23 September, 2026

Addressing Passive Holding and Brand Impersonation Risks in VEON Domain Dispute

UDRP Cases

VEON Amsterdam B.V. successfully reclaimed the domain veon.shop after a WIPO panelist ruled the respondent’s passive holding of the trademark-identical domain constituted bad faith. The domain, registered in June 2026, was ordered to be transferred to the complainant.

Case Snapshot

Case Number D2026-3452
Complainant VEON Amsterdam B.V.
Respondent Sahil Khan
Disputed Domain
veon.shop
Threat Tactic Passive Holding
Decision Date 2026-09-18
Panelist Wilson Pinheiro Jabur
OutcomeTransfer
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-3452
UDRP Legal Assistance

Facing Unauthorized Domain Registrations or Brand Abuse?

Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.

Request Case Evaluation

Risks of Passive Holding and TLD Diversification

The registration of veon.shop by an unauthorized third party represents a significant risk to brand integrity for digital operators. Although the domain remained passively held during the pendency of this dispute, such practices facilitate the long-term warehousing of high-value brand assets. Passive holding creates a latent threat, as these domains can be activated instantaneously to host phishing campaigns, distribute malware, or divert traffic away from legitimate service portals. The use of the .shop Top-Level Domain (TLD) specifically compounds this risk, as the suffix creates an inherent and misleading impression of authorized commercial activity or an official secondary marketplace associated with the Complainant’s established digital services.

For multinational entities with large customer bases, the proliferation of descriptive and e-commerce-oriented TLDs necessitates a proactive approach to domain monitoring. Because the Respondent utilized privacy services to shield their identity, the initial detection of this bad faith registration relied upon systematic monitoring of brand-related domain acquisitions. The lack of a legitimate nexus between the Registrant and the Complainant’s trademark, combined with the domain’s passive status, highlights the importance of timely UDRP intervention to prevent potential future consumer deception. Organizations must remain vigilant, as the unauthorized acquisition of trademark-identical domains—even when not currently active—imposes an ongoing burden on corporate security and intellectual property portfolios.

Strategy Breakdown: Leveraging Passive Holding Evidence to Establish Bad Faith

The complainant’s successful strategy rested on establishing a comprehensive nexus between its well-established multinational digital brand and the respondent’s unauthorized registration. By highlighting that the respondent lacked any legitimate interest in the disputed domain and had failed to demonstrate any bona fide commercial use, the complainant effectively utilized the passive holding of the domain as a primary indicator of bad faith. This approach was reinforced by documenting the complainant’s extensive portfolio of EU trademark registrations dating back to 2017, which successfully positioned the brand as well-known in its sector and established the necessary standing for the UDRP complaint.

Furthermore, the complainant’s strategy benefited from the respondent’s failure to participate in the proceedings, which allowed the panel to move quickly toward a summary determination based on the provided evidence of non-use. By demonstrating that the domain name contained an inherent risk of consumer confusion due to its literal reproduction of the VEON trademark coupled with the .shop TLD, the complainant presented a persuasive narrative regarding the threat to brand integrity. This methodology emphasizes the utility of proactive monitoring, especially when identifying the registration of brand-plus-TLD variations that, while currently inactive, pose significant future risks for potential phishing or unauthorized traffic diversion.

Practical Recommendations

  • Implement automated TLD-specific monitoring for your primary trademark across high-risk extensions such as .shop, .store, and .online to detect registrations before they move from passive holding to active malicious use.
  • Develop a rapid-response UDRP protocol that leverages standardized evidence of passive holding, as demonstrated in this case, to streamline the transition from discovery to domain transfer.
  • Audit your digital footprint and brand expansion plans to proactively register defensive domains in commercial-oriented TLDs, particularly when entering new geographic or consumer-facing digital markets.
  • Utilize WIPO UDRP precedents involving passive holding to establish ‘bad faith’ claims early, even in instances where the registrant uses privacy services to conceal their identity.
  • Regularly review DNS and WHOIS monitoring alerts to identify domains that do not resolve immediately, as these are frequently the initial stages of future brand impersonation or phishing campaigns.

Frequently Asked Questions (FAQ)

Why was the domain ‘veon.shop’ considered confusingly similar to the complainant’s trademarks?

The WIPO panel found that the disputed domain name is identical to the well-known VEON trademark, which the complainant has held under various European Union registrations since 2017. The inclusion of the ‘.shop’ TLD does not diminish the confusing similarity for consumers.

How did the panel determine that the respondent lacked legitimate rights or interests?

The panel noted that the respondent, Sahil Khan, provided no evidence of any bona fide offering of goods or services, nor any demonstrable preparation to use the domain for a legitimate purpose. Additionally, there is no relationship between the respondent and VEON Amsterdam B.V.

Can ‘passive holding’ of a domain truly be considered bad faith under the UDRP?

Yes. In this case, the panel concluded that the respondent’s passive holding of a domain that perfectly replicates a well-known brand, combined with the lack of any legitimate activity, satisfies the requirement that the domain was both registered and is being used in bad faith.

What is the strategic takeaway regarding the registration of brand-plus-TLD variations?

This case demonstrates that unauthorized registration of brand-plus-TLD variations, such as ‘veon.shop’, creates significant consumer confusion risks. Even when a domain remains inactive, it represents a brand impersonation threat that companies can effectively address through a formal UDRP filing to secure a mandatory transfer.

Is your brand being held hostage in new TLDs?

Passive holding of trademark-identical domains—even those that don’t yet resolve to a site—creates an ongoing risk of future impersonation. Secure your digital perimeter by identifying and reclaiming these assets before they are weaponized.

Check recovery options

Get Expert UDRP & Domain Dispute Assistance
Request a confidential case evaluation from our domain dispute attorneys. We will review your domain situation and reply within 24 hours.

    Thank You for Your Request!
    Our legal team is reviewing your dispute details and will contact you via email shortly.
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.
    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings

    Necessary
    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.