Acquiring a Domain Name Anonymously and Safely: A Practical Guide

The email took a marketing manager about ninety seconds. Suppose her name is Dana, her company is Verrano Freight, and the subject line reads "Interested in verrano.com." The body explains that the company is rebranding next spring, that the name would be perfect, and that she would love to chat. Her signature block carries the company's logo, its stock ticker, and a title with "Global Brand" in it.

The holder had listed the name two years earlier at $12,000 on a marketplace. He reads the signature, opens a browser tab, reads the company's last earnings release, and takes the listing down. His reply arrives a week later with a figure that has two more zeros on it.

No law was broken. Dana just gave away the only information that matters in a one-of-one negotiation, which is how much this particular buyer needs this particular asset. This guide is about not doing that, and about the less obvious risk that sits behind it: anonymous buyers tend to focus on secrecy and get careless with title, the record, and closing mechanics, and those are the things that cost money after the deal is done.

The doctrine behind the steps is in the companion article, Buying a Domain Name From Its Current Owner: Brokers, Escrow, Transfers, and the UDRP Risks You Inherit. Here the job is sequence.

The short answer

• Do the legal work before the first contact. Clear the term, write down why you want it, and set a walk-away price. Anything you learn afterward about a third party's mark comes too late, because panels judge your intent as of the day you acquire the name.
• Use a real intermediary and tell no lies. A broker, a lawyer, or a new entity may decline to name the principal. None of them may invent a false buyer. Silence is ordinary negotiating practice, and a fabricated story can undo the deal or support a fraud claim.
• Keep the registrant record true. Anonymity comes from a real entity and, where appropriate, a privacy service, never from false contact data. False data is a statutory bad faith factor and breaches the registration agreement.
• Never mention a dispute unless you mean to bring one. Threats, trademark talk, and "we could just file with WIPO" can show up later as exhibits, and a failed purchase followed by a baseless complaint is a listed ground for a hijacking finding.
• Prove the seller's authority, not just control of the account. Ask how the seller got the name, test control with a DNS token, look for prior disputes and liens, and watch for signs of theft or an ex-contractor selling a client's name.
• Paper it and use escrow. A short agreement with title, no-lien, and no-dispute representations, plus a licensed escrow agent with a real inspection period, removes most performance risk.
• Sequence the closing to avoid the 60-day lock. Under the rules still in force, move the name to its final registrar first and change the registrant second, unless the registrar lets you opt out. ICANN's Board adopted reforms in June 2026 that will remove that lock, but check what your registrars do today.
• Assume the name has a past. Turn off catch-all mail, audit certificates, check blocklists, and record everything in a closing file you can produce in five years.

Step 1: Decide whether you should buy at all

Who: decision-maker and counsel. When: before anyone contacts anyone.

Start with four dates, because they sort you into one of two roles, buyer or potential complainant. When was the name first registered? When did the current holder get it, if you can tell? When did your mark begin? How is the holder using the name now?

If the holder took or acquired the name after your mark was known and is using it to trade on you, you may have a claim, and buying may be overpaying for your own brand. The Choosing the Right Domain Name Dispute Procedure: A Practical Guide guide is the place to start. If the name predates your rights and the holder has not targeted you, you have no UDRP case, as GoPets Ltd. v. Hise, 657 F.3d 1024 (9th Cir. 2011) illustrates. The WIPO panel there ruled against the mark owner because the name had been registered five years before the company existed. That leaves buying or going without.

Then ask whether you need the exact name. Price the alternatives honestly: a modifier, a different top-level domain, a coined variation. If the term is only marginally better than the second choice, the walk-away number should be small.

Write down three numbers: the opening offer, the target, and the walk-away. Agree on who may change them. In a one-of-one negotiation, the party with no alternative usually loses, and the discipline of having chosen an alternative in advance is most of the negotiating advantage you will ever have.

Step 2: Clear the term and make a dated record of why you want it

Who: counsel, with marketing. When: before contact, finished before signing.

