How To Verify A Domain’s Ownership And Transfer Status
Buying a domain name involves more than checking whether the address resolves in a browser. A domain can look active while being locked at the registrar, subject to an unresolved ownership dispute, close to expiry, or controlled by a person who cannot legally transfer it. Verification protects the buyer from delays, unexpected renewal costs and an unusable web address.
This matters when assessing an aftermarket name such as Frannie Lindsay domain. A parked sales page may display the domain’s age, history and availability, but those details are only the starting point. The buyer still needs independent evidence of the current registrant, the authorised seller and the practical steps required to move the name into a new account.
What Ownership Records Actually Show
A domain name is registered through a registrar, while the registry maintains the authoritative record for its extension. Public lookup information may show the registrar, creation date, expiry date, name servers and status codes. It may not reveal the individual or company behind the registration because privacy services and data protection rules commonly conceal personal contact details.
For Australian buyers, the first distinction is between a global extension such as .com and an Australian namespace such as .com.au or .au. auDA administers the Australian domain space, and its WHOIS service can help verify registration details and eligibility information where available. A .com.au name generally needs a connection to Australia, such as an eligible business, organisation or trade mark holder. A buyer should check that the seller can satisfy the relevant rules after transfer.
The creation date is useful for assessing age, but it does not prove uninterrupted ownership. A domain may have changed hands, dropped and been re-registered, or moved between registrars. Historical screenshots, archived websites and previous company records can provide context, yet none replaces a current registrar record. Treat age claims on a sales page as a lead to investigate rather than as proof of title.
A serious seller should be able to provide the domain’s registrar name, expiry date, transfer status and a process for confirming authority without exposing private account passwords. If the sales page for related domain listing refers to history or availability, the same principle applies: use those details to identify what needs checking, then verify the information through independent sources.
Start With Public Registry Evidence
Begin by conducting a current WHOIS or RDAP lookup. RDAP is increasingly preferred for registration data because it provides a structured response and clearer references to the responsible registrar. Record the lookup date, registrar, registry expiry date, domain status codes and name servers. A saved PDF or screenshot can be useful if the details change during negotiations.
Look for status codes such as clientTransferProhibited, serverTransferProhibited, pendingTransfer and redemptionPeriod. A transfer prohibition may be a routine security lock, while a redemption status can indicate that the name has expired and is being recovered. pendingTransfer may mean a transfer request is already in progress. These codes do not automatically indicate fraud, but they affect timing and the seller’s ability to complete the transaction.
Check whether the domain points to a live website, a parking provider, an email service or inactive name servers. This is operational evidence, not ownership evidence. A functioning website can be controlled by a tenant, marketing agency or former employee. Conversely, an unused domain can still be validly registered and transferable.
The seller’s details should align with the registrar record where those details are visible. If privacy protection masks the registrant, ask the seller to complete verification through the registrar or to send an official account-based confirmation. Avoid relying on an email address that merely resembles the business name. In Australia, an ABN lookup through the Australian Business Register can help compare a company name, trading name and contact details, although an ABN alone does not prove domain ownership.
Check Transfer Locks And Timing
A domain transfer usually requires an authorisation code, sometimes called an EPP code or transfer key. The seller obtains it from the current registrar and supplies it through a secure process. The buyer then initiates the transfer at the receiving registrar. The code should never be treated as a substitute for a sale agreement: possession of a code is evidence of transfer control, not necessarily proof that the person offering it owns the underlying business assets.
Ask the current registrar whether the domain is eligible for transfer and whether any lock applies. Common obstacles include a recent registration, a recent transfer, a change to registrant information, an unresolved payment issue or a registry-level restriction. Certain changes can trigger a temporary transfer lock under registrar rules. The exact period varies by extension and registrar, so obtain the answer in writing rather than relying on a general online guide.
Email approval may be required at the administrative contact address. If the email belongs to a former employee, an old agency or a private mailbox the seller cannot access, the transaction can stall. A domain nearing expiry requires extra care because a transfer may take several days and renewal policies differ. Renewing first may be sensible, but the parties should agree who pays, which registrar receives the renewal and whether the added cost is included in the price.
A transfer also changes where the domain is managed; it does not automatically move website files, email mailboxes, databases or trademarks. Buyers in Brisbane, Perth or Melbourne often assume that shifting the domain will keep business email running, but DNS records can be altered or lost during a registrar move. Before authorisation, copy the existing DNS settings and identify any services using MX, TXT, CNAME or verification records.
