Recently we have seen a marked increase in the number of .uk domain names being used for phishing purposes. One phishing syndicate seems to be particularly prolific and may attempt to register domains through you.  If you are targeted you may be contacted by various security companies, the police or trading standards about the activity that is occurring on these domains. 

If you identify that a domain name has been registered through your tag for phishing purposes, you have a number of options:

1. Remove the nameservers and the web site (if you host it) and lock the customer out.  This action is allowable within your contract with us.
2. Delete the domain name - you can do this through the Automaton or EPP up until the 7th of the month following registration.
3. Detag the domain name

Please note: Before taking action you should ensure that you are satisfied that the domain name is being used for phishing purposes or similar criminal activity.

You may also want to ensure that your terms and conditions give you the power to take action in these situations.

If you need to delete a domain but you have passed your deletion quota, please contact us on:
01865 332233 (during business hours) 
01606 866663 (after hours)

Additional information on this phishing activity is available on our technical blog.

The PAB will be looking at this issue further at their next meeting and will look at how we can develop best practice advice that registrars and Internet users can benefit from. 

In the meantime we would advise all registrars to be especially vigilant and if you have a current policy that you would be prepared to share, or ideas on what best practice should entail please let us know.

If you have any questions or need any more help, please contact our support team on 01865 332233 or email support@nominet.org.uk.