ICANN holds its 86th public meeting in Seville from June 8 to 11, and the agenda carries more weight than usual for anyone in the domain registration business. Among the proposals under discussion is one that would require registrars to investigate every domain tied to a customer account whenever a single domain in that account draws an actionable abuse complaint. That shift, if it eventually hardens into a contractual requirement, would fundamentally change how registrars handle abuse investigations.
The logic behind the proposal reflects how abuse campaigns actually operate. Criminal operations running phishing infrastructure rarely register a single domain. They typically register dozens through the same account, often using similar payment methods and registration patterns.
Under current rules, a registrar receiving a complaint about one of those domains carries no obligation to examine the rest. The proposal, sitting within a Policy Development Process called PDP1, would close that gap by requiring account-wide reviews whenever an actionable complaint arrives.
Registrars have raised legitimate concerns about the practical burden this creates. A high-volume provider handling thousands of abuse reports monthly would need to considerably expand each investigation. The proposal uses flexible language around what counts as sufficient investigation rather than a fixed checklist, which the registrar community argues generates unpredictable compliance obligations. Seville will not produce binding decisions, but the community’s reception of the proposal this week will shape how the working group refines it over the months ahead.
Alongside the abuse proposals, ICANN86 marks the first time AI’s role in domain-based abuse reaches the main plenary agenda. The concern is specific. AI tools now let anyone generate convincing phishing sites at scale, automate domain registrations across thousands of accounts, and improve malicious content quality faster than human reviewers can track. ICANN’s existing framework assumes abuse operating at human scale, and the gap between that assumption and current reality keeps widening.
The meeting also arrives ten weeks before the August 12 deadline for the 2026 new gTLD application window, which opened April 30. Operational sessions in Seville will address evaluation procedures and timelines for applicants still working through the process. The base application fee sits at $227,000, though ICANN offers reduced fees for qualifying applicants from developing economies.
For registrars and hosting companies with domain registration operations, this week’s sessions deserve close attention.
