Scam Alert! Beware the CNRegistry PHISHING Scam: Why That Email About Chinese Domains Is a Trap
Did you get an email from cnregistry.org?
If you’ve ever received an email from someone claiming to be a Chinese domain registrar, warning that another “client” wants to register your domain with a .cn extension, you’re not alone. These emails are part of a long-running scam commonly known as the CNRegistry scam.
It usually goes something like this:
“We are a Chinese domain registrar, and our client wants to register multiple variations of your domain (example.cn, example.com.cn, etc.). Before we approve it, we wanted to check if this is authorized by you. If not, we can protect your brand by registering these domains on your behalf.”
At first glance, the email feels urgent, almost like someone is trying to steal your identity online. But in reality, this is a phishing tactic designed to trick you into paying for unnecessary or fake domain services.
How the CNRegistry Scam Works
The Hook – A Fictitious Client
The scammers pretend there’s a third-party “client” rushing to register your brand or name in China. This sets off alarm bells and creates pressure, making you feel you have to act quickly to protect your name.The Upsell – Fake Defensive Registration
Once you reply, the scammer pivots:If you say you don’t authorize the registration, they’ll offer to “protect” your brand by registering the .cn domains for you.
If you say you do authorize it, they’ll conveniently offer to handle the registrations anyway—at inflated prices.
The Outcome – You Lose Money
Best case: you pay them for domains you don’t need, or for domains that don’t even get registered.
Worst case: they take your money and run, or use your details for other fraudulent activities.
Why It’s a Scam
No real client exists. Nobody is actually trying to register your domain in China.
No urgency. Even if someone did register a .cn version of your domain, it rarely affects personal websites or small businesses.
Overpriced or fake services. You’ll likely be charged huge fees for domains you either don’t need or never receive.
Cybersecurity experts have flagged this scam for more than a decade, and the messages almost always follow the same pattern: fake urgency, a mysterious “client,” and an offer to “protect” you—for a price.
Real-Life Example
A small U.S. business owner recently shared that they received one of these emails after launching their company website. The message warned that a Chinese company was about to register their brand name with a .cn extension and that they had to act quickly to stop it.
When the owner contacted their actual domain registrar, they learned the truth:
The Chinese “client” didn’t exist.
There was no pending registration.
The scammers simply wanted to sell them overpriced domain services.
The business saved money and avoided a scam by ignoring the email.
What You Should Do If You Get One
Don’t reply. Engaging just confirms your email is active.
Mark it as spam or phishing. This helps your email provider filter similar scams in the future.
Protect your real domains the right way. If you run a business and want to protect your brand, register the domains yourself directly through reputable registrars (GoDaddy, Namecheap, Google Domains, etc.).
Bottom Line
The CNRegistry scam preys on fear, hoping you’ll panic about losing control of your online identity. In reality, it’s nothing more than a money grab disguised as a service.
If you get one of these emails, don’t stress—just delete it, report it as Phishing to Gmail or your email service if you have the option to report it.