The registrars are obligated to prevent fraud and abuse. If they fail to do that job you can appeal directly to the registry. If the registry doesn't do anyth

The registrars are obligated to prevent fraud and abuse. If they fail to do that job you can appeal directly to the registry. If the registry doesn't do anything you can appeal to ICANN. All of them are within the scope of the legal system, so if you send a police report demonstrating fraud to a registrar or registry and they fail to act you have some recourse. If their inaction results in increased damages they've opened themselves to liability and you could sue them. The possibility alone is enough that everyone has published polices detailing how they deal with those situations. As long as you follow the rules you can get a domain taken away from a bad actor. It's not easy, but it's possible if someone is doing enough harm. So yeah, you can host a scam on a normal ICANN domain. It's what happens afterwards that matters. In ICANN land you get one chance to run your scam because the victim can make an appeal to authority to have you shut down. In blockchain land it's tough luck for you. As an example, this [1] looks like PayPal's wallet. What do they do about this [2] wallet which owns paypals.eth (alongside sqaree.eth, chasebanks.eth, etc.)? They have two choices AFAIK. The first is to pay whatever the owner demands for those domains. The second is to take the risk of the owner selling those domains to someone that wants to use them for phishing. There are exactly two winners in the blockchain version; the domain squatter and a would be scammer. In the existing system a high value domain owner like PayPal will have an established procedure for dealing with bad actors that infringe on their trademark and dealing with typo squatting like that is probably as simple as sending a template they have to the corresponding registry. 1. https://app.ens.domains/address/0x527FC48f1CA8b41DF3E870F5DE185781150fA8Cb https://app.ens.domains/address/0x527FC48f1CA8b41DF3E870F5DE... 2. https://app.ens.domains/address/0x7731652a9F7F48F77E94a8675F8e125BdA93D62a https://app.ens.domains/address/0x7731652a9F7F48F77E94a8675F...