Search Your Queries Related To Trilegal
Update

Beyond takedowns: Delhi High Court’s framework for tackling domain name infringements

26 Feb 2026

Policy advisory legal update

In a significant ruling arising from a batch of suits led by Dabur India Limited, the Delhi High Court has moved beyond case-by-case takedowns to articulate a systemic enforcement framework targeting large-scale domain name-based intellectual property infringement. The judgment also addressed the recurring misuse of well-known trademarks in infringing domain names and recalibrated the responsibilities of intermediaries operating within the domain name ecosystem.

Partners: Tine Abraham, Jyotsna Jayaram and Kirti Balasubramanian, Counsel: Thomas J. Vallianeth, Senior Associate: Shourya Bari, Associates: Paarth Samdani, Padmavathi Prasad and Vivek Krishnani

1.Introduction

In a recent ruling addressing the misuse of domain names for large-scale financial frauds, the Delhi High Court (Court) issued a series of directions to multiple stakeholders, including domain name registrars (DNR), registry operators (Registry Operators), government authorities, and banking institutions.1

The directions were issued in a batch of matters led by a suit filed by Dabur India Limited (Dabur), which alleged systemic misuse of its intellectual property by unidentified third parties. These third parties had registered and operated multiple domain names incorporating the ‘DABUR’ mark, such as daburfranchise.com, daburfranchisee.in, and daburdistributor.com, and created websites to solicit payments and defraud unsuspecting members of the public.

Typically, in such cases, aggrieved rights holders were constrained to seek ad-interim injunctions for taking down or blocking specific infringing domain names, along with directions for disclosure of registrant details. However, given the ease with which new domain names can be registered, the anonymity afforded by privacy and proxy services, and the involvement of multiple intermediaries across jurisdictions, such relief often proved insufficient.

Recognising the similar and recurring nature of the allegations across the various cases, the Court undertook a consultative and technical examination of the roles and responsibilities of key stakeholders, including the Ministry of Electronics and Information Technology (MeitY), Internet Corporation for Assigned Names and Numbers (ICANN), DNRs, Registry Operators, and law enforcement authorities.

Broadly, the Court’s analysis and directions were anchored to the following interrelated questions:

What are the obligations and liabilities of a DNR in preventing the registration and misuse of infringing domain names?
What measures can be taken against DNRs and Registry Operators to safeguard the trademark rights of the Plaintiff?
What enforcement measures can be taken to address non-compliance by DNRs?

2.Analysis of the Court’s judgment

Intermediaries, including DNRs and Registry Operators

Intermediaries are eligible to avail safe harbour protection (i.e., exemption from liability for third-party content) so long as they satisfy the functional criteria under Section 79 of the Information Technology Act, 2000 (IT Act), which require them to act as passive conduits. Established jurisprudence makes it clear that intermediaries that go beyond this passive role are not entitled to safe harbour protection.

In this judgment, the Court considered a DNR to be an active participant, rather than a passive conduit, based on certain activities such as actively profiting from infringement through actions like suggesting alternative infringing domain names, offering premium pricing, and providing related marketing services. Consequently, the Court held that such DNRs can be held liable as infringers, leading to a loss of safe harbour protection.

Against this backdrop, and to ensure that relief against infringing domain names is effective in practice, the Court issued the following binding directions to DNRs and Registry Operators:

Blocking or suspension of infringing domain names: Upon receipt of a court order, including a dynamic+ injunction,2 or a substantiated complaint from a rights holder, DNRs must expeditiously lock, suspend, or block access to infringing domain names. Such action must include maintaining status quo over the domain name, including preventing transfer, deletion, or creation of third-party interests.
Prevention of re-registration: Any domain name restrained by an injunction or found to be used for unlawful purposes must be permanently blocked at the registry level and must not be released into the common pool for re-registration by either DNRs or Registry Operators.
Scope of injunctions based on the nature of trademark rights: In the case of well-known or inherently distinctive trademarks, the Court clarified that an injunction may extend beyond the specific infringing domain name to cover different extensions or mirror and variant domain names, and directed DNRs to give effect to such broader orders. Conversely, where the mark is descriptive or generic, injunctions would ordinarily be confined to the specific infringing domain name, with any extension to additional domain names requiring an application before the Joint Registrar.
Privacy-by-default practices: The Court directed DNRs and Registry Operators to discontinue offering privacy protection as a default feature in domain name registrations, under which details of the registrant were hidden on public databases such as the WhoIs Registry. The DNRs and Registry Operators were instead directed to shift to an “opt-in” system where privacy protection is offered as a paid, value-added service.
Disclosure of payment information: In addition to disclosure of registrant identity details, DNRs and Registry Operators must provide courts and law enforcement agencies (LEA) with all available payment-related information associated with the registration of infringing domain names. The Court observed that such disclosures would assist in tracing individuals engaged in fraudulent activities.
e-KYC: The Court found deficiencies in the verification of registrant information by DNRs, leading to registrations supported by false or fictitious details. It accordingly directed all DNRs offering services in India to implement mandatory e-know your customer (e-KYC) procedures for registrants, similar to the framework already in place at the National Internet Exchange of India (NIXI) for ‘.in’ domain registrations.
Uniform implementation: Registry Operators were directed to ensure uniform implementation of these directions across all DNRs.

