NIS2 and Contact Validation: Everything You Need To Know

What is the NIS2 Directive?

The NIS2 Directive is an EU-wide law designed to improve cybersecurity and data accuracy across digital services, including domain name registrations. It introduces strict requirements for collecting and verifying registrant contact data. You can read the official directive on the European Commission's website.

Who is affected by the new regulations?

NIS2 applies to all domain holders, including EuroDNS customers. This includes individuals, organizations, and resellers who register or manage domain names for others.

Is NIS2 only for EU domains?

No. The regulation applies to all domain names, not just EU-specific TLDs. Verification will occur periodically.

When and how will the verification process take place?

• When registering a new domain name: You’ll be asked to complete verification during the registration process.

• When verification is due for expiration: You’ll receive periodic re-verification notices. 

What will verification look like for EuroDNS customers?

Verification is required for all contact details (email address and/or phone number).

These are the contact details of the account holder and domain owner associated with the registered domain name.

Phone numbers will be verified via SMS or voice call; email addresses via a confirmation link.

This applies to all domain names.

How will verification be done?

Phone numbers will be verified via SMS or voice call (mobile or landline), and email addresses via a confirmation link.

When is verification required?

You’ll need to verify your email address and phone number when registering, renewing, or transferring a domain. This applies to all domains.

How can I see which domains require validation?

You will see alerts in your Control Panel for any domains requiring validation.

We will also send 3 reminders before your periodic verification is due.

What is periodic verification?

Contact detail verifications expire one year after the original validation date. Re-verification is required annually. You will receive 3 reminders (30, 15, and 1 day before expiry) until verification is completed.

Are there any differences between the account holder's and registrant's (domain owner) verification processes?

Both the account holder and the domain owner associated with a domain must be verified. Each will receive an email when domains in their profile require verification.

Important note for resellers using the API for domain registrations

New NIS2 Contact Verification process and requirements is applicable to all resellers.

• Validation cannot occur during the domain order process, as registration is handled via API.
• If the contact information has not been previously verified, the domain will be registered but remain parked until verification is completed.
• Unverified contact (both account holder and domain owner) linked to the registered domain will receive an email containing a verification link. 

Resellers should contact their customers directly regarding NIS2 verification requirements and ensure data accuracy.

Could I be asked to submit ID or business documents?

Yes. Some registries may require additional documentation in line with Know Your Customer (KYC) policies. You may be asked to upload ID or company registration proof. We’ll guide you through the process if needed.

Will I need to log in to verify my phone number?

No. To avoid phishing, the phone number verification page will not require login. You’ll only need to enter the code received by SMS or voice call.

Should I use the same contact info for everything?

Private customers should use the same email and phone number for their EuroDNS account and domain contact profile. This simplifies verification and improves data accuracy.

What if I am part of an organization?

If you’re registering on behalf of an organization, use separate contact info for your EuroDNS account and domain contact profile. Both must still be verified.

Are these verifications mandatory?

Yes. Verification is required for new registrations, renewals, transfers, and periodic rechecks of existing domains.

What happens if I don’t verify?

Domains will not activate without completed verification. Existing domains may be suspended until verified.

Will my information be made public?

If you're an individual, your data will remain redacted in WHOIS where possible. Organizations may have some public exposure depending on registry policy. EuroDNS uses secure verification pages, never stores documents unnecessarily, and only requests data required for compliance.

What should I do to prepare?

Log in to your EuroDNS account, review your domain contact profiles, and make sure your email and phone number are accurate and active.

What if my data is flagged by a registry?

We will notify you with instructions to correct the data. If the issue is not resolved, the registry may suspend or delete the domain.

Does EuroDNS keep verification records?

Yes. We log the date, method, and result of each verification. Personal documents are only stored if required by the registry.

How can I get help?

If you need assistance, contact EuroDNS Support. We’ll continue to keep you informed via email and support pages as NIS2 enforcement progresses.