Delhi High Court has issued a strict order requiring electronic Know Your Customer (e-KYC) verification for all domain name registrants to combat cyber fraud, phishing, and impersonation. This mandate makes identity checks mandatory before domain allocation and ensures ongoing compliance for continued use.
Key Specifications
- Registrars must use government IDs like Aadhaar e-KYC or PAN for verification; self-declared info is not enough.
- Databases of registrants must stay accurate and updated, with suspension for mismatches or unverified data.
- Legacy domains need re-verification in a set time frame.
The order stresses identity authentication at registration using official digital mechanisms, including equivalents for foreigners.
Compliance and Enforcement
Registrars and resellers in India face accountability, with penalties for non-compliance under ICANN rules. They must store verified data securely and share it quickly with law enforcement for cyber probes. Anonymous or proxy registrations end unless regulated.
Time-bound steps include instant e-KYC for new domains and phased checks for old ones, allowing instant suspension of fraud-linked domains.
Traceability and Responsibilities
Hosting providers and ISPs must cooperate on takedowns of malicious domains. Uniform e-KYC standards, audits, and encryption protect privacy while aiding probes. This cuts delays from fake WHOIS data.
Expected Impact
The ruling promises fewer frauds from new domains, better conviction rates, and stronger online trust. It adds minor onboarding hurdles but boosts long-term digital security in India, matching global norms.