# .DE Domain Risk Assessment and Identity Verification Process

#### Overview

DENIC (the .DE registry) introduces **automated risk assessment** for:

- New registrations
- Transfers
- Owner changes
- Contact updates

The registry evaluates the **domain holder’s name and address**. If flagged, identity verification is required.

---

### 1. What’s Changing

Previously, checks were manual. Now, DENIC uses an **automated algorithm**.

**Evaluated data:**

- Holder name
- Holder address
- Individual vs organization

If data looks suspicious:

- DENIC → sends poll message
- Openprovider → emails reseller

---

### 2. Risk Levels

#### Low Risk

- Domain works normally, and no action is needed.

---

#### Suspicious

- Domain works normally, verification required within **30 days**

**If not completed:**

- +7 day grace period
- Domain deleted permanently after a 90 day quarantine period

**Important:**

- Existing domains being updated, transferred, or assigned to a new owner can only receive a maximum classification of “Suspicious”
- Domain remains active during verification

---

#### High Risk

- Domain immediately **on hold**
- New domains stay in **pending create** and not activated righ away.

**Typical reason:** highly suspicious or false holder data.

---

## <span>3. Verification Timeline</span>

### <span>For Suspicious Cases</span>

<figure id="bkmrk-stage-timeline-resul"><table><thead><tr><th>Stage</th><th>Timeline</th><th>Result</th></tr></thead><tbody><tr><td>Verification requested</td><td>Day 0</td><td>Reseller receives email from Openprovider</td></tr><tr><td>Initial deadline</td><td>Within 30 days</td><td>Verification must be completed</td></tr><tr><td>Grace period</td><td>Additional 7 days</td><td>Final chance to verify</td></tr><tr><td>Quarantine</td><td>Up to 90 days</td><td>Domain stops resolving</td></tr><tr><td>Final deletion</td><td>After quarantine</td><td>Domain is permanently deleted</td></tr></tbody></table>

</figure>**Notes:**

- DNS stays stored during quarantine
- No Redemption Grace Period
- Transfers do NOT reset deadlines
- Previous verification does NOT carry over

---

### 4. Responsibilities

<figure id="bkmrk-openprovider-reselle"><table><thead><tr><th>**Openprovider**</th><th>**Reseller**</th></tr></thead><tbody><tr><td>Sends reseller email with:  
• Domain name  
• Holder details  
• Deadline• Instructions</td><td>Must:  
• Contact customer  
• Confirm holder details  
• Collect supporting proof  
• Send confirmation to Openprovider</td></tr></tbody></table>

</figure>---

### 5. Required Documents

<figure id="bkmrk-individuals-organiza"><table><thead><tr><th>**Individuals**</th><th>**Organizations**</th></tr></thead><tbody><tr><td>**Must verify:**  
• Person exists  
• Address belongs to them  
  
**Accepted:**  
• Passport  
• National ID  
• Driver’s license  
• Utility bill  
• Bank statement

  
**Best practice:**  
  
• Govt ID to verify name  
• Utility bill/bank statement for address

</td><td>**Must verify:**  
• Legal existence  
• Correct address

**Accepted:**  
• Business register extract  
• Articles of association  
• Partnership agreement  
• Founding documents  
• Utility bill  
• Bank statement

**Best practice:**

**•** Use business registration documents to verify the organization

</td></tr></tbody></table>

</figure>---

### 6. DENIC Direct Communications

DENIC contacts the holder directly:

<figure id="bkmrk-stage-denic-communic"><table><thead><tr><th>**Stage**</th><th>**DENIC Communication**</th></tr></thead><tbody><tr><td>**Before Quarantine**</td><td>**Dedelegation Warning**→ Risk of domain going offline</td></tr><tr><td>**During Quarantine**</td><td>**Dedelegation Information**→ Domain is offline</td></tr><tr><td>**Before Deletion**</td><td>**Notice of Termination**→ Domain will be deleted</td></tr></tbody></table>

</figure>**Important:**

- Sent by DENIC (not Openprovider)
- May be sent by post if email fails
- Customers may contact you

---

### 7. If Verification Fails

- Openprovider informs DENIC
- DENIC grants 7 day final period
- 90-day quarantine
- Domain stops resolving
- Permanent deletion

**Impact:**

- If multiple domains using same contact → all affected

---

### 8. Upcoming Automation (KYC/KYB)

Expected: **Coming soon**

#### New Flow

**Step 1 – Reseller Notification**

- Informational only
- No immediate action required

**Step 2 – Customer Verification**

- Email from: `noreply@registrar.eu`
- White-label (includes reseller name)
- Secure upload link

→ Customer uploads documents directly

---

#### What Changes for Resellers

You no longer need to:

- Collect documents
- Store documents
- Send proof manually

---

#### Step 3 – Pre-Verified Holders

- Openprovider auto-submits data
- Higher chance of **Low Risk**

---

#### Step 4 – New Dashboard

**RCP → Contact Verifications**

You can:

- View open verification requests
- Track status
- Monitor deadlines

---

### 9. Recommended Actions

- Inform customers about increased verification
- Keep contact details accurate
- Monitor Openprovider emails
- Train support teams on DENIC notices
- Act quickly on requests

  
Best practice:

Verified and accurate holder information should result in a low risk classification and avoid any service disruption.

---

## <span>9. Frequently Asked Questions</span>

- ### <span>Will the domain stop working immediately?</span>

Only high risk cases are placed on hold immediately. Suspicious cases continue working during the 30-day verification period.

- ### <span>Can a transfer avoid the verification deadline?</span>

No. Transferring the domain to another registrar does not reset the deadline.

- ### <span>Does previous verification with another registrar count?</span>

No. DENIC requires verification through the current registrar process.

- ### <span>What happens during quarantine?</span>

The domain no longer resolves, but DNS records remain stored.

- ### <span>Is there a redemption period after deletion?</span>

No. Once deleted after quarantine, the domain cannot be recovered through a redemption grace period.

- ### <span>Can several domains be affected at once?</span>

Yes. If multiple .DE domains use the same contact details, all of them may be affected together.