The China domain name registration scam, initially reported in 2010, continues to be perpetrated by con artists. Despite being widely recognised, these fraudsters are still devising means to deceive unsuspecting individuals into purchasing unnecessary domain names. While there is considerable coverage of this scam and it even has a dedicated Wikipedia entry, many individuals remain uninformed about its operation.
How the China Domain Name Registration Scam Works?
The scam usually involves a mail to domain owners from .cn that is from registrars based in China claiming that another company has just attempted to register a domain with them which contains the targeted domain owner’s trademark. The mail usually reads as follows:
“Dear Manager,
(If you are not the person who is in charge of this, please forward this to your CEO, because this is urgent. Thanks!) This email is writing from a Network Service Company which is the domain name registration center in Shanghai, China.On September 30, 2024, we received an application from Wanbang Holdings Ltd requested “adas-ltd” as their internet keyword and China (CN) domain names( adas-ltd.cn/ adas-ltd.com.cn/ adas-ltd.net.cn/ adas-ltd.org.cn).After checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, we send email to you and confirm whether this company is your business partner in China?”
If unsuspecting users engage with the email, the fraudster will assert that they have paused the registration process to safeguard the targeted person’s intellectual property. They will urge recipients who do not recognise the organisation attempting to register these domain names to respond swiftly to protect their trademarks. Should the targeted individual reply via email or phone, the scammer will attempt to persuade them to register these .cn domain names for multiple years in advance with the registrar behind this scam.
Numerous blog posts from domain owners have emerged addressing this matter, with some reporting annual fees exceeding £3,000. Users are warned that these messages originate from scammers, and there is no necessity for any website to register under the .cn domain for any purpose. It’s advisable to disregard such emails and block the senders to prevent further contact.
Combatting Chinese domain name scams, or any cyber threat, requires vigilance, understanding, and preparedness. Basic cyber resilience training equips individuals and organisations with the skills and knowledge necessary to protect themselves against malicious actors. By fostering a culture of awareness and implementing effective security measures, you can fortify your defences against these persistent scams and contribute to a safer digital environment. Investing in training not only protects your organisation’s assets but also reinforces trust with your stakeholders.