.DE Domain Risk Assessment and Identity Verification Process

Overview

By the end of July 2026, DENIC (the .DE registry) introduces automated risk assessment for:

  • New registrations
  • Transfers
  • Owner changes
  • Contact updates

The registry evaluates the domain holder’s name and address. If flagged, identity verification is required.


1. What’s Changing

Previously, checks were manual. Now, DENIC uses an automated algorithm.

Evaluated data:

  • Holder name
  • Holder address
  • Individual vs organization

If data looks suspicious:

  • DENIC → sends poll message
  • Openprovider → emails reseller

2. Risk Levels

Low Risk

  • Domain works normally, and no action is needed.

Suspicious

  • Domain works normally, verification required within 30 days

If not completed:

  • +7 day grace period
  • Domain deleted permanently after a 90 day quarantine period

Important:

  • Existing domains being updated, transferred, or assigned to a new owner can only receive a maximum classification of “Suspicious”
  • Domain remains active during verification

High Risk

  • Domain immediately on hold
  • New domains stay in pending create and not activated righ away.

Typical reason: highly suspicious or false holder data.


3. Verification Timeline

For Suspicious Cases

StageTimelineResult
Verification requestedDay 0Reseller receives email from Openprovider
Initial deadlineWithin 30 daysVerification must be completed
Grace periodAdditional 7 daysFinal chance to verify
QuarantineUp to 90 daysDomain stops resolving
Final deletionAfter quarantineDomain is permanently deleted

Notes:

  • DNS stays stored during quarantine
  • No Redemption Grace Period
  • Transfers do NOT reset deadlines
  • Previous verification does NOT carry over

4. Responsibilities

OpenproviderReseller
Sends reseller email with:
• Domain name
• Holder details
• Deadline• Instructions
Must:
• Contact customer
• Confirm holder details
• Collect supporting proof
• Send confirmation to Openprovider

5. Required Documents

IndividualsOrganizations

Must verify:
• Person exists
• Address belongs to them

Accepted:
• Passport
• National ID
• Driver’s license
• Utility bill
• Bank statement


Best practice:

• Govt ID to verify name
• Utility bill/bank  statement for address

Must verify:
• Legal existence
• Correct address

Accepted:
• Business register extract
• Articles of association
• Partnership agreement
• Founding documents
• Utility bill
• Bank statement

Best practice:

Use business registration documents to verify the organization

 


6. DENIC Direct Communications

DENIC contacts the holder directly:

StageDENIC Communication
Before QuarantineDedelegation Warning→ Risk of domain going offline
During QuarantineDedelegation Information→ Domain is offline
Before DeletionNotice of Termination→ Domain will be deleted

Important:

  • Sent by DENIC (not Openprovider)
  • May be sent by post if email fails
  • Customers may contact you

7. If Verification Fails

  • Openprovider informs DENIC
  • DENIC grants 7 day final period
  • 90-day quarantine
  • Domain stops resolving
  • Permanent deletion

Impact:

  • If multiple domains using same contact → all affected

8. Upcoming Automation (KYC/KYB)

Expected: End of June 2026

New Flow

Step 1 – Reseller Notification

  • Informational only
  • No immediate action required

Step 2 – Customer Verification

  • Email from: noreply@registrar.eu
  • White-label (includes reseller name)
  • Secure upload link

→ Customer uploads documents directly


What Changes for Resellers

You no longer need to:

  • Collect documents
  • Store documents
  • Send proof manually

Step 3 – Pre-Verified Holders

  • Openprovider auto-submits data
  • Higher chance of Low Risk

Step 4 – New Dashboard

RCP → Contact Verifications

You can:

  • View open verification requests
  • Track status
  • Monitor deadlines

9. Recommended Actions

  • Inform customers about increased verification
  • Keep contact details accurate
  • Monitor Openprovider emails
  • Train support teams on DENIC notices
  • Act quickly on requests


Best practice:

Verified and accurate holder information should result in a low risk classification and avoid any service disruption.


9. Frequently Asked Questions

  • Will the domain stop working immediately?

Only high risk cases are placed on hold immediately. Suspicious cases continue working during the 30-day verification period.

  • Can a transfer avoid the verification deadline?

No. Transferring the domain to another registrar does not reset the deadline.

  • Does previous verification with another registrar count?

No. DENIC requires verification through the current registrar process.

  • What happens during quarantine?

The domain no longer resolves, but DNS records remain stored.

  • Is there a redemption period after deletion?

No. Once deleted after quarantine, the domain cannot be recovered through a redemption grace period.

  • Can several domains be affected at once?

Yes. If multiple .DE domains use the same contact details, all of them may be affected together.

Was this article helpful?
Additional questions? Submit a request