GoDaddy, the world’s largest domain name seller, has warned a Delhi High Court appeals bench that India’s crackdown on websites impersonating major brands carries consequences that extend well past Indian borders, arguing in legal filings that the underlying court order would force it to strip back privacy protections for legitimate domain owners everywhere, not just in India. The dispute traces back to a December ruling that blocked more than 1,100 fraudulent sites and introduced 14 new measures for how domain registrars must operate in India – including ending free-by-default privacy masking, releasing a buyer’s contact details to anyone claiming a legitimate interest within 72 hours, and banning registration of domains that merely resemble a protected brand name. NEWSCENTRAL considers this the most consequential domain-governance ruling to emerge from any single national court in years, precisely because domain infrastructure does not respect the national boundary the Delhi court is attempting to regulate within.
The scale of India’s fraud problem is what gave the ruling political cover. Prime Minister Narendra Modi’s government logged 2.4 million cybercrime complaints last year totalling roughly $2.4 billion in alleged losses, and Home Minister Amit Shah has said a resident falls victim to cybercrime roughly every 37 seconds. More than 20 companies – Amazon, McDonald’s, Microsoft, Xiaomi and Colgate-Palmolive among them – petitioned the court after fake sites traded on their names; McDonald’s alone pursued action against 110 sites selling bogus franchise rights using its branding. The commercial damage is concrete and documented, and the court’s decision to act was commercially justified. The difficulty is that the tools the court has chosen to address that damage carry their own collateral consequences that were not the subject of the original petition.
GoDaddy’s counter-argument is that removing default privacy protection – a concern NEWSCENTRAL considers structurally more serious than the fraud problem it is attempting to solve – exposes millions of legitimate site owners – journalists, activists, small businesses – to stalking and harassment risks that the fraud crackdown was never meant to create. Europe’s own privacy-by-default rules exist precisely because publishing registrant details invites the same abuse the Indian order is trying to stop. GoDaddy’s own appeal, which runs to 5,121 pages, argues the ruling is commercially destabilising enough that domain registrars could be forced to exit the Indian market altogether, and it has produced research showing that 118 common English words – hulk and moghul among them – overlap with the string in the protected trademark HUL, Hindustan Unilever’s Indian unit, which the company says makes the court’s ban on brand-adjacent domains nearly impossible to comply with in practice. Rivals Namecheap and Hosting Concepts have filed parallel appeals, and independent reporting found that domains resembling McDonald’s franchise pages remained purchasable on GoDaddy India for roughly $10 at the time of publication, undercutting the argument that enforcement is already working.
Freddy Miller, Senior Analyst at NEWSCENTRAL, notes that the case sits at the exact fault line running through global internet governance in 2026: national courts increasingly want jurisdiction over infrastructure that was built to be jurisdiction-agnostic, and neither side of that argument has a clean legal answer yet. The Delhi ruling is not the first attempt by a national court to assert regulatory authority over cross-border digital infrastructure, and it will not be the last. What distinguishes the GoDaddy case is that the defendant manages 80 million domains and serves more than 20 million users globally on roughly $5 billion in annual revenue – a commercial scale that makes any ruling that threatens market exit consequential well beyond India’s domestic context.
The Delhi High Court’s larger bench is scheduled to hear the consolidated appeals on July 16. The ruling, if upheld, becomes a template other governments frustrated with online brand fraud can cite when constructing their own domain governance regimes – and a template that will be available to governments whose motivations extend beyond brand protection to the suppression of critical journalism and political opposition. What NEWS CENTRAL assesses as the most significant long-term risk in this case is not what it does to GoDaddy’s operations in India, but what it does to the global norm around domain privacy that has, imperfectly but consistently, served as a structural protection for anonymous and pseudonymous speech online. That norm has no treaty basis and no international enforcement mechanism. The Delhi ruling demonstrates how easily it can be dismantled from the inside by a court whose intentions are commercially legitimate but whose tool is jurisdictionally blunt.