Your purchase resets the clock. Under the UDRP, panels ask about the date you acquired the name, and WIPO Overview 3.1 section 3.9 says this holds for single names and portfolios alike. In the Third, Fourth, and Eleventh Circuits, your acquisition is a "registration" under the Anticybersquatting Consumer Protection Act (ACPA), 15 U.S.C. § 1125(d). See Schmidheiny v. Weber, 319 F.3d 581 (3d Cir. 2003), Jysk Bed'N Linen v. Dutta-Roy, 810 F.3d 767 (11th Cir. 2015), and Prudential Insurance Co. of America v. Shenzhen Stone Network Information Ltd., 58 F.4th 785 (4th Cir. 2023).

So you need two things before signing.

A clearance search on the second-level term. Search the USPTO, state registers, and the web for the exact term and close variants in your field and related fields, using How to Conduct a Comprehensive Trademark Clearance Search and Trademark Clearance Search Checklist: A Practical Checklist. A tool like marksy.us gives a quick first pass, and counsel should read anything close. A conflict in a far-off field may be survivable: Overview 3.1 section 3.2.3 acknowledges that marks coexist across classes and that a search hit does not automatically make a registration abusive. A conflict in your own field probably means stopping, for a reason that has nothing to do with the domain: your use would be likely to confuse under 15 U.S.C. § 1125(a), whenever you bought it. For the analysis itself, see Trademark Likelihood-of-Confusion Analysis: A Practical Checklist. For how a documented search helps later, see The Shield of Good Faith: How Trademark Clearance Searches, Attorney Opinions, and USPTO Approval Protect Against Willful Infringement Claims.

A dated intent memo. One page, signed by a business owner, stating what the name is for, what products will use it, why this term, who else was considered, and what clearance found. Keep it with the formation papers, wireframes, and budget. Under UDRP paragraph 4(c)(i), legitimate interest includes "demonstrable preparations" before notice of a dispute, and Overview 3.1 section 2.2 asks for "clear contemporaneous (and ideally, dated) evidence." In Prudential, the buyer's preparation materials were thumbnail sketches and an unauthenticated contract, and the court discounted them. Quoting Harrods Ltd. v. Sixty Internet Domain Names, 302 F.3d 214 (4th Cir. 2002), it noted that Congress did not list proposed future use as a factor because such claims are too easy to make. Your memo will not win a case on its own, but it can show that the plan predated any fight.

If you have an idea whose mark doesn't yet exist, also consider filing an intent-to-use application under 15 U.S.C. § 1051 before or just after closing. Timing matters for secrecy, because applications are public. A filing before the deal closes can tip off a seller who is watching, so many buyers wait until the moment after closing. Think hard before filing through the stealth entity: 15 U.S.C. § 1060(a)(1) restricts assignment of an intent-to-use application before use, except to a successor to the applicant's business, so a shell that files and later assigns to the real user can jeopardize the filing. File in the name of the entity that will actually use or control the mark. Whatever you sign, read Trademark Declaration Accuracy Checklist: A Practical Checklist first, since a declaration about your bona fide intent has consequences of its own.

Step 3: Read the public record without touching the seller

Who: counsel or a technical person. When: before contact.

Everything in this step can be done silently.

Run an RDAP lookup. RDAP is the protocol that has replaced WHOIS for most purposes; ICANN's lookup tool and registrar sites expose it. The Registration Data Policy, in effect since 21 August 2025, leaves most personal data redacted, so expect to see dates, registrar, status codes, and name servers. Note the creation date, the updated date, the expiration date, and any status other than the ordinary ones. A status of redemptionPeriod or pendingDelete means the name is on its way out, and the right approach may be a backorder rather than an offer. A status of serverTransferProhibited may reflect a registry lock or a dispute hold.

Look back in time. Historical WHOIS and DNS services, and the Internet Archive, show past registrants, past content, and whether the creation date reset. The Archive played a role in GoPets, where the court used its snapshots to track when content appeared, and panels use it too. Screenshot and save what you find.

