Who Owns My Domain Name? How To Find Out and Get It Back

To find out who owns your domain name, look up the registrant of record with ICANN's RDAP lookup at lookup.icann.org, then log in to the registrar it names and check whether the account is yours. The registrant of record is the legal owner. If a web designer, agency or former employee is listed there instead of you or your company, you do not own the domain, whoever paid the invoice. Getting it back means either asking them to move it, or, if they will not, filing a complaint with the registrar and then with ICANN Compliance, which can force the issue.

This is one of the most common and least discussed problems in small business IT. You hired someone to build a website in 2019, they registered the domain to get the project moving, and nobody thought about it again. Then the relationship ends, or the person stops answering email, or an invoice gets disputed, and suddenly the address your customers type belongs to somebody else.

The good news is that this is usually recoverable and the process is well defined. The bad news is that it takes days to weeks, and the leverage you have depends almost entirely on one field in a database.

How do I find out who owns my domain name?

Four checks, in this order. The first two take about a minute.

1. Run an RDAP lookup. Go to lookup.icann.org and enter your domain. This is the authoritative public record. Since January 28, 2025, RDAP has formally replaced the old WHOIS protocol as ICANN's registration data service, and by September 2025 more than 370 generic extensions had switched their WHOIS service off entirely. Older lookup tools that still query WHOIS on port 43 will increasingly return nothing, which is why people conclude their domain has vanished when it has not.

2. Read the registrar field, not the registrant field. Privacy redaction means the registrant name is usually hidden behind a proxy service, so the record will not simply tell you who owns it. What it always shows is the sponsoring registrar: GoDaddy, Namecheap, Squarespace Domains, Tucows, and so on. That is the company that holds the account, and the account is where the answer is.

3. Try to log in at that registrar with your own email addresses. Use the password reset flow against every business email address you have ever used, including the founder's personal address and any address at the domain itself. If a reset email arrives, the account is yours and this is a five minute problem. If nothing arrives at any address you control, someone else holds it.

4. Search your accounting records for the renewal charge. A domain renews annually, so there is a recurring charge somewhere. If the charge is on your card or bank statement, you are at least paying for it, which is useful evidence but is not the same as owning it. If the charge has never appeared in your books, the designer or agency is paying it, and their name is almost certainly the one in the registrant field.

What does "owner" actually mean for a domain name?

Four different parties get called the owner in casual conversation, and only one of them controls the name. Confusing them is why these disputes drag on.

That last row causes a specific kind of panic. If your site goes dark or your email stops arriving, the cause is far more often a DNS change or an expired hosting plan than a lost domain. Before assuming the worst, confirm the domain still resolves and still has a valid registration date. Teams that have been through this once usually end up watching the site and its DNS records from outside their own network afterwards, because the first sign of a registration or nameserver problem is almost always a page that stops responding at three in the morning.

How to get your domain name back from a web designer or agency

Start cooperative, escalate in defined steps, and keep every message in writing. In the large majority of cases this ends at step one or two.

Step 1: ask for the transfer, specifically. Vague requests get vague answers. Ask for three things by name: the domain unlocked, WHOIS privacy briefly disabled so the confirmation email arrives, and the authorization code, also called the EPP code or auth code. Say where you are moving it to. Most designers hand this over without argument, because holding a client's domain is a liability they do not want.

Step 2: ask them to push it inside the same registrar instead. If both of you are at the same registrar, an account-to-account push is faster than a full transfer, usually instant, and it skips the authorization code entirely. It is also easier for a reluctant party to agree to, because it feels smaller.

Step 3: invoke ICANN's Transfer Policy. If they stall, cite it. Under the Transfer Policy, a registrar must provide the authorization code to the Registered Name Holder within five calendar days of a request, where the registrar does not let the holder generate the code themselves. That obligation runs to the registered holder, which is exactly why establishing who that is matters so much. If the holder is your company, you can demand the code directly from the registrar and route around the designer entirely.

