Providing information publishing and instant messaging services requires users to provide authentic identity information
If your website allows posting or chatting, you must collect users’ real identity details at sign-up. Those who refuse to provide such information cannot be allowed to use the service. The recommended approach is to store the real name in the backend and let users pick their own nickname; phone number verification is sufficient for this purpose. Failure to enforce real-name policies results in mandatory corrective orders. Persistent violations attract fines ranging from 50,000 to 500,000 yuan, and may even lead to site shutdowns.
Implementing a real-name verification system involves payi…
The law explicitly states: “Internet service providers offering network access, domain registration, telephone…
Implementing a real-name verification system involves paying per-use fees for the verification channel. The service should be designed under the principle of “real names stored in the backend, nicknames displayed to users” — meaning the actual name is kept on file while users can choose any nickname they prefer on the interface.
The law explicitly states: “Internet service providers offering network access, domain registration, telephone services, or information publishing and instant messaging must demand authentic identity data from users at the time of agreement signing or service activation. Users who fail to supply such data cannot be granted service access.” Non-compliance — whether by neglecting to request real names or by knowingly allowing unverified users to join — triggers corrective orders. Serious or repeated breaches incur fines of 50,000–500,000 yuan, suspension of operations, mandatory business rectification, closure of websites or apps, and revocation of business licenses. Individual responsible parties face additional penalties of 10,000–100,000 yuan. Live streaming platforms must follow the same “backend real names, frontend nicknames” model, using mobile phone numbers for verification. For live commerce specifically, stricter rules apply: verification must rely on official identification documents and the unified social credit code — the unique identifier printed on every business license nationwide.
全国人大常委会 (2025). 网络安全法(2025 年修正,2026 年 1 月 1 日施行,第二十六、六十四条;2016 年文本为第二十四、六十一条). https://www.cac.gov.cn/2025-12/29/c_1768735112911946.htm ; 国家互联网信息办公室 (2016). 互联网直播服务管理规定(第十二、十六条). https://www.cac.gov.cn/2016-11/04/c_1119847629.htm ; 国家网信办等七部门 (2021). 网络直播营销管理办法(试行)(国信办发文〔2021〕5 号,第八条). https://www.gov.cn/zhengce/zhengceku/2021-04/23/content_5601682.htm
Open source linkThe article numbering has been updated. The Cybersecurity Law was amended in 2025 and took effect on 1 January 2026. The real-name provisions moved from Article 24 to Article 26, while related penalties shifted from Article 61 to Article 64; the wording itself remains unchanged. Any existing documentation still referencing the old article numbers must be updated accordingly.