Buy a Domain Without ID or a Credit Card: What Is Required

For most domain zones no rule anywhere asks for a passport: neither ICANN nor the registries behind .com, .xyz or .top require identity documents. ID or local presence is required by a handful of country-code zones, and on 1 September 2026 Russia's .ru, .рф and .su joined that list with identification through the state portal Gosuslugi. Cards work the same way: you need one only where the registrar accepts nothing else. This guide covers which zones require what, what ICANN actually asks of a domain owner, how to pay without a card, and what Riki Domains asks for. The rules are current as of November 2026.

The short answer

• Generic zones do not require documents. That covers .com, .net, .org, .info, .xyz, .top, .online and hundreds of others. ICANN rules make the registrar verify the owner's contact details, not a passport.
• ID or local presence is required by some country-code zones: .ru, .рф and .su (Gosuslugi), .us, .eu, .ca, .cn and a few others.
• Without a card, you pay in crypto: USDT, USDC, BTC and other coins.
• At Riki Domains you only need a login: the Telegram bot, or a username and password in the web panel with no email. The service does not ask for ID, selfies or a card.

What ICANN actually requires

Generic zones run under ICANN's agreement with registrars (the 2013 RAA). It requires accurate contact details from the domain owner: name, postal address, email and phone. Within 15 days of a registration or a data change, the registrar validates the format of these details and verifies the owner's email address or phone number. If that does not happen, the registrar verifies the data manually or suspends the domain. Identity documents are not on the list.

The public record can still stay closed. Many registrars redact personal fields, and a WHOIS privacy service puts its own details into the record instead of yours. How that works, and where data leaks anyway, is covered in our guide to WHOIS privacy.

Some registrars ask for an ID document under their own anti-fraud policy, for example when a payment looks suspicious. That is the rule of one company, not of the zone: the same .com is registered elsewhere without any documents. Riki Domains is not an accredited registrar but a service on top of partner registrars, so the ICANN rules for our domains are the same as everywhere else.

Where ID really is required

Zone rules apply at every registrar. If a registry requires local presence or documents, there is no way around it anywhere, Riki Domains included.

Zone	What registration requires
.com, .net, .org, .info, .xyz, .top, .online and most generic zones	Owner contact details plus email or phone verification under ICANN rules; no documents
.ru, .рф, .su	Since 1 September 2026, identification of the administrator through Gosuslugi (ESIA), with a confirmed account
.us	A US nexus: citizenship or permanent residence, a US organization, or a bona fide presence in the United States
.eu	EU or EEA citizenship or residence, or an organization established there
.ca	Canadian presence: a citizen, a permanent resident, a Canadian organization or another eligible category
.cn	Real-name verification with an ID document; foreigners provide a passport
.bank, .pharmacy and other industry zones	Proof that you are a bank, a pharmacy and so on

If you are unsure about a particular zone, ask support before you pay.

.ru, .рф and .su since 1 September 2026

Russian Federal Law No. 569-FZ of 29 December 2025 made identification of domain administrators through Gosuslugi (ESIA), the state services portal, mandatory for .ru, .рф and .su. Registration, renewal and a change of administrator or registrar are only possible after the person's identity is confirmed, and a confirmed account is required; a simplified one is not enough.

What this means in practice, according to the FAQ of the .RU/.РФ Coordination Center:

• An unidentified domain is not taken away at once. It keeps working until the paid term ends, but it cannot be renewed. After expiry the delegation stops, and once the priority renewal period is over, the registration is cancelled.
• Foreigners without status in Russia cannot pass identification. It is open to foreigners with a residence permit, temporary residence or a work patent. Everyone else is advised by the Coordination Center to hand administration over to someone with a Russian presence and an ESIA account, or to choose a different top-level domain.
• Registrars are moving to the new procedure gradually. They report that until they are added to a special list, and no later than 18 January 2027, they keep working under the previous rules. Do not count on that window for long.

If your project lives on .ru and Gosuslugi is not an option for you, start moving while the old domain still resolves: register a new domain, move the site and mail, set up a 301 redirect from the old address and update your links. Visitors and search engines will then follow you instead of running into a dead address.

