New Delhi: India’s efforts to fight the growing problem of fake websites and online fraud have created a major legal battle involving some of the world’s largest domain registration companies. While authorities and businesses want stronger action against websites that copy trusted brands and cheat consumers, domain companies fear that some of the proposed measures could weaken privacy and create problems across the global internet.
GoDaddy, one of the world’s largest domain registration companies, has challenged directions arising from a Delhi High Court ruling aimed at controlling fraudulent websites. The company has warned that some of the measures could expose ordinary website owners to privacy risks and make the internet less safe.
The dispute comes at a time when India is facing a serious increase in online fraud. Millions of people now use smartphones for shopping, banking, payments and other services. Criminal groups have taken advantage of this rapid digital growth by creating websites that look almost identical to those of well known companies.
Such websites can trick users into sharing passwords, banking details and other personal information. Some fake websites also offer false investment opportunities, jobs, franchises or products. Victims often realise that they have been cheated only after losing money.
According to the available figures, Indian authorities received around 2.4 million complaints related to suspected cyber fraud during the previous year. The losses connected to these complaints were estimated at about 2.4 billion dollars. The scale of the problem has increased pressure on courts, technology companies and law enforcement agencies to find faster ways to stop fraudulent websites.
The legal action that led to the current dispute involved more than 20 companies that complained about websites impersonating their brands. The cases involved major international companies including Amazon, McDonald’s, Microsoft, Xiaomi and Colgate Palmolive.
In December, the Delhi High Court ordered the blocking of more than 1,100 websites linked to alleged fraud and brand impersonation. The court also introduced measures intended to make it easier to identify those behind suspicious domain names and prevent similar websites from appearing again.
However, GoDaddy and other domain companies have raised concerns about some of these requirements. One issue is the possible removal of free privacy protection that hides the personal contact information of domain owners from public view.
GoDaddy argues that privacy services are also used by legitimate website owners. Journalists, activists, small business owners and ordinary individuals may have genuine reasons for keeping their home addresses, phone numbers and other personal details away from public databases.
The company has also objected to a requirement that registrars provide information about domain owners within 72 hours to people or organisations that can show a legitimate interest. The concern is that domain companies may not be in a position to quickly decide whether every person asking for private information has a genuine reason to receive it.
Another disputed issue is the proposal to prevent the registration of domain names that are variations of protected brand names. Registrars argue that this could be difficult to manage because the domain name system operates globally. A word that resembles a trademark in one country may have a completely different meaning or legitimate use somewhere else.
GoDaddy has warned that broad restrictions could affect legitimate users and create conflicts with privacy laws in different countries. The company has also raised concerns about possible clashes with India’s data protection rules and the European Union’s General Data Protection Regulation.
Other domain registration companies, including Namecheap and Hosting Concepts, have also challenged the ruling. Their appeals raise wider questions about how much responsibility domain registrars should carry for stopping online fraud before it happens.
The case highlights the difficult balance between protecting people from cybercrime and protecting the privacy of legitimate internet users. Authorities and businesses argue that faster access to information about suspicious domain owners can help investigators find criminals and close fraudulent websites before more people lose money.
Domain companies, however, say that rules must be carefully designed. They fear that removing privacy protection or introducing broad restrictions on domain names could harm innocent users while failing to stop criminals, who often change their methods quickly.
Research into malicious internet domains has also shown how difficult the problem can be. Fraudulent domains are often created in large numbers and may remain active only for a short period before disappearing. Criminals can then move to new domain names, making enforcement a constant challenge.
The Delhi High Court is expected to consider the appeals on July 16. The hearing will be closely watched by technology companies, online businesses, privacy advocates and internet users.
The final outcome could have consequences beyond India. At the heart of the case is a difficult question facing governments around the world: how can authorities stop criminals from using the internet to cheat people without weakening the privacy and freedom of millions of legitimate users?
As India continues its battle against online fraud, the court’s next decisions could help shape the future responsibilities of domain registration companies and influence the wider global debate about privacy, security and accountability on the internet.