India tightens domain registration rules to fight online fraud
The Delhi High Court has ordered stricter identity checks for all domain name registrations in India. The ruling aims to combat online fraud and phishing by enforcing mandatory e-KYC verification. Registrars must now verify registrant details at sign-up and share data monthly with NIXI, the National Internet Exchange of India.
The courtâs decision follows concerns over lax identity checks by domain name registrars (DNRs). Weak verification processes have allowed fraudulent websites to operate, deceiving consumers and enabling cybercrime. In response, the court rejected the practice of 'privacy by default' for domain registrations.
All DNRs must now verify registrant details at the time of registration and conduct periodic re-verification. They are also required to disclose verified information to courts or law enforcement within 72 hours of a request. Failure to comply could strip registrars of safe harbour protection under the IT Act and lead to blocking under Section 69A. The court has directed the Ministry of Electronics and IT (MeitY) and the Ministry of Home Affairs (MHA) to consult with DNRs and registry operators. The goal is to develop a uniform e-KYC framework, similar to NIXIâs existing system, while ensuring compliance with the Digital Personal Data Protection Act.
The new rules will force registrars to adopt stricter verification measures. Monthly data sharing with NIXI and rapid disclosure to authorities aim to reduce online fraud. Non-compliance could result in legal penalties and the loss of operational protections for registrars.
