Procedure for a Registrar’s Verification of Identity and Contact Information

Version 1.1, 1. July. 2026

1. Background

1.1 The "Addendum to Registrar Contract on Verification of Identity and Contact Information" allows Registrars to verify their registrants' identity and contact information. This procedure describes what information the Registrar must verify, and when Punktum dk may require certain methods to be used for verifications. In addition, it describes what documentation Punktum dk may require if Punktum dk conducts checks on the Registrar's verification.

1.2 Identity and contact information in this procedure include name, address, and e-mail address.

1.3 The Registrar is still obliged to ensure that the information is accurate, including telephone number, in accordance with the provisions of the Registrar Contract, regardless of whether the Registrar chooses to verify identity and contact information pursuant to this procedure or not.

2. Definitions

2.1 Natural person: A human being.

2.2 Legal person: A legal entity that is not a natural person. The term covers both companies and e.g. states, municipalities, other public institutions, organizations, associations and, in this procedure, also sole proprietorships.

2.3 Active response: The registrant actively confirms the accuracy of the contact information on record. This must be done by the registrant responding to an email sent to the registered email address. The active response can be part of established processes and happen, for example, when an email is sent to the registrant for verification of name and address, to which the registrant responds.

2.4 Contact: A user who hasn't yet been designated as a registrant on a domain.

2.5 Registrar: A Registrar who has entered into a Registrar Contract with Punktum dk.

3. Identity and contact information verification arrangements

3.1 The Registrar may have a third party, including a reseller, to carry out the verification. The Registrar is Punktum dk's contractual party in accordance with the Registrar Contract.

3.2 The rules of this procedure apply regardless of whether the Registrar has carried out the verification of the registrant's identity and contact details or had it carried out by a third party.

3.3 Before a contact has been created in Punktum dk's systems, the Registrar can always choose to verify the contact's identity and contact information, regardless of whether the contact later will be managed by the registrar or the registry. In that case, the Registrar shall ensure that the identity and contact information of the contact are verified using the approved verification methods set out in section 5 - 7 of this procedure.

3.4 After the contact has been created in Punktum dk's systems and designated as a registrant on a .dk domain name, the Registrar may choose one of two possible methods, cf. sections 3.5 and 3.6, for verification of registrants' identity and contact information.

3.5 The Registrar may choose to verify the identity and contact information of its registrants managed by the Registrar after the contact has been created in Punktum dk's systems and designated as a registrant on a .dk domain name (arrangement 1). This mean that:

  1. The Registrar shall verify the identity and contact details of all registrants where required, as set out in section 4.
  2. The Registrar shall verify both the registrant's identity and contact information in the situations described in section 4 of this procedure.
  3. Punktum dk can perform MitID controls of registrant's resident in Denmark if Punktum dk cannot match and lock the registrant to the CVR (Central Business Register) or CPR (Central Personal Register), regardless of whether the registrant's identity and contact information have already been verified by the Registrar.
  4. Punktum dk can verify the registrant's identity and/or contact information in special cases, for example if Punktum dk, pursuant to the executive order on the internet domain .dk or the NIS2 executive order, receives a notification regarding a reasonable suspicion that the information is not accurate, regardless of whether the registrant's identity and contact information have already been verified by the Registrar.

3.6 The Registrar may choose that Punktum dk shall be responsible for verifying the identity and contact details of the Registrar’s registrants (arrangement 2). This means that:

  1. Punktum dk carries out the verification of registrants' identity and contact information after the contact has been created in Punktum dk's system and designated as a registrant on a .dk domain name.

3.7 The Registrar may change its choice between method1 or 2 at any time. Ongoing and not yet completed verifications must be completed by the party responsible at the initiating of the verification.

4. Situations where identity and contact details must be verified

4.1 Verification of name (identity) and address must be done:

  1. When registering or transferring a .dk domain name to a new registrant, if the registrant is resident in Denmark, unless the registrant's name and address have already been verified in connection with one of the registrant's existing domain names.
  2. If the Registrar suspects that the name and/or address are not accurate.
  3. If the contact information for a registrant resident outside Denmark has not been verified, and Punktum dk's risk assessment indicates that there is a risk that the information is not correct.
  4. For a registrant resident outside Denmark, verification must take place at registration and transfer to a new registrant if Punktum dk's risk assessment shows that there is a risk that the information is incorrect.
  5. If Punktum dk notifies the Registrar that the name and address must be verified.

4.2 Updating a registrant's name is done by Punktum dk, for example if the registrant changes his or her surname. If the Registrar wishes to change the registrant's name (identity), this must be done by transferring the .dk domain name to a new registrant.

4.3 Verification of e-mail address must be done:

  1. When registering or transferring a .dk domain name to a new registrant, unless the registrant's e-mail address has already been verified in connection with one of the registrant’s existing domain names.
  2. When updating the e-mail address.
  3. If the Registrar suspects that the e-mail address is not accurate.
  4. If Punktum dk notifies the Registrar that the e-mail address needs to be verified.