On the issue of enforcement, the Court criticised the practice of insisting upon service in accordance with bilateral or multilateral treaties, including the Hague Convention, as a pre-condition for compliance with court orders. It directed DNRs operating in India to appoint an India-based grievance officer and to treat service of court orders upon such officers through email as sufficient.

Finally, the judgment affirms the government’s powers under Section 69A of the IT Act, to completely block a non-compliant DNR’s services in India. The Court reasoned that repeated non-compliance could amount to a threat to “public order,” justifying such action.

Government and its agencies

The Court also examined the role of the government and its agencies, including MeitY, the Department of Telecommunications and the Ministry of Home Affairs, in addressing systemic enforcement gaps within the domain name ecosystem. It accordingly issued a combination of binding directions and facilitative recommendations:

Directions

  • Stakeholder consultation and regulatory framework: The Court directed the government, acting through the MeitY, to convene a stakeholder consultation involving all DNRs and Registry Operators offering services in India to examine the feasibility of implementing a consolidated and standardised framework governing domain name registrations.
  • Coordination with ICANN and access to the Trademark Clearinghouse: MeitY was further directed to coordinate with ICANN to enable Indian brand owners to access and utilise the Trademark Clearinghouse (TMCH), a global mechanism that allows trademark owners to record and verify their marks in order to obtain early warnings and priority protection against abusive domain name registrations. Registry Operators were also directed to take appropriate steps to implement and make TMCH-related information available to Indian brand owners.
Requests and facilitative measures

  • Centralised data repository: The Court requested the government to consider designating a nodal agency, such as NIXI, which indicated its capability to undertake such a task, to function as a centralised data repository for maintaining verified information relating to domain name registrants.
  • Publication of well-known marks: The Court also requested the Controller General of Patents, Designs, and Trade Marks to consider publishing a list of well-known marks, along with the official website details of the respective owners. Such a measure would enable consumers, DNRs, Registry Operators, and prospective registrants to assess whether a proposed domain name may be infringing existing rights.

Reserve Bank of India and banks

The Court underscored the critical role of the banking system in facilitating the execution of impersonation-based financial frauds. It identified systematic deficiencies that had impeded effective investigation of such frauds by LEAs, including: (a) delayed co-operation by banks, especially in responding to investigative requests, and (b) the relative ease with which fraudsters operated accounts bearing names unrelated to the brands they were impersonating.

Directions relating to investigation protocols

To address these gaps, by way of an interim order during the pendency of this proceeding, the Court had directed the Central Intelligence and Economic Bureau (CIEB) to issue a standard operating procedure (SoP) prescribing clear timelines and protocols for banks to process requests from LEAs. Pursuant to such direction, the CIEB had issued an SoP dated 31 May 2024. The Court has confirmed in this ruling that it is mandatory for all banks to strictly adhere to the SoP when processing requests from LEAs, thereby institutionalising a time-bound and uniform response framework.

Beneficiary account name verification

In addition, the Court directed the Reserve Bank of India (RBI) to introduce a ‘Beneficiary Bank Account Name Lookup’ facility across all online payment systems. This mechanism would enable payers to verify the beneficiary’s account name prior to completing transactions. The implementation of such a verification layer is likely to function as a structural safeguard, acting as a significant deterrent against impersonation-driven financial frauds.

3.Key takeaways and implications

The judgment signals the beginning of a potential shift in the Court’s approach to addressing online trademark infringement. Moving beyond case-specific relief, the Court has articulated a systemic enforcement framework that recalibrates the responsibilities of intermediaries. Notably, the ruling materially expands the remedies available to trademark owners (including the ability to seek disclosure orders against intermediaries) while simultaneously raising the compliance threshold for intermediaries operating within the Indian internet ecosystem.

That said, an important aspect to note here is that, while the judgment will operate as binding precedent within Delhi, it will only hold persuasive value for courts in jurisdictions outside Delhi. Its broader national impact will therefore depend on whether other High Courts adopt a similar approach.

The key implications for both rights holders and intermediaries are discussed below.

