Trust & Safety

How we keep both sides of every transaction protected.

Regulated EU escrow

Buyer funds sit in a segregated bank account at a regulated EU credit institution. The seller never sees the money until you confirm receipt. We can't release funds without your sign-off — even our team can't override that without your consent (verified through a documented dispute).

KYC & AML

EU AML requires identity verification on portfolios above €10,000 or single transactions above €15,000. We screen against OFAC, EU consolidated, UK HMT, and UN sanctions lists via OpenSanctions. Verified sellers get a green badge and reduced commission.

Hash-chained audit log

Every action — every login, every offer, every bid, every escrow state change — is hashed (SHA-256) and chained to the previous entry. Tampering breaks the chain. Buyers and sellers can export their slice as PDF or JSON.

Ownership verification

Before a listing goes public, we confirm the seller controls the domain via DNS TXT record or nameserver change. Listings stay ACTIVE only as long as the seller's ownership remains valid; we re-verify weekly.

Abuse + fraud detection

7 automated fraud rules monitor velocity, IP anomalies, shill bidding, sanctions hits, and chat-based scams. Suspicious accounts are auto-paused. Buyers can report any listing in two clicks.

GDPR & data residency

All data is processed in the EU. Cookies are consent-first (no analytics until you accept). One-click data export. 30-day account-deletion recovery window. DPO reachable at dpo@eurodomains.net.

See something off? Report it: abuse@eurodomains.net (24h response) or use the Report Listing button on any domain page.

Security researcher? Responsible disclosure welcome at security@eurodomains.net. We answer within 72 hours and credit verified reports.