NIS2 Domain Registrant Verification for WHMCS
Verify domain registrant data in WHMCS before registration, keep the evidence log NIS2 and your registrar ask for, and answer access requests on time.
What will the registrant verification addon do?
It adds the checks a domain reseller now has to run on registrant data. When a client registers or transfers a domain, or changes its owner, the addon sends a code to the registrant's email and, if you want, by SMS. The order only goes to the registrar once the contact is verified and its data passes your rules. Every check is logged with its time and method, contacts are reminded to confirm their data each year, and a form takes access requests with a timer for the reply.
This product is built to order: you get the license key at purchase and the download within 15 business days.
Why do WHMCS domain resellers need it?
The EU NIS2 Directive covers entities that provide domain name registration services whatever their size, and its definition includes resellers. Article 28 asks them to collect accurate and complete registration data, to have verification procedures, to publish their policies and to answer legitimate access requests within 72 hours. Registrars pass this on: CentralNic Reseller, for example, has required its resellers since 25 November 2025 to verify registrant data and keep logs of when and how they did it.
What does WHMCS already do, and what does this add?
WHMCS can verify a client's account email, and some registrars send their own contact verification emails. Neither covers the registrant of each domain or keeps a reseller-side log. The addon adds the checks per domain contact, the order block, the evidence log, yearly reminders and the access-request tracker.
What is included?
| Part | What you get |
|---|---|
| Verification | Email code, and optional SMS code, on registration, transfer and owner change |
| Data rules | Orders held when contact data is missing or invalid |
| Evidence log | When and how each contact was verified, with CSV export |
| Re-verification | Yearly reminders for registrants to confirm their data |
| Access requests | A request form with a 72-hour timer and a record of each reply |
| Policy page | A template for the registration data policy you publish |
Who is it for?
Hosting companies and domain resellers in the EU, or selling to EU registrants, that register domains through WHMCS.
What do you need, and what are the limits?
Requirements: WHMCS 8.13 or 9.x (I confirm your exact version at purchase), PHP 8.1 or newer, and the WHMCS cron running. SMS codes need my Phone Number Verification (SMS OTP) addon.
Limits: each EU country sets its own NIS2 rules, and registrars add their own, so you set the checks to match yours; I help with the first setup. The addon handles the reseller side, not your registrar's own checks. It is not legal advice.
It costs $149 once for a lifetime license with twelve months of updates and support, the license key at purchase and the download within 15 business days, and a seven-day refund window.
Key features
- Email code verification of domain registrants
- Optional SMS code through the SMS OTP addon
- Checks on registration, transfer and owner change
- Orders held when contact data is missing or invalid
- Evidence log of when and how each contact was verified
- CSV export of the log
- Yearly re-verification reminders
- Access-request form with a 72-hour timer
- Template for your registration data policy
Why customers buy this module
- →Evidence ready when your registrar or regulator asks
- →Fewer domains suspended for unverified contacts
- →Access requests answered on time
Frequently asked questions
Does NIS2 apply to a small domain reseller?
The directive says its domain registration rules apply regardless of size, and its definition of domain registration services includes resellers. How your country applies it can differ, so confirm your own position with your registrar and a lawyer.
My registrar already sends verification emails. Why add this?
Registrar emails verify the contact at the registrar, often after the domain is live. Several registrars now also ask resellers to verify data themselves and keep their own log. The addon gives you that log and stops orders with bad data before they reach the registrar.
When will I get it, and what if you can't deliver?
You get the license key at purchase and the download within 15 business days of purchase. If I do not deliver it in that time, you get a full refund. Otherwise the store's seven-day refund window applies.
Technical specifications
- WHMCS
- 8.13 and 9.x (confirmed at purchase)
- PHP
- 8.1+
- Cron
- WHMCS cron
- Availability
- Built to order, delivered in 15 business days
- License
- Lifetime, 1 year of updates and support included
- Delivery
- Instant download and license key
- Refund window
- 7 days
Related modules
Cloudflare Zone and DNS Reseller Module for WHMCS
I built this module to sell Cloudflare as a WHMCS product. Zones are created on order, customers manage DNS records, cache, page rules, firewall rules and SSL from your client area, and you bill per zone or per plan.
Cloudflare DNS Automation Module for WHMCS
I built this module for hosts who run customer DNS on Cloudflare. WHMCS creates the zone when a service or domain is set up, adds the records from your template, lets customers edit their own records in the client area, and pushes one change to many zones at once.
Cosmotown Domain Registrar Module for WHMCS
I built this registrar module to connect WHMCS to the Cosmotown Reseller API. It registers, transfers and renews domains, manages nameservers, contacts, lock, ID protection, EPP codes and DNS, and copes with Cosmotown's delayed registrations without risking a second order.