- The end user contacts the new registrar with the wish to transfer the domain name to their service
- The new registrar will contact the old registrar with this information
- The old registrar will contact the end user to confirm the authenticity of this request
- The old registrar will release authority to the new registrar
- The new registrar will notify the end user of transfer completion
After this process, the new registrar becomes the designated registrar and all interaction regarding the domain shall be done with them.
Transfer scams.
Many of these transfer scams involve a notice sent in the mail, fax, or e-mail. Some scammers may even call by phone (as the contact information is available through WHOIS to harvest more information. These notices would include information publicly available from the WHOIS database to add to the look of authenticity. The text would include legalese to confuse the end user into thinking that it is an official binding document.
Scam registrars go after domain names that are expiring soon or have recently expired. Expired domain names do not have to go through the authentication process to be transferred, as the previous registrar would have relinquished management rights of the domain name. Domain name expiry dates are readily available via WHOIS.
