What is Cybersquatting? How to Protect Your Kenyan Brand

The Domain Threat Most Kenyan Businesses Ignore

You've built a business. You have a brand name that customers recognise. And then one day you try to register your .co.ke domain — only to discover someone else already owns it. They are not using it. They are waiting for you.

This is cybersquatting: the deliberate registration of a domain name containing someone else's trademark or brand name, with the intent to profit from it.

How Cybersquatters Operate

The Classic Ransom Model

A cybersquatter registers yourbrand.co.ke before you do. When your business becomes successful enough that you need the domain, they contact you and demand a premium — sometimes tens of thousands of shillings — to transfer it.

The Traffic Theft Model

They build a website on your domain name that serves competitor ads or redirects to a competitor. Every customer who types your domain name directly into a browser goes to them, not you.

The Phishing Model

The most dangerous variant. They use your brand's domain to send official-looking emails to your customers, suppliers, or employees — requesting payments, credentials, or sensitive information.

What Can You Do If It Happens?

1. KENIC Dispute Resolution

KeNIC has a formal dispute resolution procedure based on the Uniform Domain-Name Dispute-Resolution Policy (UDRP). If you can demonstrate that:

• You have rights to the name (trademark, business registration)
• The domain was registered in bad faith
• The registrant has no legitimate interest in the name

...you can file a complaint and potentially recover the domain.

2. Legal Recourse in Kenya

Kenya's Data Protection Act (2019) and existing intellectual property laws provide additional legal pathways. Consult a lawyer specialising in digital IP.

Proactive Protection Strategies

Register early. This is the single most effective protection. Register your .co.ke and .ke domain as soon as you have a business name — even before you need the website.

Defensive registration. For established brands, register common misspellings and alternative extensions:

• If your brand is nakumattt, also register nakumatt.ke, nakumatt.co.ke, nakumat.co.ke
• If you are a school, register both .sc.ke and .ke

Set renewal reminders. An expired domain can be registered by a squatter within days of lapsing. Set calendar reminders 90 days and 30 days before your renewal date.

Monitor your brand. Use KENIC's WHOIS lookup to periodically check if similar domains have been registered.

The Cost of Prevention vs. Recovery

The maths are straightforward. Register now.