the platforms that host reviews. Aggressive legal threats often backfire through the Streisand effect and anti-SLAPP statutes, and the Consumer Review Fairness Act voids clauses penalizing honest reviews. Manage reputation operationally; reserve legal action for genuine impersonation, counterfeiting, or provably false factual statements that cause real harm.

Related Articles

This article is provided for general informational purposes only and does not constitute legal advice. The law in this area is complex, fact-specific, and subject to change, and nothing here creates an attorney-client relationship. Readers facing an actual brand-protection or trademark matter should consult qualified intellectual property counsel about their specific circumstances.