Check for disputes. Search WIPO's and Forum's UDRP databases by name. Search court dockets. A prior loss by the seller is a warning. A prior win is less comforting than it looks: in CRS Recovery, Inc. v. Laxton, 600 F.3d 1138 (9th Cir. 2010), a buyer who checked WIPO and then beat Ralph Lauren there still faced a conversion suit by the original registrant.

Check the page itself. Note the parking provider or marketplace from the lander and name servers. A listing tells you the channel and sometimes the price.

Research price. Public sales databases such as NameBio record reported sales, and appraisals from automated tools give a very rough anchor. Look at length, extension, dictionary status, commercial use, and comparable sales. Domain prices are noisy, and reported sales skew toward successful deals. Treat comparable sales as a way of defending a number, not of finding it.

Step 4: Choose your anonymity structure

Who: counsel and the decision-maker. When: before contact.

There are four common structures, and they can be combined.

The law of not saying who you are

Buying through an agent is about as old as commerce. When an agent with authority contracts for an undisclosed principal, the principal is generally a party to the contract unless excluded, and the agent generally is too (Restatement (Third) of Agency § 6.03). ABA Model Rule 4.1 comment 2 says that, under generally accepted conventions in negotiation, the existence of an undisclosed principal is ordinarily not a statement of material fact, "except where nondisclosure of the principal would constitute fraud." Check your state's version. Lawyers should also read Rule 8.4(c), and Rule 1.6 on the client's confidences.

That gives you a practical line. You may refuse to answer. You may not answer falsely. Compare these replies to a seller's question, "Who's the buyer?"

• Fine: "My client has asked me to keep its identity confidential at this stage."
• Fine: "I am not able to tell you that. If that is a deal-breaker, tell me and we will stop."
• Not fine: "It's just a guy starting a small blog."
• Not fine: "It's a local nonprofit," when it isn't.
• Not fine: "We have no connection to X," when you do.

Sellers do ask. In Prudential, the holder told the broker it wanted to know the buyer's location and line of business before it would quote a price. A seller who conditions the sale on a statement about identity has made the fact material, and a false answer becomes the sort of thing fraud cases are made of. A seller can also ask for an express representation in the contract. If you cannot give it truthfully, decline it and accept the risk of losing the deal.

The federal beneficial-ownership regime is not an obstacle for domestic entities. FinCEN's final rule, issued 11 August 2026 and effective 14 August 2026, makes permanent the exemption of entities formed in the United States from Corporate Transparency Act reporting. States may differ, and your bank and escrow agent will still collect ownership information for their own compliance, so do not assume your identity is secret from them.

Setting up a stealth entity correctly

Form a real entity in a state whose public formation records do not list members or managers. Give it a bland name unrelated to your brand or to the domain, and use a commercial registered agent and a neutral address. Open an account it controls. Give it a mailbox on a domain you control, not a throwaway, because registrar notices go there and the domain may depend on them.

Then keep the registrant record truthful. The registration agreement requires accurate contact data; ICANN's 2013 Registrar Accreditation Agreement § 3.7.7.3 says a registrant that plans to license the name to someone else remains the holder of record and must provide its own full contact information. Factor VII of the ACPA's bad faith list, § 1125(d)(1)(B)(i)(VII), asks about "material and misleading false contact information." Prudential is the cautionary tale: the buyer listed a related company as the registrant organization and changed the registrant name twice after the UDRP filing. The Fourth Circuit held that factor against it.

A privacy or proxy service is not itself false contact information, but note Overview 3.1 section 3.9: if your record is masked and a complainant credibly alleges a change of hands, you carry the burden of showing an unbroken chain. Keep the proof.

Planning the later move to the operating company

Here is a trap that catches careful people. After launch, the instinct is to tidy up by moving the name from the stealth LLC to the operating company. Both leading ACPA cases on re-registration involved exactly that sort of transfer between affiliates. Schmidheiny v. Weber, 319 F.3d 581 (3d Cir. 2003) treated it as a new registration. GoPets Ltd. v. Hise, 657 F.3d 1024 (9th Cir. 2011) did not. If a third party's mark has become distinctive between your purchase and the internal move, you have potentially given it a new date to argue about in the Third, Fourth, or Eleventh Circuits, though good faith should still carry the day. UDRP panels typically will not treat formal changes with an unbroken chain as a new registration (section 3.9), but "unbroken" is your burden.

