A domain's "owner" is not the party paying the invoice. It is the party named in the record — and in most companies those are not the same person. The worst time to learn the difference is the day a transfer is needed.
Short answer: who owns a domain?
A domain is owned by the person or organisation listed as the registrant in the registration system; who pays, who built the site, and who logs into the panel do not determine legal ownership. Transfer authority follows that record. The first check any business should make is confirming the domain is registered to the company as a legal entity. If the record names an agency, a former employee or a personal e-mail address, the domain is not legally yours.
The three roles in a registration record
| Role | What it can do | Who it should be |
|---|---|---|
| Registrant | Transfer, sell, cancel — holder of all rights | The company as a legal entity |
| Administrative contact | Approves changes, edits registration details | An authorised person inside the company |
| Technical contact | Manages DNS and technical settings | May be an agency or systems provider |
The critical distinction: outsourcing the technical contact is normal; outsourcing the registrant is not. If you work with an agency you may leave DNS management to them, but your company's name must appear in the registrant field. That single line determines who keeps the domain when the relationship ends.
Transfer steps and timing
- Verify registration details. Ensure the registrant e-mail address is reachable — approval messages go there. An unreachable address stops the transfer before it starts.
- Remove the transfer lock. Domains are locked by default to prevent unauthorised transfer. The lock is released from the current provider's panel.
- Obtain the authorisation (EPP/auth) code. This proves you are entitled to initiate the transfer. The current provider is obliged to supply it.
- Create the transfer request at the new provider and enter the code.
- Complete the approval step. Confirm the verification link sent to the registrant e-mail address.
- Wait out the holding period. It varies by extension; for international extensions the process usually takes a few days and completes automatically unless contested.
An important reassurance: your site and e-mail are not interrupted during transfer, because DNS settings do not move — only the provider holding the registration changes. Downtime risk comes from DNS records not being carried over afterwards, which is why they should be backed up beforehand.
Five situations that block a transfer
- The 60-day restriction. Newly registered or recently transferred domains cannot be transferred again for a set period. A similar restriction can apply after registrant details change.
- No access to the registrant e-mail. The most common blocker. If a former employee's address or a disused domain sits in the record, that detail must be updated first.
- Transfer lock not released. Requests started without releasing the lock are rejected.
- Unpaid balance or expired registration. An expired domain cannot be transferred without renewal.
- Extension-specific documentation. Country extensions may require documents for transfer; that process differs from international extensions and can take longer.
Handover checklist
- Confirm the registrant field names your company as a legal entity.
- Ensure the registrant e-mail is corporate and reachable (never a personal address).
- List who holds panel access and remove unnecessary permissions.
- Do not leave the transfer lock open routinely; release it only during the operation.
- Back up DNS records — note every existing record before transferring.
- Track renewal dates in a central inventory — see our domain inventory guide.
- If you work with an agency, add an ownership clause to the contract.
- Enable two-factor authentication on the domain panel — see 2FA methods.
Netişlem expert view: the costliest loss is the ownership error nobody noticed
In a significant share of the handover requests reaching us, the problem is not technical: the domain was registered years ago to whoever built the site. The business has been paying the invoices and using the site for years, but someone else is the registrant. While the relationship goes well this stays invisible; when a disagreement arises, all that remains in hand are payment receipts — which are not proof of ownership.
Our second observation is neglect of the registrant e-mail address. That address is the gateway through which every critical approval on the domain passes. If a departed employee's address sits there, transfer becomes impossible and a serious security gap opens.
Third, the belief that transfers carry downtime risk. In a correctly executed transfer, site and e-mail keep running. Downtime comes not from the transfer but from DNS records not being noted in advance. That single step removes the entire risk.
Frequently asked questions
I pay the invoice — isn't the domain mine?
Paying does not create ownership. What matters is who appears in the registrant field. Payment records can support a claim in a dispute but do not replace the registration itself. Verifying the record names your company is the fundamental step.
Will my site go down during transfer?
No. A transfer only changes the provider holding the registration; as long as DNS settings remain, site and e-mail keep working. Backing up existing DNS records beforehand removes the risk entirely.
What if my provider will not give me the EPP code?
As registrant you are entitled to request it. Where it is withheld, the route is a written request followed by an application to the relevant registry. Keeping your registration details current and verifiable speeds the process considerably.
My company name changed — how do I update the record?
Changing registrant details requires documentation on most extensions and can trigger a temporary transfer restriction. If a name change is planned, folding the domain update into the same process is the most practical route.
My domain expired — can I still recover it?
There is usually a recovery window after expiry during which renewal remains possible, though additional fees may apply. Once the window closes, the domain returns to general availability and can be registered by anyone. Renewal tracking is therefore as critical as ownership.
Conclusion
A domain is most businesses' most valuable digital asset — and also the easiest to protect. All it takes is verifying that your company's name appears in the registrant field and that you can access the e-mail attached to that record. Those two checks remove most of the disputes that arise later.
If you would like us to review your domain records, get in touch. You can review our domain transfer, domain registration and WHOIS lookup pages.