By Steve Levy
Law firms spend much of their time helping clients protect brands, enforce rights, and respond to online impersonation. It is easy to forget that law firms can also be brand owners with their own reputations to safeguard. A recent decision under the UDRP illustrates this point with unusual clarity. An intellectual property law firm found itself the target of a domain name registration designed to facilitate a fraudulent email scheme.
The disputed domain name, gtt-law.com, incorporated the firm’s GT mark with only minor alterations. The panel noted that the addition of an extra letter and the word “law” did nothing to dispel confusion, especially since it’s so close to the firm’s official website and email addresses. The registrant used the disputed domain to create email addresses that impersonated actual lawyers at the firm. These addresses were then used to contact clients and attempt to redirect payments to the Registrant’s bank account. The panel described this conduct as identity theft and found clear evidence of bad faith.
What makes this case particularly noteworthy is that the firm represented itself and did not retain an outside UDRP specialist. Although the firm prevailed, this approach can be risky for most legal disputes. Even sophisticated law firms benefit from independent and experienced representation when they become parties to a proceeding. An outside UDRP specialist provides objectivity, deep experience reducing the risk of strategic blind spots, and it ensures that the matter receives focused attention rather than competing with internal workloads. Self-representation can also create awkward dynamics when the dispute touches on internal operations, branding, or client relationships. Of course, the outcome doesn’t always go the firm’s way and its thinking in approaching a dispute can sometimes be blurred by the emotional aspect of being targeted (see an earlier decision in which a law firm failed to prove that it owned trademark rights in the name of one of its partners).
The case also highlights a broader reality. Law firms are attractive targets for cybersquatting and phishing because they handle sensitive information and financial transactions. Their names carry authority, and clients often trust communications that appear to come from them. A fraudulent email sent from a lookalike domain can cause significant harm before anyone realizes what has happened. Even firms with strong internal security practices must remain vigilant about external threats that exploit their brand.
This decision is a reminder that law firms are not only advisors but also stakeholders in the digital landscape and are their own IP assets have been the subject of cybersquatting attack. Their trademarks, domain names, and reputations are valuable assets that require active protection and the wisdom of hiring experienced and objective outside professionals applies equally to law firms themselves.