The simple alternative is to leave the name in the holding entity and license it to the operating company, with quality control if the name is also a mark, so that use inures to the mark owner under 15 U.S.C. § 1055. If you do move it, do it early, while nothing new has arisen, with a short written assignment reciting common control.

Step 5: Engage the intermediary

Who: counsel. When: after Step 4, before contact.

Use a short engagement letter even for a small deal. The terms that matter are authority, confidentiality, conflicts, and pay.

Authority. State the price range the broker may discuss and that nothing binds your client until a written agreement is signed. A broker who says "we have a deal" by email can create an argument about contract formation.

Confidentiality. The broker may not name you, your industry, or your plans, and must flow that down to anyone it uses.

Conflicts. Marketplaces sometimes run both a brokerage and a listing business. Ask whether the broker has an interest in the name, represents the seller, or will take a fee from the other side. A broker hired to find the low price while earning a percentage of that price has a mild conflict too, which is why a flat fee or a success fee tied to beating a target can be better.

Conduct. No threats. No reference to trademarks. No statements about the buyer's identity beyond an agreed script. Everything in writing is kept. The broker's emails are likely evidence: in Prudential, the Fourth Circuit read an internal GoDaddy broker email about the holder's reaction, and in JFXD TRX ACQ LLC v. trx.com, No. 2:23-cv-02330 (D. Ariz. May 8, 2024), a mark owner's complaint about a GoDaddy agent's sales pitch ended up in the court's order.

Fees. Commission figures vary by channel. Expect roughly 10 to 25 percent on marketplace and brokered sales as a starting point, and get yours in writing. Escrow fees are separate; check the agent's current schedule.

A broker is not liable for trafficking merely because it runs the marketplace, under Bird v. Parsons, 289 F.3d 865 (6th Cir. 2002), but your own purchase is covered conduct if your intent is bad, since "traffics in" includes "purchases," § 1125(d)(1)(E). The intermediary does not launder intent. Its knowledge and statements may be attributed to you.

Step 6: Make contact and negotiate

Who: the intermediary, reporting to counsel. When: after the record is built.

The first message

Keep it short and bland. Say you represent a party interested in acquiring the name, ask whether it might be for sale and at what price, and offer to use an escrow service. Do not name a number in the first note unless the name is already listed. Send it from a real address that does not reveal the client. The sibling Domain Acquisition Toolkit: Outreach Scripts, Purchase Agreements, and Post-Closing Records has scripts.

Anchors and moves

Price negotiation for a one-of-one asset has a few reliable features.

Whoever speaks first anchors. If the seller will not name a price, an opening offer near your low comparable sets the range. If the seller gives a very high first number, don't counter immediately; ask what it is based on and let it sit.

Time is usually on your side unless the name is expiring or actively marketed. Investors have carrying costs and are used to slow deals. Set a soft deadline only if it is real. In GoPets, the buyer's stated deadline tied to a marketing campaign told the holder exactly what he wanted to know, and the next message from the holder came with a $5 million figure.

Structure can bridge a gap. Installments, lease-to-own, a small equity stake, or a price contingent on launch all exist. A lease leaves title with the seller until the end, so read the default and transfer terms. Installment deals should hold the name in escrow or under a third party's account, with a clear rule on what happens on default or on the seller's bankruptcy.

Walk away cleanly. A polite exit preserves a chance at a later approach, and sellers do come back. Avoid the parting shot.

