5 May, 2026

Brazilian Retailer Atacadão Wins Dispute Over Deceptive ‘Official’ Domain Registration

UDRP Cases

Atacadão (Carrefour SA) successfully recovered the domain mercadoatacadaooficial.com through a WIPO UDRP proceeding. The panel found that the domain, which paired the protected ATACADAO mark with keywords ‘mercado’ and ‘oficial’, was registered in bad faith to exploit the brand’s reputation in Brazil.

Case Snapshot

Case Number D2025-0263
Complainant Atacadão – Distribuição, Comércio E Indústria LTDA.Carrefour SA
Respondent Jair Silva, Atacadao
Disputed Domain
mercadoatacadaooficial.com
Threat Tactic Brand Plus Keyword
Decision Date 2025-03-21
Panelist Marcello Do Nascimento
OutcomeTransfer
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2025-0263

Deceptive Authority and Exploitation of Brand Trust

The registration of mercadoatacadaooficial.com presents a significant threat to consumer trust by combining the well-known ATACADAO trademark with the Portuguese keywords ‘mercado’ (market) and ‘oficial’ (official). This specific domain structure is a classic example of the brand_plus_keyword tactic, where the registrant attempts to cloak unauthorized digital real estate in the mantle of authenticity. By utilizing the term ‘oficial’, the respondent creates a high risk of confusion, leading customers to believe they are interacting with the legitimate digital platform of Atacadão. For a retail giant that has maintained trademark rights in Brazil since 1978, this impersonation risk directly undermines decades of reputation and allows a third party to intercept traffic intended for the brand’s authorized channels.

The potential for commercial gain through traffic diversion remains a primary business concern, even when a domain is in a state of passive holding. The descriptive addition of ‘mercado’ narrows the context to the Complainant’s specific industry, increasing the likelihood that search engine results will present this domain to users seeking retail services. The Panel determined that the Respondent likely targeted the Complainant’s well-known brand to attract Internet users by creating a likelihood of confusion regarding source or sponsorship. For brand owners and IP professionals, this demonstrates how unauthorized registrants can exploit brand seniority to capture market attention, even if a live website has not yet been deployed to facilitate direct fraud or phishing.

The use of privacy services to shield the registrant’s identity, coupled with a total failure to participate in the UDRP proceedings, suggests a calculated effort to evade accountability. This operational lack of transparency increases the threat of future malicious activity, such as the creation of fake stores or fraudulent customer service portals. Given that the Respondent is located in the same geographic market as the Complainant, the risk of geo-mimicry is acute. Without the proactive recovery of such domains, brands face an ongoing risk of dilution and the potential for the domain to be activated at any time for commercial disruption or the harvesting of sensitive customer data.

Strategic Implementation of Trademark Seniority and Corporate Identity Verification

The Complainant’s success relied on demonstrating overwhelming trademark seniority and the deceptive nature of the domain’s construction. By providing evidence of Brazilian trademark registrations for ATACADÃO dating back to 1978—nearly five decades prior to the domain’s registration in late 2024—the Complainant established a timeline that made the Respondent’s claim of unawareness untenable. The strategy effectively dismantled the impact of the added Portuguese terms ‘mercado’ (market) and ‘oficial’ (official). The Complainant argued that these descriptive suffixes do not mitigate confusion but instead exacerbate it by implying an authorized corporate presence. This ‘brand plus keyword’ tactic is a frequent point of contention in retail disputes, and the Panelist concurred that incorporating a well-known mark in its entirety is sufficient for a finding of confusing similarity, especially when the secondary terms align with the brand’s industry.

The evidentiary weight of the case was further solidified by the Panelist’s proactive verification of the Complainant’s corporate standing. As a subsidiary of the global retail giant Carrefour SA, the Complainant’s legal standing was reinforced through an independent search by the Panelist in the Receita Federal do Brasil database to confirm corporate name change histories. This level of verification highlights the importance of maintaining transparent chain-of-title records between parent entities and local subsidiaries. Furthermore, the Complainant successfully established bad faith through the totality of circumstances, including the Respondent’s use of a privacy service to shield their identity and the passive holding of the domain. Even without evidence of a live website or active phishing, the targeting of a household Brazilian brand for potential commercial gain was sufficient to warrant a transfer, protecting the brand from future impersonation risks.

Practical Recommendations

  • Prioritize enforcement against domains combining the core trademark with trust-signaling terms such as ‘oficial’ or ‘official,’ as these are increasingly used to circumvent brand protection filters while creating high risk for consumer deception.
  • Localized monitoring should include industry-specific keywords in the language of the brand’s primary market; in this case, pairing the trademark with Portuguese terms like ‘mercado’ (market) demonstrated clear targeting of the Brazilian retail sector.
  • Document and present the full chronology of corporate name changes and trademark renewals dating back to original registration dates; leveraging seniority from 1978 effectively countered the 2024 registration date by establishing long-standing brand awareness.
  • File UDRP complaints even for non-resolving domains (passive holding) when the mark is well-known and the domain incorporates trust-based suffixes, as panels frequently find bad faith based on the impossibility of any legitimate use of an ‘official’ branded domain by a third party.
  • Include links to official government databases, such as the Receita Federal do Brasil, in the complaint to facilitate independent panelist verification of corporate identity and historical standing, ensuring procedural clarity regarding the complainant’s legal personality.

Frequently Asked Questions (FAQ)

Why was the domain ‘mercadoatacadaooficial.com’ considered confusingly similar to the ATACADAO trademark?

The Panel found the domain confusingly similar because it incorporates the protected ‘ATACADAO’ trademark in its entirety. The addition of the descriptive terms ‘mercado’ (market) and ‘oficial’ (official) did not distinguish the domain from the Complainant’s brand; rather, these terms reinforced the false impression of an official affiliation.

What evidence proved that the Respondent lacked legitimate rights or interests in the domain?

The Complainant demonstrated that it never authorized the Respondent to use the ‘ATACADAO’ mark. Furthermore, the Respondent failed to participate in the proceedings, and there was no evidence that the domain was used for a bona fide offering of goods or services prior to the complaint.

How did the Panel establish bad faith given that the domain was not actively in use?

The Panel applied the doctrine of passive holding, concluding that given the fame of the Brazilian retail brand, it was ‘inconceivable’ the Respondent registered the domain without knowledge of the Complainant. The inclusion of the word ‘oficial’ suggested an intent to disrupt business or deceive internet users for future commercial gain.

What was the tactical outcome of the UDRP filing for the Complainant?

The WIPO Panel ruled in favor of the Complainant, ordering the immediate transfer of ‘mercadoatacadaooficial.com’. This result effectively neutralizes the risk of the domain being used for future phishing, impersonation, or brand dilution, reinforcing the protection of the ATACADÃO trademark established in 1978.

Detected an unauthorized ‘Brand + Keyword’ domain?

Like the Atacadão case, attackers often combine your trademark with generic terms to create deceptive, ‘official’-looking domains. Learn how to identify and recover these assets before they are used for brand dilution or fraud.

Assess brand threat

Contact us
We will find the best solution for your business

    Thank you for your request!
    We will contact you within 5 hours!
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.

    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings


    Necessary

    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.