ICANN Warns Domain Registrar IPIP Over RDAP and Data Escrow Failures

ICANN has issued a formal breach notice to IPIP Inc. after finding problems with the registrar’s RDAP service, data escrow deposits and accreditation fees. IPIP has until 26 August 2026 to put the issues right.

By Hasnaat Mahmood Published Updated
Ech, the Find Cheap Domains mascot

Ech’s short answer

IPIP has 21 days to cure the breaches

ICANN says the registrar’s RDAP service was not working, required registration data had not been deposited on schedule and accreditation fees were overdue. If IPIP does not resolve the breaches by 26 August, ICANN may begin the accreditation termination process.

  • RDAP queries failed
  • Data escrow deposits were missed
  • Cure deadline: 26 August 2026

The notice, dated 5 August, concerns IPIP Inc., an ICANN-accredited registrar with IANA number 3774. It follows several compliance contacts earlier in 2026 that ICANN says did not produce enough evidence that the registrar had met its obligations.

A breach notice is a formal enforcement step, but it is not an immediate termination. IPIP remains in a cure period while ICANN waits for the required fixes and supporting information.

Part 01

ICANN listed three breaches in its formal notice

The enforcement action covers registration data access, data escrow and unpaid accreditation fees.

ICANN says IPIP failed to provide a working Registration Data Access Protocol service for the active generic top-level domain names it sponsors. The service was also expected to use ICANN’s current technical implementation guide and response profile.

The notice also says IPIP did not make its required data escrow deposits on time and owed past-due accreditation fees. A separate noncompliance finding concerned the absence of a clear homepage link explaining how to request disclosure of non-public registration data.

Part 02

ICANN says every tested RDAP query failed

RDAP is the current system used to retrieve domain registration data.

IPIP had registered an RDAP base address with IANA, but ICANN says the service was not functioning. According to the notice, all of the domain queries it tested failed to return registration data for names sponsored by the registrar.

ICANN has asked IPIP to show that its service offers free public query access to current registration data and uses the February 2024 version of the required RDAP profile. The registrar must also provide a sponsored domain that ICANN can use for monitoring.

RDAP replaced the old WHOIS protocol for gTLD data access

Registrars are expected to operate an RDAP service that responds consistently and follows ICANN’s published technical profile.

Part 03

Data escrow provides a backup if a registrar fails

ICANN-accredited registrars must deposit gTLD registration records with an approved escrow provider on a set schedule.

The deposits are intended to preserve the information needed to protect and recover registrations if a registrar closes, loses its accreditation or cannot continue operating. ICANN says IPIP did not deposit the required data under the agreed schedule and terms.

The cure notice requires IPIP to resume weekly deposits with an approved data escrow agent and make sure the files meet the current specification. ICANN also wants all overdue accreditation fees paid.

ICANN described the missing deposits as a registrant risk

The notice says incomplete escrow records could leave customers without a recovery route if the registrar failed or its accreditation ended. It does not announce that IPIP has failed or that customer domains are being transferred now.

Part 04

ICANN could not find several required details on IPIP’s website

The notice raises additional concerns about customer information, abuse reporting and company contacts.

  • An accessible email address or form for abuse reports
  • A description of how abuse reports are handled and tracked
  • A link to registrants’ benefits and responsibilities
  • The registrar’s correspondence address
  • The names and positions of the registrar’s officers
  • A homepage link explaining disclosure request procedures

IPIP must provide ICANN with links showing where this information is published. It must also explain what steps it will take to respond fully and on time to future contractual compliance requests.

Part 05

The next key date is 26 August 2026

IPIP must cure the breaches and give ICANN the requested evidence within 21 days of the notice.

  1. Restore RDAP Return current registration data and use the required profile.
  2. Resume escrow deposits Submit weekly records to an approved data escrow agent.
  3. Pay overdue fees Settle the accreditation fees listed in the notice.
  4. Publish required information Add the missing disclosure, abuse and company details.
  5. Show how compliance will improve Provide remediation measures and implementation dates.

If IPIP does not meet the deadline, ICANN may start the process of terminating its registrar accreditation. That would be a further enforcement step rather than an automatic result on 26 August.

ICANN’s compliance notices page is the best place to check whether the breaches are cured, the deadline is extended or the case moves to another stage.

Ech, the Find Cheap Domains mascot

Bottom line

IPIP is under formal notice, but the case is still open

ICANN has given the registrar a clear list of fixes and a 26 August deadline. The next update will show whether IPIP has cured the breaches or whether enforcement moves towards termination.

Hasnaat Mahmood

Written by

Hasnaat Mahmood

Hasnaat is the founder of Find Cheap Domains and personally manages a portfolio of more than 300 domains. His experience covers domain selection, registrations, renewals, transfers, DNS management and long-term ownership costs.

Domain portfolio owner · 300+ domains managed