Registrars normally have terms of service that allow them to cancel domains at their own discretion. Now here's a registrar that's made aware that the domains

Registrars normally have terms of service that allow them to cancel domains at their own discretion. Now here's a registrar that's made aware that the domains are used for a crime. While I agree that registrars should not be tasked to proactively check and police domain content, it's a bit different to receive proof that a customer is doing criminal activities and to say you need a court order to do anything? The handing out of personal data is a bit more sensitive, but I would assume FB is already involving the police in the process. Not to hand data to FB seems fine, not to hand data to the involved police force seems like you might be actively helping them to hide/keep the crime going (again, assuming that the scam/crime is obvious).