Cybersquatting in Nigeria: Is Buying Dangote.com Legal?

📑 Table of Contents

• The Million-Dollar Domain Arbitrage Illusion
• The Anatomy of a Cybersquatting Trap: The Hostage Domain
• The Legal Reality: Nigerian Statutory Framework vs. Cybersquatting
• 1. Section 25 of the Cybercrimes Act 2015
• 2. The Trademarks Act and Passing Off
• Resolving International & Local Domain Disputes: UDRP and NiRA
• The Technical Founder’s Brand Defense Playbook
• Actionable Protective Steps for Startups

Executive Key Takeaways (TL;DR):

• Registering, trafficking in, or holding a domain matching a registered trademark like Dangote with bad-faith intent to profit is an outright criminal offense in Nigeria under Section 25 of the Cybercrimes Act.
• Offenders face up to 2 years imprisonment, a mandatory ₦5,000,000 fine, and involuntary forfeiture of the domain name to the rightful trademark owner.
• International domains (.com) are subject to ICANN's Uniform Domain-Name Dispute-Resolution Policy (UDRP), while .ng domains fall under NiRA's Dispute Resolution Policy (NDRP).
• Founders and engineers must pursue defensive domain acquisitions early across top TLDs to mitigate corporate extortion and brand hijacking.

The Million-Dollar Domain Arbitrage Illusion

Buying a domain name identical to a prominent enterprise like Dangote with the intent to resell it is illegal under Nigerian law. Under Section 25 of the Cybercrimes Act, acquiring domains containing established trademarks or personal names in bad faith triggers criminal penalties, statutory fines, and mandatory domain surrender.

Every aspiring digital broker has entertained the classic domain arbitrage fantasy: identify an unregistered corporate domain, purchase it for $10 on Namecheap or GoDaddy, and hold it hostage until a conglomerate writes a seven-figure check to buy it back. In the early days of the commercial internet, digital speculators made millions executing this playbook on global multinationals. Today, executing that strategy against a legacy enterprise or high-growth tech startup is the fastest route to federal indictment, mandatory asset forfeiture, and devastating civil liability.

The Anatomy of a Cybersquatting Trap: The Hostage Domain

Cybersquatting occurs when an individual registers, uses, or traffics in an internet domain name identical or confusingly similar to an existing trademark, company, or individual name to exploit its commercial goodwill or extort the rightful owner for profit.

Consider an ambitious Nigerian software developer who notices that a new multinational division—say, an export arm of the Dangote conglomerate—does not hold a specific top-level domain (TLD) or country-code top-level domain (ccTLD) like dangote-fertilizer.com or dangote.ng. The developer pays a registrar ₦15,000, sets up a landing page with parked pay-per-click ads targeting industrial buyers, and sends an unsolicited, high-stakes email to the corporate legal team: “I hold your digital asset. Let us negotiate a transfer fee of $150,000.”

Instead of receiving a wire transfer, the developer is served with a multi-pronged enforcement action: an emergency cease-and-desist letter, a WIPO administrative complaint under ICANN's dispute resolution rules, and an invitation for an interview with the Nigeria Police Force National Cybercrime Centre (NPF-NCCC). Far from securing venture capital or arbitrage wealth, the registrant has walked squarely into statutory cybercrime.

The Legal Reality: Nigerian Statutory Framework vs. Cybersquatting

Nigerian law explicitly criminalizes cybersquatting under the Cybercrimes (Prohibition, Prevention, etc.) Act 2015 (as amended), removing the shield of civil domain speculation and exposing bad-faith registrants to direct criminal sanctions, prosecutorial actions, and formal civil litigation under the Trade Marks Act.

1. Section 25 of the Cybercrimes Act 2015

Nigeria does not treat deliberate domain speculation against brand owners as an innocent commercial transaction. Section 25(1) of the Cybercrimes Act specifically codifies the offense of Cybersquatting. Under this statute, any person who intentionally registers, traffics in, or uses a domain name that is:

• Identical or confusingly similar to a registered trademark, service mark, or business name registered with the Corporate Affairs Commission (CAC); or
• Identical or confusingly similar to the personal name of another living person without their consent;
• With the bad-faith intent to profit, mislead, disrupt, or harm the commercial goodwill of the original owner;

commits an offense punishable upon conviction by imprisonment for a term of not more than 2 years, a fine of not more than ₦5,000,000, or both. Furthermore, the court must order the convict to forfeit the domain name directly to the legitimate trademark owner.