How to pay for a domain without a card

People usually go without a card for one of three reasons:

• The card is declined. Registrar anti-fraud filters reject payments from some countries, banks block foreign transactions, and cards issued in some countries do not work abroad at all.
• The card ties the domain to a name. A card payment leaves your legal name and bank in the order history, even when the public record of the domain is private.
• The project has no shared card. A team or partners pay from a shared crypto budget.

Crypto is the most universal alternative: it works the same from any country and needs neither a bank nor a card. Which registrars accept it, and on what terms, is covered in our comparison of registrars that accept crypto. PayPal, which some registrars accept, does not really solve the problem: the account is still linked to a card or a bank account, and PayPal is not available in every country.

Riki Domains accepts crypto only. The balance is kept in dollars and topped up in USDT (TRC-20 and BEP-20), USDC, BTC, ETH, TRX, BNB and POL automatically, from $1. TON transfers are credited by support manually, so message support in the bot before sending one. The rate is locked for about 15 minutes, and the sender pays the network fee. The domain price does not depend on the payment method: as of the 17 October 2026 snapshot, .top costs $3.35, .xyz $4.98 and .com $26.15, with every other zone on the prices page. The most common route is shown step by step in the guide to buying a domain with USDT TRC-20.

What Riki Domains asks for

The list is short:

1. A login. The Telegram bot @riki_domains_bot or the web panel, where sign-up takes only a username of at least three characters and a password of at least six. The panel needs neither an email nor Telegram.
2. Acceptance of the user agreement when you first start the bot.
3. A crypto payment to the internal balance.

The service does not ask for ID, selfies, proof of address or a card on any plan. Whose details end up in the registry record depends on the plan:

• Standard (.top, .xyz, .online, .com and other mass-market zones). The domain is registered automatically; in the panel it usually takes 10–30 seconds after the order is confirmed. To have the privacy service's details in the public record, enable WHOIS privacy in the cart for $10 per domain.
• Platinum and Titan (.at, .to, .com.co, .co.com, .ac and others). A staff member registers the domain manually with Riki Domains' details, so your data never reaches the registry and the privacy option is not needed. Titan domains require your own name servers, usually Cloudflare.

One detail: a Telegram account is itself tied to a phone number. If you would rather not link your domains to Telegram, sign up in the panel with a username and password. It offers the same features: search, balance, the DNS manager, Cloudflare and the API.

What "no ID" does not change

• Zone rules. If a zone requires presence or documents, no registrar can register it without them.
• Blockchain transparency. The sender address and the amount are visible to anyone. If the domain should not be linked to your main wallet, pay from an exchange or from a separate wallet. Renew the same way: a single card payment a year later ties the domain to a name just as firmly as the first one would.
• Responsibility for the site. We do not provide black-hat services. A confirmed violation that is not fixed, or a court or regulator decision, leads to the domain being suspended at any registrar, usually with the clientHold or serverHold status. If a complaint is caused by someone else's content after a hack, the service reviews it, asks for evidence, contacts the owner and represents the owner before the registrar. More on that in Riki Domains: reseller or registrar.
• Account data. The service sees what the account cannot work without: login or Telegram ID, balance, payments and the list of domains.

Checklist: a domain with no ID and no card

1. Make sure the zone has no presence requirement: .com, .xyz, .top, .online and other generic zones have none.
2. Open the bot, or sign up in the panel with a username and password.
3. Find a name and add it to the cart. On Standard, enable privacy for $10 if the record should be closed.
4. Top up the balance in crypto from an exchange or a separate wallet. Keep the payment ID and the transaction hash.
5. Set up DNS in the bot or the panel, or connect Cloudflare from the dashboard.
6. Renew the same way. Auto-renewal charges the balance if it holds enough.

A domain without ID or a card is not a workaround but an ordinary registration in a zone whose rules do not require documents. Pick such a zone, pay in crypto and keep privacy on from day one, and the domain is ready to use within minutes from any country.