5. Approved documentation methods

5.1 The following can be used as documentation of the name and address of natural and legal persons resident in Denmark:

  1. MitID.

5.2 The following can be used as documentation of the identity of natural persons resident outside Denmark:  

  1. E-ID,
  2. passport with photo combined with recently taken selfie,
  3. national driver's license with photo combined with recently taken selfie,
  4. national identity card with photo combined with recently taken selfie,
  5. bank transfer to the Registrar where the name of the payer matches the name of the registrant, or
  6. Video identification (video of registrant with passport/driving license/ID card with photo).

5.3 The following can be used as documentation of the address of natural persons resident outside Denmark:

  1. E-ID with address,
  2. document from a utility company (gas, electricity, water, internet or telephone),
  3. document from a bank,
  4. invoice for rent or rental agreement, or
  5. document from an insurance company.

5.4 The following can be used as documentation of the identity of legal persons resident outside Denmark:

  1. E-ID,
  2. two types of documentation provided by a public authority, at least one of which is not publicly available,  
  3. bank transfer to the Registrar where the name of the payer matches the name of the registrant, or
  4. documentation from a company register combined with verification of the identification of a natural person who is authorized to act on behalf of the company according to the company documentation. The verification of the natural person must be carried out as described in clause 5.2 or by a notary.

5.5 The following can be used as documentation of the address of legal persons resident outside Denmark:

  1. E-ID with address,
  2. document from a utility company (gas, electricity, water, internet or telephone)
  3. document from a bank,
  4. invoice for rent or rental agreement, or
  5. document from a public authority.

5.6 The following requirements apply to the documentation:

  1. The documentation must show the registrant's name, which must match the name the registrant is or will be registered with Punktum dk.
  2. Documentation used for verification of address must also show the registrant's address, which must match the address the registrant is or will be registered with Punktum dk.
  3. If documents, including invoices, bank statements or rent agreements, are used as documentation of address. These must be dated and may not be dated more than three months before the date of initiation of the verification.

5.7 If a documentation method meets the requirements for verifying both name and address, the name and address can be verified at the same time using the same method, for example MitID, which verifies name and address at the same time.

6. E-mail addresses

6.1 E-mail addresses must be formatted in accordance with RFC5322 or later standards that replace it, and it must be ensured that the e-mail address is functional and enables contact.

6.2 The following can be used as documentation for e-mail addresses:

  1. The registrant's active response to having received an e-mail sent to the e-mail address with which the registrant is registered with Punktum dk.

7. Pre-approved in-depth onboarding process

7.1 For verification of name, address and e-mail address for registrants resident outside Denmark, a pre-approved in-depth onboarding process may be used instead of the methods described in section 5 and 6.

7.2 To be able to use the pre-approved in-depth onboarding process, Punktum dk must have approved that the specific Registrar can use this form of documentation before use.

8. Lack of verification of registrant

8.1 A new .dk domain name will only be activated after the registrant's e-mail address and, if necessary, name and address have been verified.

8.2 Verification of an existing registrant's identity and contact information must be completed within 30 days from the initiation of the verification process. If verification is carried out based on a notification from Punktum dk that verification is required, the 30-day period shall be counted from the day that Punktum dk notifies the Registrar that verification must take place.

8.3 The deadline for completing a data and ID control may be shortened to 10 days if exceptional circumstances so require.

8.4 If Punktum dk does not within the deadline receive notification from the Registrar that the verification has been completed, Punktum dk may suspend all the .dk domain names the registrant has registered with the relevant contact information.

8.5 If the registrant does not complete the verification during the suspension period, the .dk domain name or .dk domain names will be deleted after a 30-day suspension period.

9. Checking and storing documentation

9.1  Punktum dk may check the Registrar's compliance with obligations under this procedure in accordance with the rules of the Registrar Contract.

9.2 Punktum dk may require documentation of verifications carried out within the last 30-day period at any given time, and therefore the Registrar must be able to present the specific documentation, cf. section 5 - 7, for specific verifications conducted within this period.

9.3 As documentation for verifications of name and address, Punktum dk may require the following:

  1. E-ID: Log file containing the individual transaction with the e-ID, name and also address, if the e-ID has been used to document the address.
  2. Documents (including passport, driver's license and ID card), selfie and video: Copy of the specific documents, selfie or video.

9.4 As documentation for verification of e-mail address, Punktum dk may require the following:

  1. The active response from the registrant combined with the e-mail sent to the registrant. The active response must include the timestamp and date. Depending on the method used, it can be a confirmation e-mail and/or log file.

9.5 As documentation in a pre-approved in-depth onboarding process, Punktum dk can, among other things, require the documents etc. used in the onboarding process.