The short answer is yes — but there's a line between legal domain investing and something that can get you sued. Here's exactly where that line is.
Domain flipping — buying domain names and selling them for a profit — has been a legitimate business since the mid-1990s. People have made millions doing it. Companies like domain brokers, registrars, and aftermarket platforms like Sedo and Afternic exist specifically to facilitate this. It's not a grey area in the way people often assume.
The confusion usually comes from conflating domain flipping with cybersquatting, which are different things — and one of them is genuinely illegal. Understanding the difference is the whole game if you want to flip domains without legal risk.
A domain name, legally speaking, is a licensed right to use a specific internet address for a specific period — not intellectual property in the way a patent or trademark is. You're not buying ownership of a word or phrase, you're buying the right to use a particular .com, .net, or other extension address for as long as you keep paying renewal fees.
Buying that right and reselling it to someone else is completely legitimate. If you register "bestcoffeegear.com" today because you think someone in the coffee equipment space will eventually want it, and later sell it to them for a profit — that's legal domain investing. The seller wanted a domain. You had it. You sold it. Standard transaction.
Registering generic descriptive domains ("bestrunningshoes.com"), buying expired domains with existing traffic, acquiring short memorable domains before demand builds, reselling domains to businesses in relevant industries at market rates.
The specific thing that's illegal is cybersquatting — and it has a precise legal definition. The Anticybersquatting Consumer Protection Act (ACPA) in the US, and similar laws in other countries, define cybersquatting as registering, trafficking in, or using a domain name with bad faith intent to profit from someone else's trademark.
Three things have to be true for it to be cybersquatting: the domain has to be identical or confusingly similar to a trademark, the trademark has to belong to someone else, and you have to be acting in bad faith — specifically, intending to profit from the trademark holder's goodwill rather than from the domain's generic or descriptive value.
Registering "nike-sneakers.com" to sell to Nike under threat. Buying "tesla-models.com" specifically because Tesla is a famous brand. Registering a celebrity's name as a domain to demand payment. Registering "mcdonalds-menu.com" to redirect to a competitor or ransom to McDonald's.
Registering domains that are similar to but not identical to trademarks, or domains that combine a trademark with a generic word. These cases often end up in UDRP (Uniform Domain-Name Dispute-Resolution Policy) arbitration, where trademark holders have significant power even when cybersquatting isn't technically provable. Winning is possible but costly.
The key word in cybersquatting law is "bad faith." Courts and UDRP arbitrators look at a set of factors to determine whether bad faith is present — things like whether you've offered to sell the domain to the trademark holder for a price way above registration cost, whether you've registered multiple domains containing famous trademarks, whether you've diverted traffic from the trademark holder's site, and whether you provided false contact information when registering.
If you register "bluemountaincoffee.com" because you like the name and want to build a coffee blog — no bad faith, completely fine. If you register it immediately after a new coffee chain called Blue Mountain Coffee opens locations and then email them demanding $50,000 — that's bad faith, and it's exactly what the law was designed to stop.
The safest domain flipping strategy focuses on generic, descriptive, or creative domains rather than anything that incorporates existing brand names. Short, memorable .com domains with clear industry relevance ("homesecurity.com", "petinsurance.com", "legaladvice.com" — all of which have sold for massive amounts) are the classic domain investor play. No trademark issues, clear value, willing buyers.
If you're in doubt about whether a domain you're considering registering might infringe on a trademark, run a quick search on the USPTO trademark database (in the US) or your country's equivalent before registering. It takes five minutes and saves significant potential headaches.
Domain flipping is legal. It has been legal for 30 years and there's a thriving legitimate industry around it. The illegal version — cybersquatting — requires deliberate bad faith intent to profit from someone else's trademark, which is a specific thing that most domain investors are nowhere near. Buy generic domains, sell them to willing buyers, repeat. That's the whole legal game.
Buying and selling established websites with real traffic and revenue is a related but more predictable business — here's how it works.
Read the buyer's guide →