Things you must not say

Assume everything will be read by a panel. Overview 3.1 section 3.10 says panels "tend to view settlement discussions between the parties as 'admissible,'" particularly for motive. In federal court, Fed. R. Evid. 408 protects compromise negotiations over a disputed claim, and a price inquiry before any dispute exists is not that. So:

• Do not threaten a UDRP or lawsuit you do not intend to file. The GoPets buyer's note about "proceeding with the ICA[N]N domain dispute claim," and his "very last offer" of $100, appear in the Ninth Circuit's opinion.
• Do not assert rights you do not have. Filing later after a failed purchase "without a plausible legal basis" is a listed basis for reverse domain name hijacking, Overview 3.1 section 4.16. Dent v. Lotto Sport Italia S.p.A., No. 2:17-cv-00651 (D. Ariz. Jan. 25, 2021) shows the downside in court: after buying two names and winning a declaratory judgment, the registrant received $236,752.50 in fees.
• Do not let the buyer's team talk to the seller separately. One voice.
• Do not disparage the seller or call it a squatter when you're trying to buy from it.

If you do hold a mark

Mark owners have a genuine dilemma. An anonymous approach can reveal market price or bad faith, but offers may also read as an admission that the mark owner thought it needed to buy. Nothing in the UDRP says an offer waives a genuine claim, but it colors the record, so decide which track you are on first. If there is a real claim, have counsel assess it before the approach, and keep the investigator's questions neutral. Prudential used this route: an anonymous inquiry through a broker, then a UDRP filing a week later, then a direct offer, then suit. Note the outcome on factor VI: the Fourth Circuit said the anonymous exchange did not establish an offer to sell, because the holder only rejected a bid and mentioned another. So do not expect a bait offer to do too much. And an offer the holder did not solicit does not convert into bad faith by itself: panels look for targeting, section 3.1.1. See also Virtual Works, Inc. v. Volkswagen of America, Inc., 238 F.3d 264 (4th Cir. 2001), whose "plain vanilla offer" language draws the same line.

A small-business example

Suppose Hollowbrook Tea, a two-person Oregon company selling loose-leaf blends online at hollowbrookteas.com, wants hollowbrook.com. The name was first registered in 2009, the creation date has never reset, and it parks at a marketplace with no list price. A clearance search shows a Vermont inn called The Hollowbrook and a small software consultancy, neither in food or beverages. The owners set a walk-away of $6,000.

They skip a broker, since the amount is modest. They form no entity. The owner, using her personal address and no signature block, sends a marketplace inquiry. The seller replies with $14,000. She says that is more than she can spend, offers $2,500, and goes quiet for three weeks. He comes back at $7,500. She says $4,800, payable through escrow, and he accepts. Her lawyer spends an hour on a short agreement, including a representation that the seller acquired the name by purchase in 2014 and holds it free of liens. Total legal cost is small. The name moves in about a week.

What did she skip? Formal anonymity. Her name appears on the escrow file and later on the registrant record. It doesn't matter here, because the name's value to her isn't much greater than its value to anyone else. The structure should be proportionate to what identity would add to the price.

Step 7: Diligence the seller and the name

Who: counsel with a technical person. When: after a price is close and before signing; repeat just before closing.

Diligence answers three questions: can this person sell it, is anyone else entitled to it, and what comes with it?

Authority and provenance

Ask for the following, and ask politely. Honest sellers rarely mind, and the ones who object usually tell you something.

• Who the registrant actually is. Name of the person or entity on the registrar's record, confirmed privately or unmasked at signing. If the entity differs from the signer, get authority documents.
• How the seller got the name. Original registration, purchase, or drop, with dates and any purchase records. In CRS Recovery, the title question depended on how a holder three steps back lost the name.
• A control test. Ask the seller to add a DNS TXT record with a random token you supply, and to show you the registrar's account page with the name listed. A TXT record shows control of DNS, not ownership, but it weeds out people selling names they do not control.
• Employment or contractor history. Was the name registered by a developer, agency, or employee for someone else? Jysk Bed'N Linen v. Dutta-Roy, 810 F.3d 767 (11th Cir. 2015) and DSPT International, Inc. v. Nahum, 624 F.3d 1213 (9th Cir. 2010) both grew from a contractor or colleague holding a client's name in his own account. A buyer from that person could be buying a dispute.
• Any business under the name. An operating business may have creditors, employees, and customers, and it may need a transition period. If the seller is a corporate shell or insolvent, ask counsel about fraudulent-transfer risk.

