Policies and Guidelines

*In case of any discrepancy between this translation and the original Chinese text, the Chinese text shall govern. Terms in this translation expressed in the singular should be construed as also including the plural, and vice versa.

Announced on October 16, 2025

1. Foreword
   Taiwan Network Information Center (hereinafter referred to as "TWNIC") is the organization responsible for the registration management of country code Top-Level Domains in Taiwan, respects the right of domain registrants to legally use their registered domains for any or all purposes, and is committed to protecting users or the public from the threat of domain abuse.
   TWNIC will adopt all technical, legal, and other measures to actively prevent the abuse of country code Top-Level Domains, so as to maintain the integrity, trust, stability, and security of its country code namespace, and to protect the legitimate rights and interests of all stakeholders.
2. Definitions
   • (1) Domain Abuse: Refers to DNS Abuse or abuse activities determined to be illegal.
   • (2) DNS Abuse: Refers to phishing, malware, botnets, pharming, and spam when used as a delivery mechanism for the preceding forms of domain abuse.
   • (3) Phishing: Refers to attackers deceiving victims into disclosing sensitive personal, corporate, or financial information (e.g., accounts, login IDs, passwords), such as by sending fraudulent or "similar" emails, or enticing end-users to visit imitation websites.
   • (4) Malware: Refers to malicious software installed or executed on a device without the user's consent, which disrupts the device's operation, collects sensitive information, or accesses private computer systems. Examples include viruses, spyware, ransomware, and other unwanted software.
   • (5) Botnet: Refers to a collection of networked computers that have been infected with malware and can be controlled by a remote attacker to perform activities.
   • (6) Pharming: Refers to redirecting unknowing users to fraudulent websites or services, usually characterized by DNS hijacking or DNS poisoning. DNS hijacking occurs when an attacker uses malware to redirect the victim to the perpetrator's website instead of the originally requested website; DNS poisoning causes the DNS server (or resolver) to respond with an incorrect Internet Protocol (IP) address carrying malware.
   • (7) Spam: Refers to unsolicited bulk email, where the recipient has not authorized the email to be sent, and the email is sent as part of a mass mailing, all messages having substantially the same content. Domain abuse under this policy is limited to cases where spam is used as a delivery mechanism for the aforementioned other forms of domain abuse.
   • (8) Abuse activities determined to be illegal: Refers to the use of a domain violating Taiwan’s relevant laws, and following an administrative disposition by the competent authority or a court judgment, resulting in an order to take appropriate measures.
3. Scope of Application: .tw, .台灣(.xn--kpry57d) , and .台湾(.xn--kprw13d)
4. TWNIC’s Steps and Measures for the Prevention of Domain Abuse
   • (1) Steps for the Prevention of Domain Abuse
     • a. TWNIC accepts reports of domain abuse cases from government agencies, courts, and trusted notifiers accredited by TWNIC.
     • b. TWNIC also establishes a domain abuse contact to accept domain abuse report.
     • c. For submitting domain abuse report, the complaints shall provide necessary information under their real name and attach complete and valid evidence.
     • d. Except for abuse activities determined to be illegal, TWNIC will conduct an investigation based on the evidence to confirm whether there is a violation of this Policy, and produce investigation results. When necessary, TWNIC may require the complaint to provide further information or evidence.
     • e. TWNIC will take reasonable measures based on the investigation results, such as suspension, lock, or deletion.
     • f. After completing the measures, TWNIC will reply to the complaint and notify the registrant through the registrar regarding the reason for domain abuse, the processing result, and the method of appeal.
     • g. When there is evidence indicating that domain abuse behavior or activity is related to an Orphan Glue record, appropriate measures shall be taken to delete the Orphan Glue record.
   • (2) Measures for the Prevention of Domain Abuse
     • a. Suspension: Removing the domain name from the .tw, .台灣, or . 台湾 zone file. The domain name will become unresolvable. The domain name will be added the serverHold status according to the EPP (Extensible Provisioning Protocol) standard protocol.
     • b. Prohibition of Update/Transfer/Deletion: Locking the domain name, preventing registration data or DNS record update, interregistrar transfer, or domain deletion, but without affecting domain resolution. The domain name will be added the serverUpdateProhibited, serverTransferProhibited, or serverDeleteProhibited status, respectively, according to the EPP (Extensible Provisioning Protocol) standard protocol.
     • c. Redirection: Modifying the result of DNS resolution to a designated IP address.
     • d. Inter-registrar Transfer: Transferring the domain name to a designated registrar.
     • e. Domain Deletion: Revoking the registrant's right to use the domain and releasing the domain. Domain deletion is an ultimate measure and shall only be executed following a careful investigation or a final determination, such as an order for illegal abuse. If the registrant fails to file an appeal or provide supporting documentation proving relief sought from the competent government authority or court within ten working days after TWNIC notifies the registrant of the decision to delete the domain, TWNIC will execute the deletion; during this period, other appropriate measure will temporarily be applied. Other appropriate measure will also be applied during the appeal period, and the execution (deletion or non-deletion) will be based on the final decision after the appeal period ends.
     • f. No Action: Reported cases that are not domain abuse or lack sufficient evidence will not be processed.
     • g. Require Registrant Action: Notifying the registrant (or notifying the registrant through the registrar) to address the issue.
5. Steps for Registrars to Prevent Domain Abuse
   • (1) Establishing a domain abuse contact on the service website.
   • (2) Taking reasonable and timely measures, conducting investigations and processing based on evidence, and appropriately responding to reports of any domain abuse behavior.
   • (3) When there is clear evidence that a domain under their management is involved in domain abuse, the registrar should immediately take reasonable and necessary measures to stop the domain from being abused, considering the cause, severity, and possible collateral damage, and, if necessary, notify TWNIC for assistance in investigation and processing.
   • (4) After completing the measures, complete records of related reports, measures, and processing replies shall be maintained. TWNIC may audit these records when necessary.
6. Appeal
   • (1) After a registrant’s domain is subject to measures under this Policy by TWNIC, they may appeal through TWNIC’s appeal contact.
   • (2) When appealing, the registrant shall provide the real name, proof of identity (or organization), domain name, contact information, reasons for the appeal, and evidence proving no violation of this Policy
   • (3) After confirming acceptance of the appeal application, TWNIC will reply with the result of the appeal processing within fifteen working days.
   • (4) During the appeal period, TWNIC reserves the right to temporarily revoke the original measures, if necessary for investigation purposes.
   • (5) If the investigation of an appealed case determines that there was no violation of this Policy, TWNIC shall revoke the original disposition measures, except for the measure of domain deletion.
7. Policy Adjustment / Legal Application / Other
   • (1) TWNIC has the right to revise this Policy in accordance with Taiwan’s laws or policies, and to announce it on TWNIC’s webpage or notify registrants via email.
   • (2) Matters not covered by this Policy shall be handled in accordance with