Domain Squatting in Kenya: How the Law Protects Domain Names and Brand Owners in Kenya

Kenya's digitisation intersects with intellectual property in several ways. This makes domain names crucial tools which businesses can use to showcase their products and services to online consumers. As businesses migrate online, they may be faced with domain squatting, which creates a big problem in IP, especially interfering with trademark integrity.

A domain name is a unique address that is used for the identification of an internet location. For example, .ke, .co.ke, .or.ke, and .ac.ke domains in Kenya. Having a domain name does not automatically mean that there are intellectual property rights. However, there may be legal protection where there is an overlap between business name, goodwill, and trademark.

This is the act of registering, trafficking or using a domain name in bad faith, particularly when the registrant intends to sell the domain at an inflated price, the domain is used to divert traffic from a business or to exploit the reputation and goodwill of another, or when the registration is aimed at preventing the rightful business name or trademark owner from using the domain.

Typo squatting is a form of domain squatting whereby the registrants register common misspellings of a brand. Examples can be Gogle.co.ke.

Identity theft occurs when someone registers the domain of a famous person or business entity so as to extort money from them or sell the domain to the person at an exorbitant fee.

Competition squatting is another type. This is characterised by registering a competitor's name or one almost similar to divert traffic.

The key indicators of bad faith which need to be proven include:

• Using a domain to confuse consumers;
• Registering multiple well-known brand names;
• The nonexistence of legitimate business purposes; and
• Intention to sell the domain to the rightful owners to make a profit.

The regulation of domain names in Kenya and IP protection is not housed under one legislation or institution. Rather, there are multiple pieces of legislation and institutions which are relevant in domain protection.

The Trade Marks Act (Cap 506)

This is the main legislation protecting brand owners. Section 7 of the law provides exclusive rights to the trademark owner to use the mark in exclusion of others. In the digital world, exploiting a domain name that is identical or confusingly similar to a registered trademark will constitute infringement.

Common law tort of passing off

Protection of marks also relies on passing off. The domain name need not be exact, but it could be confusing to the registered mark. If a business passes off its products as those belonging to another, using a domain or using a confusingly similar domain, an action for passing off can be commenced by the aggrieved party.

Kenya Information and Communication Act (KICA) 1998

It creates the Communication Authority of Kenya (CA), which regulates and oversees the ICT sector in Kenya. Section 5 of the Act mandates CA to manage the .ke country code. The management has been delegated to the Kenya Network Information Centre (KeNIC).

The Computer Misuse and Cybercrimes Act 12018

This is an important statute which is often ignored. Section 28 specifically deals with cybersquatting. It defined the offence of cybersquatting as the acquisition of a domain name in bad faith with the intention to profit, destroy reputation and mislead.

The criminal liability under the Act is a fine of KShs. 200,000 or imprisonment for up to 2 years, or both.

An aggrieved party can pursue the following actions against a domain squatter:

• File a dispute with KeNIC for takedown
• Trademark infringement action under the Trade Marks Act
• The common law tort of passing off;
• Unfair competition
• A court may grant an injunction, damages or account for profits (equitable remedy), an order for transfer or deregistration of a domain.

The best preventive measure is to register the domain early. Any related domain names should be secured to avoid registration of domains which may lead to confusion.

Monitoring registration and acting immediately against infringing registration would also help a right holder protect business, goodwill and reputation.

Trademark first – A domain name registration does not equate to IP rights. It is recommended to secure the trademark through the Kenya Industrial Property Institute (KIPI) to gain the legal protection and leverage that is needed for a takedown action.

Businesses can employ tools which alert the business when a similar domain is registered. It is recommended to seek technical advice from tech gurus to understand which tools are best for monitoring domain registration.

Kenya Airways v. Caroline Kariemu Domain Name Dispute – c. 2000

This is a key case whereby the Defendant registered the domain name ‘kenyaairways.com’ in 1999. Kenya Airways held the registered trademark for the name ‘Kenya Airways’ and moved for an order transferring the domain from the Defendant. The administrative panel found in favour of the national carrier. There was bad faith on the part of the Defendant because:

• The registrant was clearly aware of the airline’s existence.
• The domain did not resolve to an active website (passive holding).
• The registrant failed to demonstrate any legitimate interest in the name.

The panel also found that ‘kenyaairways.com’ was identical or confusingly similar to the trademark right which Kenya Airways held. The domain was transferred to Kenya Airways.

A similar finding can be seen from the UEFA case, UEFA v Funzi Furniture, where the administrative panel found that the respondent had no rights or legitimate interest in the domain name that it had registered (uefachampionsleague.com).

As Kenya continues its rapid digital transformation, domain names have evolved from mere technical identifiers into valuable commercial assets closely tied to brand identity, goodwill, and consumer trust. While domain registration in itself does not confer intellectual property rights, Kenyan law provides a multi-layered framework through which businesses can protect their brands against abusive and bad-faith domain registrations.

The interaction between trademark law, common law principles such as passing off, sectoral regulation under KICA, criminal sanctions under the Computer Misuse and Cybercrimes Act, and administrative dispute resolution mechanisms through KeNIC demonstrates that domain squatting is not merely a technical inconvenience, but a legally actionable wrong. Kenyan and international decisions, including Kenya Airways v Caroline Kariemu and UEFA v Funzi Furniture, affirm that bad-faith registrations, whether through passive holding, diversion of traffic, or exploitation of goodwill, will not be protected by law.

Ultimately, the protection of domain names in Kenya requires a proactive, informed, and strategic approach. Rights holders who act promptly and leverage the available legal and administrative remedies stand a far better chance of safeguarding their brands in the digital marketplace.