Full Breakdown
India’s Court Order on Fake Brand Websites Sparks Global Domain-Registration Debate
7/4/2026, 12:02:04 PM
Court Ruling Targets Fake Brand Domains
A New Delhi court issued a sweeping order in December requiring domain registrars to (1) discontinue free privacy-by-default services, (2) disclose registrant details within 72 hours to anyone claiming a “legitimate interest,” and (3) bar registration of domain names that are variations of protected trademarks. The order follows lawsuits filed by more than 20 companies—including Amazon, McDonald’s, Microsoft, Xiaomi and Colgate-Palmolive—seeking relief from fraudulent sites that mimic their brands. Registrars such as GoDaddy, Namecheap and Hosting Concepts have filed appeals, arguing the measures exceed the court’s remit and could force them to regulate domain names worldwide.
Background: Rising Online Fraud and Prior Legal Actions
India’s rapid growth in smartphone and internet usage has coincided with a surge in online fraud. In 2023 the government recorded 2.4 million cyber-fraud complaints, amounting to roughly $2.4 billion in losses. Earlier legal actions led to a December decision that blocked more than 1,100 impersonating websites. The court’s 14-point directive builds on those efforts, aiming to curb “large-scale deception” by tightening verification and disclosure requirements.
Key Players: GoDaddy, Indian Government, and Affected Brands
- GoDaddy – U.S.-based registrar managing ~80 million domains and serving over 20 million users; its 2024 revenue was $5 billion.
- Indian Ministry of Home Affairs – Led by Home Minister Amit Shah, who has highlighted the frequency of cybercrime.
- Ministry of Electronics & Information Technology – Submitted a 59-page brief urging stricter verification of domain owners.
- Brand Plaintiffs – Amazon, McDonald’s, Microsoft, Xiaomi, Colgate-Palmolive and others.
- Competing Registrars – Namecheap (Arizona) and Hosting Concepts (Netherlands) have also challenged the order.
Data & Statistics
- 2.4 million cyber-fraud complaints in 2023, valued at $2.4 billion.
- Over 1,100 fake sites blocked by the December ruling.
- 14 specific measures imposed on registrars.
- GoDaddy’s appeal cites 5,121 pages of documentation.
- The court noted that protecting a trademark like “HUL” could overlap with 118 English words (e.g., “hulk,” “moghul”).
Official Statements & Responses
GoDaddy argues that removing privacy-by-default “exposes them to foreseeable privacy and security risks such as stalking and harassment” and that the 72-hour disclosure requirement “leaves the company without a way to assess who has a legitimate interest.” The firm warns the directives could compel it to “exit India.”
Home Minister Amit Shah said a person falls prey to cybercrime every 37 seconds in India and warned that “lack of action risks turning the menace into a national crisis.”
The Home Ministry’s brief urged that registration details “should be readily made available” for investigations, aligning with Prime Minister Narendra Modi’s broader push for stricter cyber-law enforcement.
Criticism & Opposition
Internet-governance researcher Farzaneh Badii cautioned that the order would mainly expose “journalists, activists, small business owners, and private individuals. The brand impersonators will not.” European observers note potential conflict with the EU’s General Data Protection Regulation, arguing that indiscriminate public disclosure could breach privacy standards.
Conflicting Reports & Gaps
Despite the court order, GoDaddy’s website continues to promote “free privacy protection forever,” creating uncertainty about compliance timelines. The mechanism for verifying “legitimate interest” remains undefined, and the impact on legitimate businesses with names similar to major brands has not been quantified.
Verbatim Quotes
- “foreseeable privacy and security risks” — GoDaddy filing
- “The people exposed will be journalists, activists, small business owners, and private individuals. The brand impersonators will not,” — Farzaneh Badii, researcher
- “virtually impossible to register a domain name containing an English word that does not overlap with a registered trademark,” — GoDaddy filing
What’s Next: Upcoming Hearings and Potential Outcomes
The Delhi High Court will hear the consolidated appeals on July 16. A ruling could reshape how global registrars handle privacy, verification and cross-border enforcement, influencing both Indian cyber-policy and international domain-registration practices.
