Beware of domain slamming!

Seems like with the new year always comes a new set of scammers trying to take advantage of our trust.  One common practice that has reared its ugly head recently with some AndiSites clients is domain slamming.  Here’s the Wikipedia definition (under “scams in intellectual property“):

Domain slamming is a form of scam in which an internet service provider (ISP) or domain name registrar attempts to trick customers of different companies into switching from their existing ISP/registrar to the scamming ISP/registrar, under the pretense that the customer is simply renewing their subscription to their old ISP/registrar.

In 2003, the Domain Registry of America was ordered by the Federal Trade Commission to stop this practice; however, it looks like they’re back, this time using different names and companies to accomplish the same thing.  The fraudulent notice may come in the form of an official-looking mailed notice/invoice warning you that your domain name is about to expire, or you may get an unsolicited email saying the same thing. One AndiSites client recently received this email from a company called Namejuice:

Hello XXXXX,

The transfer and renewal of your domain name, xxxxxxxx.com is not yet complete at this time.

Reason:
——-

1) The Domain name is currently in a “REGISTRAR-LOCK” status with your current registrar
2) We require that you provide us with an EPP Key/Authorization Code from your current registrar

In order to complete the transfer and renewal, the “REGISTRAR-LOCK” status needs to be removed and an EPP Key/Authorization code needs to be obtained. Please see below for instructions on achieving this.

Solution:
———

- Log into your account with your current registrar, and change the status of your domain, xxxxxxxx.com, from “locked” to “active”.
- Then look for the EPP Key or Authorization Code.

Alternate Solution:
———

- Call your current registrar (see phone number below) and ask them to remove the lock status of your domain name, give you your EPP Key, and allow the transfer to Domain Registry of America.
- Once done please notify us that you have done so, by clicking on the link below, or calling our toll-free number below.

We will then re-attempt the transfer and renewal of your domain name.

Fortunately my client forwarded this to me, and I was able to advise him of the scam.  Not only are these transfers unwanted, they come with extremely high “administration” fees, and the notices look so official it’s easy to have your pockets emptied before you know it.

If your domain name is registered through AndiSites, there’s no need to worry. All AndiSites domain names automatically come with Registrar Lock to prevent unauthorized domain slamming.  If your domain name is registered with another provider (GoDaddy, Network Solutions, etc.), you should contact them immediately and ask them to enable Registrar Lock on your account.  Otherwise, you may be easy prey for slamming scammers.  Most domain name registrars also offer a service that shields your personal information from the public (at AndiSites it’s called “ID Protect” and costs $9/year).  If you’re an AndiSites customer and wish to add this to your account, let me know.

If you unknowingly sent money in response to a mailed notice, don’t worry (and don’t feel bad…these guys are really good at scamming).  Thanks to the Federal Trade Commission, you can get your money back. If it was through Domain Registry of America, simply call them at (866) 434-0212 or email to support@droa.com and request a refund.  They must grant it within 7 days according to the Truth In Lending Act.  If you have any trouble, file a complaint with the Federal Trade Commission by calling (877) 382-4357, or use the online complaint form at http://www.ftc.gov/.

As with any service:

• If you ever receive anything regarding your domain name or hosting that you didn’t request or don’t understand, contact your provider and ask questions.
• Use a provider that you know and trust.
• Inform your friends and family (you can use the “Share/Save” button below to share this post).

We may not be able to stop scammers, but we can take steps to protect ourselves and each other.