Confirm Seller Identity And Authority
Ownership verification should examine the person selling the name and the legal authority behind the transaction. Request the registrant’s legal name, the business entity connected with the domain, the registrar account email and evidence that the seller can approve a transfer. For a company, compare the details with an ASIC company search, the business website and the relevant ABN record. For a sole trader, confirm that the trading name and contact details are consistent across documents.
The written sale agreement should identify the exact domain, purchase price, currency, included services, renewal responsibility, transfer procedure and deadline. It should state that the seller has authority to transfer the registration and that the domain is not subject to undisclosed security interests, court orders, disputes or third-party claims. If the domain is part of a business sale, the agreement should clarify whether it transfers with the website, brand, social accounts and customer data.
Use a payment method that creates a reliable record and matches the risk of the transaction. Australian buyers may prefer a recognised escrow provider, particularly for a valuable name or a seller located overseas. Direct bank transfer, PayID or cryptocurrency can be difficult to reverse if the counterparty disappears. Australian Consumer Law may apply in some business-to-consumer transactions, but a private domain sale does not automatically receive every consumer guarantee. Professional legal advice is worthwhile where the domain is valuable or linked to a registered trade mark.
Watch for warning signs: urgency based on a supposed competing buyer, refusal to identify the registrar, a request to send money before confirming transfer eligibility, mismatched names on invoices, and pressure to use an unrelated payment account. A low price does not remove the need for verification. A seller who cannot explain the registrar, transfer lock or account ownership may not control the domain at all.
Compare Transfer Paths And Practical Costs
The most suitable transfer route depends on the extension, the buyer’s registrar and the seller’s circumstances. A standard registrar-to-registrar transfer is usually straightforward for an unlocked domain with a valid authorisation code. An account push can be faster when both parties use the same registrar, although the receiving account still needs to be configured correctly. A broker or escrow service adds cost but can reduce counterparty risk.
Australian businesses should also consider local billing, GST treatment and support hours. A Sydney agency taking over a domain for a national campaign may need immediate DNS assistance, while a small operator in regional Queensland may prefer an Australian registrar with local support and transparent renewal pricing. The cheapest first-year offer can become expensive if renewal, privacy, premium DNS or transfer fees are unclear.
Review the destination registrar before starting. Confirm that it supports the extension, accepts the domain’s current status, includes privacy where appropriate and does not impose a long registration period that the buyer did not expect. For .au domains, check the eligibility and registrant requirements before payment. For international extensions, review the registrar’s policies under the relevant registry and ICANN framework.
Use the following checks before releasing funds or approving a transfer:
- Record a current WHOIS or RDAP result, including the registrar, expiry date and status codes.
- Confirm the seller’s legal identity, business connection and authority to transfer the name.
- Ask the current registrar to confirm transfer eligibility, locks and any pending request.
- Obtain a written agreement covering the domain, price, renewal, DNS continuity and transfer deadline.
- Use escrow or another traceable payment method for valuable or cross-border transactions.
- Back up DNS records and plan for website, email and verification services before changing nameservers.
- Check Australian eligibility, ABN or ASIC details and GST treatment where the transaction involves an Australian business.
| Verification point | Evidence to request | Risk if ignored |
|---|---|---|
| Current registration | RDAP or WHOIS record saved on the lookup date | The domain may be expired, locked or controlled by another party |
| Seller authority | Registrar confirmation, business records or signed authority | An employee, broker or impersonator may be selling it |
| Transfer readiness | Authorisation code and written registrar response | The transfer may fail or remain pending |
| Legal eligibility | auDA or extension-specific requirements | The buyer may be unable to retain the registration |
| Payment protection | Escrow agreement or traceable invoice | Recovery may be difficult after a failed transaction |
| Technical continuity | DNS export and email service inventory | Website and business email may go offline |
| Contract terms | Signed agreement naming the exact domain | Disputes may arise over renewal, assets or delivery |
After the transfer completes, verify the new registrar account, registrant details, expiry date and domain status. Change the account password, enable multifactor authentication and review recovery email addresses. Keep the agreement, payment receipt, registrar emails and lookup records together. These steps create a clear chain of evidence and reduce the chance that an apparently simple domain purchase becomes an ownership or service-continuity dispute.