Window for confirming registration data cut from 5 days to 3
Prompt confirmation required in suspected fraud cases
Prompt confirmation required in suspected fraud cases
We believe it's very important that people see the .nl domain as trustworthy. So we don't tolerate fraudulent activities. If we see anything to suggest that a .nl domain name is being used for fraud, we can ask for evidence that the registration data is correct. Until now, the registrant has had 5 calendar days to demonstrate that the registration data is correct. However, with effect from 6 December 2022, we're reducing the window to 3 working days. If the registration data isn't confirmed within that time, we may delink or modify the domain's registered name servers. That will prevent people using the domain name to reach the original website. We have the right to do that under Article 18 of the General Terms and Conditions for .nl Registrants. The aim of the change is to minimise the time that fraudulent websites remain accessible.
We don't ask for confirmation unless there are grounds for suspecting that a registration is fraudulent, such as evidence that the domain name is linked to a fake webshop. And we normally ask for confirmation only if the registrant is a business. We decide whether a registrant is a business by looking at various things, such as their name and whether they are selling goods and services on their website.
We always proceed with great care. For example, multiple expert staff members are involved in deciding whether to start an investigation and in assessing the evidence that the registrant provides to confirm the registration data.
If we decide that a domain name's registration data needs verifying, we'll contact both the registrant and the registrar by e-mail. We'll ask for evidence confirming the registrant's identity and other details. In our e-mail, we'll make it clear that, if we don't get evidence quickly, we may delink the domain's name servers. If we don't get an answer within 2 working days, we'll write again.
Our e-mail will go to the following people, using the addresses recorded in our database:
Registrant
Admin-c
Registrar
Registrar's primary contact
Registrar's anti-abuse contact (if details have been provided)
If we don't get evidence confirming the registrant's identity within 3 working days, we'll delink or modify the domain's name servers. That will prevent people using the domain name to reach the original website. The domain name's registration won't be cancelled when we delink or modify the name servers.
After deactivating a domain name, we inform the registrar and the registrant by e-mail. In our e-mail, we'll tell the registrar and registrant that we intend to cancel the domain name's registration. We have the right to do that under Article 16 of the General Terms and Conditions for .nl Registrants.
We'll also explain what the registrant or registrar can do to reactivate the domain name and/or to prevent the registration being cancelled.
You can reach us on working days between 8am and 6pm (Dutch time) by calling +31 26 352 5555 or mailing support@sidn.nl.