Byoma Limited successfully petitioned for the transfer of five domains used by a third party to impersonate its skincare business and phish for user information. The WIPO panel ruled in favor of Byoma, ordering the transfer of all disputed domains.
Case Snapshot
| Case Number | D2026-2272 |
|---|---|
| Complainant | Byoma Limited |
| Respondent | 王明 (wang ming) |
| Disputed Domain | byomamilkytoner.combyomamoisturizer.combyomaserum.combyomaskincareshop.combyomasunscreen.com |
| Threat Tactic | Corporate Impersonation |
| Decision Date | 2026-07-20 |
| Panelist | Gregor Vos |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-2272 |
Risks to Consumer Trust and Data Security
The registration of five domain names incorporating the BYOMA trademark, such as ‘byomaskincareshop.com’ and ‘byomamilkytoner.com’, represents a significant threat to consumer trust and operational security. By utilizing these domains to impersonate the legitimate brand, the Respondent created a deceptive environment designed to lure unsuspecting customers. The presence of these sites, which mirrored official branding and product imagery, allowed the unauthorized party to solicit sensitive information from users under the guise of processing orders. For a direct-to-consumer brand, this impersonation tactic directly compromises the integrity of the customer journey and exposes the brand’s community to potential financial loss and identity theft, while simultaneously undermining the equity built through the Complainant’s extensive social media following.
Beyond the immediate risk of fraudulent transactions, the presence of these imposter sites imposes a long-term burden on the business’s support infrastructure and public reputation. Each incident involving a fake store inevitably leads to an increased volume of customer service inquiries from confused or victimized consumers, necessitating significant internal resources to address fraudulent claims and manage public perceptions. Furthermore, the systematic nature of these registrations, which strategically leveraged descriptive product terms to maximize perceived legitimacy, complicates brand protection efforts by confusing the marketplace. The use of such domains for phishing activities demonstrates a clear bad faith intent, forcing the Complainant to engage in costly legal enforcement to prevent further erosion of consumer confidence and to mitigate ongoing reputational damage.
Panel Reasoning: Evaluating Impersonation and Trademark Infringement
The WIPO panel found that the disputed domain names, which incorporate the BYOMA trademark alongside descriptive terms such as ‘milky toner,’ ‘moisturizer,’ ‘serum,’ ‘skincare,’ and ‘shop,’ are confusingly similar to the Complainant’s established marks. The panel affirmed that the inclusion of these industry-specific terms does not distinguish the domains from the brand. Instead, these additions strengthen the misleading association with Byoma Limited’s actual product line, effectively tricking consumers into believing the sites are official storefronts. In accordance with standard practice, the generic top-level domain ‘.com’ was disregarded during the evaluation of confusing similarity.
Regarding the second and third pillars of the UDRP, the panel determined that the Respondent lacks any rights or legitimate interests in the domain names. The evidence demonstrated that the Respondent used these sites to impersonate the Complainant and actively solicit sensitive personal information from consumers under the guise of legitimate transactions. Such deceptive activities, specifically designed to facilitate phishing and fraudulent data collection, inherently demonstrate a lack of rights and constitute bad faith use of the trademark.
Furthermore, the panel concluded that the Respondent registered the domains with full knowledge of the Complainant’s brand presence, including its significant international reach and 1.4 million followers on TikTok. By using the disputed domains to host fake checkout pages for the purpose of commercial gain through fraud, the Respondent demonstrated a clear intent to capitalize on the Complainant’s reputation. This multi-domain strategy reflects a deliberate effort to erode consumer trust, necessitating the transfer of all five domain names to the Complainant to mitigate ongoing reputational and security risks.
Strategy Breakdown: Leveraging Trademark Integrity to Combat Multi-Domain Impersonation
Byoma Limited’s strategy focused on the cohesive presentation of its registered trademark portfolio alongside evidence of systemic consumer-facing fraud. By demonstrating clear ownership of BYOMA marks in the UK, USA, and EU, the Complainant effectively neutralized the Respondent’s attempt to camouflage illegitimate activity. The strategy was specifically designed to frame the addition of descriptive terms such as ‘milky toner’ or ‘skincare’ not as distinct identifiers, but as calculated elements that intentionally deepened the risk of consumer confusion. This approach underscored that the Respondent’s registration of five distinct domains was a unified effort to mirror the Complainant’s actual product ecosystem and exploit the brand’s established social media presence to lend false credibility to phishing operations.
Persuasion was achieved by highlighting the operational reality of the infringement: the active harvesting of sensitive user data under the guise of an authentic shopping experience. By documenting that the sites mirrored the Complainant’s own product imagery and storefront aesthetics, the Complainant successfully satisfied the UDRP criteria regarding bad faith registration and use. This forced the panel to weigh the reputational and financial risks posed to the brand’s 1.4 million TikTok followers against the Respondent’s lack of legitimate interests. The resulting default judgment illustrates that when a complainant presents a comprehensive picture of brand impersonation, the UDRP provides a streamlined and effective pathway to reclaim multiple domains, even when individual site activity—such as the inactive status of one domain—varies.
Practical Recommendations
- Implement proactive domain monitoring for brand-plus-keyword combinations that specifically target your product lines, as these were effectively used in this case to impersonate the brand.
- Develop a rapid response playbook for consumer-facing phishing, including pre-drafted cease-and-desist templates and instructions for gathering evidence of fraudulent checkout pages to expedite UDRP filings.
- Proactively communicate authorized sales channels to your social media community to help customers distinguish between legitimate e-commerce sites and fraudulent impersonation storefronts.
- Utilize domain registrar abuse reporting mechanisms as a first line of defense to disrupt phishing activities while preparing formal UDRP proceedings for permanent domain transfer.
- Audit customer support channels for common indicators of phishing attacks, such as reports of unauthorized data requests, to identify and address fake shops before they inflict significant financial or reputational damage.
Frequently Asked Questions (FAQ)
Why were the domains byomamilkytoner.com and byomaskincareshop.com considered confusingly similar to Byoma’s trademark?
The panel ruled that the disputed domains incorporate the BYOMA trademark in its entirety. The inclusion of descriptive terms like ‘milky toner’ and ‘skincare shop’ did not distinguish the domains; instead, they reinforced the connection to the Complainant’s brand by referencing specific products offered by Byoma.
What evidence proved the respondent’s bad faith in registering and using these domains?
The respondent used the sites to impersonate the Byoma brand and deceive consumers into providing sensitive personal information through fake checkout pages. This pattern of phishing and corporate impersonation for commercial gain is clear evidence of bad faith registration and use under the UDRP.
Did the respondent provide a defense to claim legitimate rights to these domains?
No, the respondent failed to respond to the complaint. Consequently, the panel found that the respondent had no rights or legitimate interests in the domain names, particularly as their activities were focused on fraudulent data collection rather than a legitimate business interest.
What was the practical outcome of the WIPO decision D2026-2272 for Byoma Limited?
Following the panel’s findings, the WIPO decision mandated the transfer of all five disputed domains (including byomamoisturizer.com, byomaserum.com, and byomasunscreen.com) to Byoma Limited, effectively disabling the phishing infrastructure and protecting the brand’s customer base.
Is your brand being leveraged for corporate impersonation?
Protect your customer journey from deceptive sites mimicking your brand. Learn how to identify and neutralize domains used to capture sensitive data and erode customer trust.
This case note is for informational purposes only and is not legal advice.
