The Delhi High Court has made e-KYC mandatory for all domain registrations, ending anonymous ownership. The move aims to curb cyber fraud, shut down fake websites, and improve accountability by linking domains to verified identities.
Thank you for reading this post, don't forget to subscribe!
NEW DELHI: In a move to combat rising cyber fraud and fake websites, the Delhi High Court has mandated electronic Know Your Customer (e-KYC) verification for all domain name registrations in India. The ruling aims to prevent misuse of anonymous domains that are increasingly being used for scams, impersonation, and financial fraud.
ALSO READ: Mumbai Woman Duped of Rs 3.71 Crore in Shocking ‘Judge Chandrachud’ Digital Arrest Scam
The court clarified that automatic privacy protection for domain owners will no longer be available. Earlier, registrants could hide their personal details by default. Under the new directive:
- Privacy protection will only be available as a paid service
- Domain owners’ verified identity details must be accessible to authorities
- Anonymous website creation will be effectively curtailed
This decision is expected to significantly reduce fake websites that impersonate legitimate businesses.
The High Court instructed domain registrars to immediately lock, suspend, or block domains reported for misuse. Websites found engaging in fraud must be permanently disabled to prevent re-registration or reuse for criminal activities.
Background
The ruling follows multiple petitions filed by leading Indian companies whose names, logos, and brand identities were illegally used on fake websites. These fraudulent portals targeted victims with:
- Fake job offers
- Franchise and dealership scams
- Requests for registration fees, deposits, or service charges
Companies that approached the court include Tata Sky, Amul, Bajaj Finance, Dabur, Meesho, Croma, Colgate and ITC
All petitioners stated they had no association with the fraudulent websites operating under their brand names.
Justice Pratibha M. Singh observed that domain names now act as digital identities for businesses. Their misuse poses serious risks to consumers, including financial loss and identity theft.
She emphasized the urgent need for strong regulatory oversight to close loopholes exploited by cybercriminals.
New Guidelines Issued for Domain Registrars
The Delhi High Court issued strict operational guidelines for domain registrars, including:
- Maintaining complete and verified owner details
- Storing registration data securely within 72 hours
- Sharing domain ownership data with trademark owners, police, and investigative agencies upon request
- Permanently disabling domains involved in fraud to prevent reissuance
Under the new rules:
- All domain applicants must complete mandatory e-KYC
- Automatic WHOIS privacy protection is discontinued
- Privacy can only be enabled through paid services
This ensures that fraudsters cannot hide behind fake or unverifiable identities while operating scam websites.
The Centre for Police Technology (CPT) welcomed the ruling, stating that linking domain names to verified identities will significantly improve cybercrime investigations.
Organized cybercrime networks often operate fake job portals, helplines, lottery sites, and prize scams using anonymous domains. The new mandate will make such data transparent, traceable, and reliable.
The court also directed banks and financial institutions to:
- Strengthen verification for online transactions
- Confirm beneficiary account names before processing payments
- Monitor and flag suspicious transactions
Citizens have been advised to:
- Verify official websites before engaging
- Avoid sharing personal or financial information online
- Do not transfer money based solely on online offers or job proposals
Click Here to Read More Reports on Digital Arrest Scams