Step 4: complain to the registrar, then to ICANN. Registrars have abuse and dispute channels, and they generally do not enjoy being in the middle of this. If that fails and you are the registered holder being denied a code, ICANN runs a public compliance complaint process, and registrars respond to it because their accreditation depends on it. Note the limit: ICANN enforces its contracts with registrars, it does not adjudicate who ought to own a name.

Step 5: legal, and be realistic about which legal. If the designer is genuinely the registered holder and refuses to move, this is a contract dispute, not a domain policy dispute. A demand letter citing the work-for-hire terms in your original agreement is the usual instrument. The UDRP is not the right tool here in most cases, because it is designed for bad-faith registration of someone else's trademark, not for a service provider who registered a name legitimately during a project that later soured.

What if they let the domain expire instead?

This happens, and it is the worst version of the problem, because the clock is now running against you. An expired name goes through an auto-renew grace period set by the registrar, commonly up to 45 days for .com, then a 30 day Redemption Grace Period during which only the registered holder can restore it, then a five day Pending Delete window, then it is released to anyone.

Two things to do immediately. First, if you are inside the redemption window and you can establish that you are the registered holder, the registrar can restore it for a fee, typically $80 to $150 retail. That is by far the cheapest outcome available to you. Second, if you are past redemption and the name is heading to deletion, understand that a name with an existing site, traffic and inbound links is exactly what professional drop catchers watch for. Placing a domain backorder on it is a reasonable defensive move, though it buys an attempt rather than a guarantee, and if others chase the same name it ends in an auction. If the name has already been caught by someone else, you are back to buying it, and how to buy a domain name that is already taken covers what that negotiation looks like.

How long does it take to get a domain back?

Assume days rather than hours, and set expectations accordingly with anyone waiting on the site.

One timing trap worth knowing. A change of registrant currently triggers a 60 day lock during which the name cannot be transferred to a different registrar. So if a cooperative designer changes the registrant to your name as a first step, you may then be unable to move it away for two months. Ask for the transfer directly instead of a registrant change where you can. ICANN has approved policy work to replace that 60 day lock with a 720 hour lock on newly created and recently transferred names, but as of July 2026 that has not taken effect, so plan around the 60 days.

How do I stop this happening again?

The fix is boring and takes about twenty minutes, which is why it never gets done until after the first incident.

Register domains in the company's name, in a company account, on a company email address that is not at the domain itself. That last detail matters more than it sounds: if your registrar login is [email protected] and the domain lapses, your email dies with it and you cannot receive the password reset that would fix it. Use an address at a different domain for registrar accounts.

Put the renewal on a company card rather than a founder's personal one, turn auto-renew on, and add a calendar reminder 60 days before expiry as a backstop, because a card that expires silently is the single most common cause of a lost domain. Keep the registrant contact details current, since a stale address is the reason renewal warnings go unread. Give your web developer DNS access at the hosting or DNS layer rather than access to the registrar account itself. They need to point records, not to own the name.

If your portfolio is scattered across three registrars because different people bought different names over the years, consolidate it. Names in one account get renewed; names in an account nobody remembers get lost. Our page on the best domain registrar covers what to weigh when you pick the one you consolidate into, and transfer domain walks through the mechanics of moving the rest across.

Can I see who owns a domain name if it is not mine?

Partly. Public registration data has been redacted since GDPR took effect, so the registrant's name and email are usually replaced by a privacy proxy. What you can still see is the registrar, the creation and expiry dates, the nameservers, and the status codes, which together tell you a great deal: whether the name is actively managed, when it next comes up for renewal, and whether it is already in an expiry cycle.

For nonpublic data, ICANN operates the Registration Data Request Service, which routes a documented request to participating registrars. It is designed for legitimate purposes such as trademark enforcement, and it is slow. In practice, most buyers reach an owner through the contact form on the site itself, a proxy forwarding address, or a marketplace listing, which is the same order of approach whether you are trying to buy a name or trying to work out who let yours go.

The one field to check today

If you take a single action from this article, run lookup.icann.org against your own domain and confirm the sponsoring registrar is a company you have an account with. That one check separates the businesses that own their address from the ones that merely use it, and it takes less time than reading this paragraph did. If the answer is not what you expected, start at step one above today rather than at the point where somebody stops replying to email.