Someone bought my company's .com domain — what are my options?

You go to register your domain, you type your company name followed by .com, and there it is: "unavailable." Someone already grabbed the address that feels, rightly, like yours. It stings like theft — especially if there's a competitor or a page full of ads sitting behind it.

The good news: you have more options than you think, and the worst move is to react in the heat of the moment. Not every taken .com is an emergency, and not every case is solved by a lawyer. Below we walk through them in the order you should try them: first understand exactly what you're dealing with, then weigh buying it back, the good alternatives, and — only as a last resort — the legal route.

Step one: find out who actually owns the domain

Before anything, run a WHOIS lookup on the domain (dozens of free tools let you enter the address and see the registration data). You want to learn three things:

• What's at the address now: a "for sale" / parked page full of ads, a redirect, a real active site, or a direct competitor.
• When it was registered: a month ago or many years ago. An old domain with a working site is a completely different story from one grabbed yesterday by a speculator.
• Who owns it: the data is often hidden for privacy reasons (GDPR), but there's frequently a contact form or email.

This diagnosis decides everything. "Held by a speculator waiting for you to buy it" is treated completely differently from "legitimately used by a company with the same name in another country."

Buying it back: how not to overpay

If the domain is clearly for sale or just parked, you can buy it. A few rules so you don't get taken advantage of:

• Don't reveal that you're desperate. If you write "I'm company X, I absolutely need this domain," the price jumps instantly. Ask neutrally whether it's for sale and at what price.
• Use a domain broker or an escrow service for the transaction. That way the money is only released after the domain is actually transferred to your name — you don't pay a stranger upfront.
• If the domain is about to expire, you can set up a "backorder" (drop-catch) that automatically tries to grab it the moment it's released.

Prices vary enormously, from a few tens of euros to serious sums. Set a ceiling from the start above which the alternatives become more rational than buying it back.

Alternatives that work just as well (sometimes better)

For a business serving one country, .com isn't mandatory — and often isn't even the best choice:

• A local extension (.co.uk, .de, .ro, and so on) often inspires more trust in a local customer than a .com anyone could have grabbed anyway.
• You can add a short, natural word: name + city, name + your line of work, or a small prefix. "ancabeauty.co" or "ancasalonleeds.com" works perfectly.
• For a local business, Google doesn't rank you by your domain ending but by relevance, content, and your Google Business profile. A well-built local domain positions you just as well.

An identical .com is nice to have, not a survival condition. Most customers will find you through Google Maps and social media anyway, not by typing the address.

The legal route: registered trademark and cybersquatting

Here you need a lot of honesty. You can recover a domain legally only if you broadly meet two conditions: you own a registered trademark, and the other party registered the domain in bad faith — to sell it to you at a premium, to imitate you, or to confuse your customers.

• For .com and other generic extensions there's the UDRP procedure, run through ICANN.
• Many country-code extensions have their own dispute-resolution mechanism.

But if the other side registered the domain first, legitimately, and actually uses it — even if it's exactly your name — your chances drop drastically. "I came second" is not an argument. The procedure costs money and takes time.

A clear scam signal: anyone who promises you "guaranteed recovery." No one can guarantee the outcome of a dispute.

How to protect yourself from now on

Once you have a good address, lock it down so you don't relive the story:

• Register the obvious variants too (local extension and .com, with and without a hyphen) if the budget allows.
• Turn on auto-renew and check it can't expire by accident — most domains are lost that way, not through theft.
• Enable domain lock and WHOIS privacy protection.

If all of this — domain, hosting, email, website — feels like a maze, that's what we do at MPO Web Studio. We work entirely remotely, across the whole country, we build you a free demo of your site first so you see exactly what you're getting before paying anything, and we keep pricing transparent, no surprises. If you want an honest opinion on which domain to choose in your situation, send us a message on WhatsApp and we'll tell you straight what to do.