For trademark owners

  • Increased effectiveness of dynamic+ injunctions: Owners of well-known trademarks have been provided significant relief with DNRs now being required to take down mirror, variant, and alphanumeric domain names of well-known trademarks without specific takedown orders for each variant. However, owners of generic or descriptive trademarks would still need to approach the Joint Registrar to extend their injunction orders to other domain names.
  • Disclosure of registrant and payment details: This judgment may be relied upon by rights holders to seek disclosure of registrant information and associated payment details from DNRs, enabling them to identify the perpetrators and pursue parallel criminal investigations more effectively.
  • Registration with the Trademark Clearinghouse: Trademark owners may consider registering their trademarks with the TMCH to pre-emptively monitor domain name registrations and obtain early warnings in respect of potentially infringing domain names.
For DNRs

  • Implementing a user-verification process: The judgment requires DNRs to mandatorily implement an e-KYC verification process similar to the process put in place by NIXI. However, given that this requirement is not currently statutorily mandated for DNRs, its enforceability may be questioned, as a heightened standard of due diligence has been introduced by the Court. That said, as a good practice measure, DNRs could assess the effectiveness of their current user-verification processes and consider implementing more tailored user-verification processes voluntarily to demonstrate the heightened due diligence sought by the Court.
  • Evaluation of business models: The Court has narrowed the contours of the functions of an intermediary that would be considered to be “passive” and has observed that profiting from or algorithmically facilitating infringement would be construed as “active participation.” While this deviation may be subject to further legal scrutiny, intermediaries could consider assessing their existing models to identify features that could be viewed as moving beyond a passive role.
  • Prospective implementation of TMCH-related obligations: In light of the directions issued to MeitY, intermediaries, particularly Registry Operators, may need to prepare for the potential implementation of TMCH-related mechanisms, including operational and technical adjustments to support access to and use of TMCH or other similar services by rights holders.
  • Independent assessment of infringing domain names: Implementation of dynamic+ injunctions, particularly outside the context of well-known trademarks, may require DNRs to assess whether subsequently identified domain names fall within the categories specified in the injunction, including cases where the trademark appears identically, with a confusing prefix or suffix, or as an alphanumeric variation. This may place DNRs in the position of making threshold determinations on the scope of court orders at the implementation stage.

Given that the directions issued by the Court extend beyond the existing statutory framework, the judgment has been appealed before the Delhi High Court. That said, till the time the judgment is stayed, it is likely to (a) create the expectation of greater obligations upon intermediaries, and (b) influence the courts (largely in Delhi) in assessing intermediary conduct, particularly in disputes involving trademark misuse.


[1] Dabur India Limited v Ashok Kumar and Ors., CS (COMM) 135 of 2022.

[2] A dynamic+ injunction extends beyond traditional, static orders by automatically blocking not only identified pirated websites and their mirror sites (dynamic injunction) but also any future, newly created infringing websites or content that appear after the suit is filed.


If you require any further information about the material contained in this newsletter, please get in touch with your Trilegal relationship partner or send an email to alerts@trilegal.com. The contents of this newsletter are intended for informational purposes only and are not in the nature of a legal opinion. Readers are encouraged to seek legal counsel prior to acting upon any of the information provided herein.

Trending Articles

Subscribe to our Knowledge Repository

If you would like to receive content directly in your inbox from our knowledge repository, please complete this subscription form. This service is reserved for clients and eligible contacts.







    Let's connect

    Disclaimer

    Under the rules of the Bar Council of India, Trilegal is prohibited from soliciting work or advertising in any form or manner. By accessing this website, www.trilegal.com, you acknowledge that:

    • You are seeking information about Trilegal of your own accord and there has been no form of solicitation, advertisement or inducement by Trilegal or its members.
    • This website should not be construed as providing legal advice for any purpose.
    • All information, content, and materials available on this website are for general informational purposes only.
    • Any information obtained or material downloaded from this website is completely at the user’s volition, and any transmission, receipt or use of this website is not intended to, and will not, create any lawyer-client relationship.
    • Information on this website may not constitute the most up-to-date legal or other information. Trilegal is not liable for the consequences of any action taken by any person based on any material or information available on this website, or for any inaccuracy in or exclusion of any information or interpretation thereof.
    • Readers of this website or recipients of content or information available on this website should not act based on any or all such content or information, and should always seek advice of competent legal counsel licensed to practice in the appropriate jurisdiction.
    • Third party links contained on this website re-directing users to such third-party websites should neither be construed as legal reference / legal advice, nor considered as referrals to, endorsements of, or affiliations with, any such third party website operators.
    • The communication platform provided on this website should not be used for exchange of any confidential, business or politically sensitive information.
    • The contents of this website are the intellectual property of Trilegal.

    We prioritize your privacy. Before proceeding, we encourage you to read our privacy policy, which outlines the below, and terms of use to understand how we handle your data:

    • The types of information we collect and why we collect them.
    • How we use your information to provide a personalized experience.
    • The measures we take to ensure the security of your data.
    • Your rights and choices in managing your personal information.
    • How we may share information with trusted partners for specific purpose.

    For more information, please read our terms of use and our privacy policy.

    Up arrow