ACPA

The ACPA is the US federal law aimed at cybersquatting. Since 1999 it has let a trademark owner take a domain registrant to court for registering, trafficking in or using a domain that is identical or confusingly similar to their mark with bad-faith intent to profit. The court can order the domain transferred and award statutory damages of $1,000 to $100,000 per domain.

That's what separates it from a UDRP. A UDRP can only take the domain away. The ACPA can take the domain and a check. It's also slower and far more expensive to bring, which is why most trademark owners still start with a UDRP and save the lawsuit for repeat offenders.

The law lists factors a court weighs on bad faith, including whether the registrant had any legitimate use for the name, whether they offered to sell it to the mark owner, and whether they've done this before. Generic and descriptive words are protected. A pattern of registering brand names is not.