.AU Validation Service for Natural Persons

What is it

With the release of second level .AU domains on Mar 24, 2022, private individuals will finally also have the opportunity to register any domain they like under .AU.

AuDA, however, requires all Registrars to validate the details of anyone applying for a .au domain “using Reliable and Independent Electronic Data or valid identity documents” before submitting their application to the Registry systems.

For Australian businesses, this type of validation is already built into the regular registration workflow, using the ABN/ACN numbers provided in the domain registration command.

As 2nd level .au domains are open also to Natural Persons, HEXONET will need to perform validation of the applicant’s details before submitting their orders to the Registry.

Unlike ABN/ACN numbers lookups, these checks are not free.

To meet the demand for .au registrations from private individuals, we have created this separate Verification service that Resellers can use to verify the details of their customers before submitting registration orders on their behalf.

The reason this was built as a separate product was to minimize the changes required to the existing .AU orders flows and to reduce impact of these changes on those Resellers that only work with business customers. Additionally, as each private customer only needs to be validated once regardless of the number of domains they wish to register, this was considered the most efficient way to offer this opportunity also to these customers.

Important things to keep in mind

• This verification is carried out on the customer’s Residential Address and a supported form of ID that will be checked using global databases (Equifax) and against the Document Verification Service offered by the Australian government.
• Access to this service is regulated through the terms posted on the HEXONET website.
• In particular, Resellers should pay close attention to the fact that explicit and informed consent to verify their personal details must be obtained (and properly tracked) from each customer. The consent can be recorded through a signed form or electronically (e.g. a check-box in the order flow) and proof of this consent must be presented by the Reseller upon request by HEXONET Resellers should keep a copy of the Customer’s consent for 6 months after submitting the request.
• All verification requests are a chargeable operation, regardless of whether the verification is successful or not: Resellers should carefully check the details collected and confirm with the customer that they are absolutely correct before submitting them.
• Each successful verification is valid for 6 months. A validated contact can be used for an unlimited number of registrations, owner changes and renewals during the period of validity. The reason for this limitation is that AuDA requires the Registrar to re-verify Registrant details when a domain is renewed: the limitation is in place to avoid that the same verification can be used both to register and then renew the same domain.
• For the same reason, we strongly recommend Resellers to encourage Registrants to register their .au domains for the maximum allowed period, to reduce the need to perform the verification again each year the domain comes up for renewal.
• It is possible to verify the same details multiple times. Each verification will be treated independently and charged accordingly. The main reason for this is to allow Resellers to re-verify an existing contact and update its “validated until” date even before the original date has passed.

How to use it

A validated contact is required to process the following types of .AU operations:

• Registration
• Trade (Owner change)
• Renewal

Our system will check the Contact Handle used as Registrant and confirm its verification status. If the Handle is not validated, or the verification has expired, the order will fail.

Please note that only the Registrant handle needs to be validated.

Resellers can verify existing Contact Handles or create a new one as part of the verification process. This operation can be performed through the API.

Resellers can also test this service through the HEXONET OTE system. Sample data is available for testing purposes, please reach out to support should you need to test your integration.

Supported document types

• Australian Citizenship
• Australian Citizenship by Descent
• Australian Driver's Licence
• Australian Passport
• Australian Visa
• Australian Birth Certificate

Fields mapping per ID Type

ID type	Required Fields
Australian Citizenship	X-AU-OWNER-IDTYPE = 1 X-AU-OWNER-IDDATE = YYYY-MM-DD X-AU-OWNER-IDNUMBER =         Regex: [A-Za-z0-9]
Australian Citizenship by Descent	X-AU-OWNER-IDTYPE = 2 X-AU-OWNER-IDDATE = YYYY-MM-DD X-AU-OWNER-IDNUMBER =         Regex: [A-Za-z0-9]
Australian Driver's Licence	X-AU-OWNER-IDTYPE = 3 X-AU-OWNER-IDNUMBER =         Regex: [A-Za-z0-9] X-AU-OWNER-IDISSUER = [ACT, NSW, NT, QLD, SA, TAS, VIC, WA]
Australian Passport	X-AU-OWNER-IDTYPE = 4 X-AU-OWNER-IDNUMBER =         Regex: [A-Za-z]{1,2}[0-9]{7}
Australian Visa	X-AU-OWNER-IDTYPE = 5 X-AU-OWNER-IDNUMBER =         Regex: [A-Za-z0-9]*
Australian Birth Certificate	X-AU-OWNER-IDTYPE = 6 X-AU-OWNER-IDISSUER = [ACT, NSW, NT, QLD, SA, TAS, VIC, WA]