2. The Trademarks Act and Passing Off

Beyond criminal prosecution, the trademark holder retains immediate civil remedies under the Trade Marks Act (Cap T13 LFN 2004) and common law tort principles of “passing off.” Using an enterprise's name in a URL creates initial-interest confusion, falsely implying endorsement, affiliation, or commercial agency. Nigerian courts have broad jurisdiction to award injunctive relief, damages, and an account of profits derived from any pay-per-click or advertising revenue generated by the parked domain.

Resolving International & Local Domain Disputes: UDRP and NiRA

International domain disputes for .com addresses are resolved through ICANN's Uniform Domain-Name Dispute-Resolution Policy (UDRP), while local .ng domains are governed by the Nigeria Internet Registration Association (NiRA) Dispute Resolution Policy (NDRP), both requiring proof of bad faith.

To strip a squatter of a .com or .ng domain without navigating years of court trials, corporations deploy the administrative UDRP or NDRP process. Under the WIPO UDRP mechanism, a corporate complainant like Dangote must satisfy a three-part cumulative test:

1. Identical or Confusing Similarity: The domain is visually, phonetically, or conceptually indistinguishable from the complainant’s trademark.
2. No Rights or Legitimate Interests: The registrant is not commonly known by the domain name, holds no trademark, and is not making a legitimate non-commercial or fair use of it.
3. Bad Faith Registration and Use: The domain was registered primarily to sell, rent, or transfer it to the trademark owner or competitor for valuable consideration exceeding out-of-pocket costs.

// Example Bad-Faith Evidence Extracted in UDRP Proceedings:
1. Registrant Whois Privacy masking identity post-dispute notice.
2. Written extortion email demanding payments exceeding registrars costs ($50-$500,000+).
3. Parked page generating automated PPC revenue from trademarked keywords.
4. Passive holding preventing legitimate corporate brand rollout.

The Technical Founder’s Brand Defense Playbook

Engineering leaders and CTOs must actively protect brand assets before launching publicly by securing primary and secondary top-level domains, monitoring unauthorized registrations, and enforcing defensive registrar locks against hostile actors.

Actionable Protective Steps for Startups

• Defensive TLD Sweep: Register your core brand name across key extensions (.com, .com.ng, .ng, .io, .ai) during pre-seed development prior to issuing press releases or public beta drops.
• Establish Common Law Priority: File trademark applications with the Nigerian Trademarks, Patents and Designs Registry under the Federal Ministry of Industry, Trade and Investment to secure formal statutory leverage.
• Automated Typo Monitoring: Deploy automated alert scripts using domain monitoring APIs to identify homoglyph attacks, common misspellings (typosquatting), and targeted credential phishing setups.
• 72-Hour Response Plan: If a third party captures an exact match of your corporate brand, do not send speculative settlement offers. Preserve evidence via timestamped internet archives (WARC/PDF), issue a formal legal cease-and-desist citing Section 25 of the Cybercrimes Act 2015, and file an expedited UDRP/NDRP complaint.

Disclaimer: This article provides general regulatory insight and technical analysis under Nigerian tech law. It does not constitute formal legal advice. For specific domain disputes, intellectual property filings, or criminal complaints, consult a qualified Nigerian technology lawyer.

Frequently Asked Questions (FAQ)

Can I legally register a domain name containing a Nigerian company's name if it is available?

Availability at a registrar does not confer legality. If the company possesses a registered trademark or common law goodwill, registering their name without legitimate rights and with intent to exploit or resell constitutes unlawful cybersquatting under Nigerian law.

What is the penalty for cybersquatting in Nigeria?

Under Section 25 of the Cybercrimes Act 2015 (as amended), individuals convicted of cybersquatting face up to 2 years in prison, a fine of up to ₦5,000,000, or both, alongside the mandatory forfeiture of the domain.

What is the difference between cybersquatting and domain investing?

Domain investing focuses on generic, descriptive words (e.g., cars.com, hotel.ng) registered without targeting anyone's intellectual property. Cybersquatting specifically targets established trademarks, corporate identities, or living individuals in bad faith to profit from their goodwill.

How does Dangote or any large enterprise recover a stolen .ng domain?

The enterprise can file an administrative complaint under the NiRA Dispute Resolution Policy (NDRP) through an accredited dispute provider, or pursue criminal and civil actions in the Federal High Court under Section 25 of the Cybercrimes Act.

🚀 Build & Scale with SparkleCharge: Ready to architect, scale, or automate your production software platform? Partner with SparkleCharge engineering for high-availability full-stack systems. Schedule an Engineering Consultation or explore our Enterprise Technical Services.