Skip to main content

Advisory Concerning Deceptive Notices from "Change Dispute Resolution"

Summary. ICANN has recently received many reports of domain-name registrants receiving "Domain Dispute Notification" mailings from an entity identifying itself as "XChange Dispute Resolution." The mailings falsely state that XChange is an "ICANN authorized arbitrator" and that the registrant must mail in a "security deposit fee" to defend "ownership of the domain name."

Registrants are warned not to be tricked by these false notices.

Details of the False Notices. These notices are addressed to domain-name registrants, identify a domain name, and state that "XChange Disputes has received a Domain Dispute Resolution Complaint (DDRC) under the Uniform Domain Resolution Policy (UDRP) estabished by the Internet Corporation for Assigned Names and Numbers (ICANN) ... " The notification also warns "You are required under the UDRP to participate in this arbitration case or relinquish ownership of the domain. If you accept the loss of control of this domain to Party A then no reply is required from yourself."

The mailing (to see a copy click here) instructs the recipient to "defend" the identified domain name by returning a completed form along with a "security deposit." The requested security deposit, which appears to range from $250 to $1250, is allegedly required from the registrant in order to "ensure a genuine belief of ownership ...". The mailing instructs registrants to send a check for the security deposit, made payable to "XChange Reciprocal Services" at 490 Fallon Road, Petaluma, CA 94952-9655. The notices all appear to be signed by "Janice Veneno, Dispute Resolution Service Representative, XChange Dispute Resolution (an ICANN authorized arbitrator)." A page of "Dispute Guidelines" attached to the notices states that "As an ICANN-certified UDRP arbitrator we follow the rules and regulations set out by the ICANN committee" and that the "security deposit" will be "returned to the registrant at the end of the dispute process whatever the outcome."

The True Facts. The sender of these notices has not been approved by ICANN as a provider of dispute-resolution services under ICANN's Uniform Domain-Name Dispute-Resolution Policy (UDRP). The authoritative list of all approved providers is posted on the ICANN website at <>. ICANN's UDRP does not allow dispute-resolution service providers to demand a "security deposit" from registrants, and does not deprive registrants of the rights to their names solely because of a failure to reply to a notice of a dispute.

What to Do If You Receive the Notice. By all means, do not send money as requested by this notice! Instead, please contact an appropriate governmental law enforcement/consumer protection agency to report the incident. If you wish, you can fax the notice to ICANN at +1 310 823-8649; we may pass it on to an appropriate law-enforcement agency.

More Announcements
Domain Name System
Internationalized Domain Name ,IDN,"IDNs are domain names that include characters used in the local representation of languages that are not written with the twenty-six letters of the basic Latin alphabet ""a-z"". An IDN can contain Latin letters with diacritical marks, as required by many European languages, or may consist of characters from non-Latin scripts such as Arabic or Chinese. Many languages also use other types of digits than the European ""0-9"". The basic Latin alphabet together with the European-Arabic digits are, for the purpose of domain names, termed ""ASCII characters"" (ASCII = American Standard Code for Information Interchange). These are also included in the broader range of ""Unicode characters"" that provides the basis for IDNs. The ""hostname rule"" requires that all domain names of the type under consideration here are stored in the DNS using only the ASCII characters listed above, with the one further addition of the hyphen ""-"". The Unicode form of an IDN therefore requires special encoding before it is entered into the DNS. The following terminology is used when distinguishing between these forms: A domain name consists of a series of ""labels"" (separated by ""dots""). The ASCII form of an IDN label is termed an ""A-label"". All operations defined in the DNS protocol use A-labels exclusively. The Unicode form, which a user expects to be displayed, is termed a ""U-label"". The difference may be illustrated with the Hindi word for ""test"" — परीका — appearing here as a U-label would (in the Devanagari script). A special form of ""ASCII compatible encoding"" (abbreviated ACE) is applied to this to produce the corresponding A-label: xn--11b5bs1di. A domain name that only includes ASCII letters, digits, and hyphens is termed an ""LDH label"". Although the definitions of A-labels and LDH-labels overlap, a name consisting exclusively of LDH labels, such as"""" is not an IDN."