Warning signs of a stolen name

No single sign is proof, but several together should stop the deal: a price well below comparable sales; a recent change in registrar or updated date on an old name; an archived site showing a live business until recently; a seller who writes from free webmail and declines escrow; pressure for wire or cryptocurrency payment; or inconsistency about how the name was acquired. Consider a short message to whoever ran the old site. Good faith is a real defense only in some situations: under CRS Recovery, an innocent purchaser may take free of voidable title, but if the transfer was a theft, the title is void and no purchaser gets good title. Kremen v. Cohen, 337 F.3d 1024 (9th Cir. 2003) confirms that the domain owner may bring conversion in the Ninth Circuit. Stolen Domain Names: How Domain Hijacking Happens and the Legal Paths to Getting One Back goes deeper, and Domain Recovery Toolkit: Registrar Demands, Transfer Dispute Filings, and In Rem Complaints shows the kinds of demands a victim will send you.

Disputes, liens, and government interests

Search for UDRP and URS decisions, court cases, and any status suggesting a hold. A name under a pending UDRP case is locked, and paragraph 8 of the policy bars transfer during the proceeding and for 15 business days after, with the registrar free to cancel a transfer made in violation. A name subject to a pending court action may only pass to someone agreeing in writing to be bound.

Liens are more obscure. A lender may hold a security interest in a seller's general intangibles, which could include its domain names, and a security interest generally continues through a sale unless the secured party authorized the disposition free of it (U.C.C. § 9-315(a)(1)). Norton Bankruptcy Law and Practice treats security interests in domain names at § 177:51. For a corporate seller and a meaningful price, run a UCC search in its state of organization. Whether a judgment creditor can reach a name varies: Network Solutions, Inc. v. Umbro International, Inc., 529 S.E.2d 80 (Va. 2000) refused garnishment, while Office Depot Inc. v. Zuccarini, 596 F.3d 696 (9th Cir. 2010) allowed a receiver.

Check sanctions lists before you pay. The Treasury's Office of Foreign Assets Control publishes the lists; the escrow agent may screen too, but it is your exposure.

Technical history

Check reputation (spam and malware blocklists, safe-browsing status), search-engine standing, backlinks, and whether the name's past use will haunt you. Search certificate transparency logs for certificates and subdomains, which also reveals what systems may still depend on the name. Ask whether the name hosts any name servers for other domains. Ask what mail still arrives. A bad history can justify a price cut, or a walk.

Step 8: Put the deal on paper

Who: counsel. When: before escrow opens.

A simple agreement works for most deals, and the Domain Acquisition Toolkit: Outreach Scripts, Purchase Agreements, and Post-Closing Records has one. For larger or more complicated purchases, borrow from Acquisition Agreement Toolkit: Reps, Schedules, Escrows, Earnouts, and Claim Notices and IP Transactions and Agreements Toolkit: A Roadmap and Resource Library for Licensing, Assignments, and Diligence. Whatever the length, it should contain:

• Parties. The record registrant as seller, the buying entity or agent. If an agent signs for an undisclosed principal, say so in the preamble, and decide whether the principal may later be disclosed.
• Assignment. A present assignment of all right, title, and interest in the name and registration, plus a quitclaim of any associated rights.
• Representations. Seller is the sole registrant with authority; title free of liens and claims; no pending or threatened dispute; no prior assignment or option; no known third-party claim; how the name was acquired; no prior sanctions issue; accuracy of disclosed information. An indemnity is worth little from an anonymous individual and more from a company or through a holdback.
• Mark-related covenants. If the seller used the term as a brand, buy the mark with its goodwill: 15 U.S.C. § 1060 and Sugar Busters LLC v. Brennan, 177 F.3d 258 (5th Cir. 1999) explain why an assignment in gross fails. Consider a covenant not to use the term or a confusingly similar one. Record the assignment if a registration exists, using Recording a Trademark Assignment: A Practical Checklist.
• Cooperation. Seller will unlock, supply the code, confirm any registrar messages, keep the contact email working through closing, and sign anything else needed. Add a short post-closing assistance period and a further-assurances clause.
• Cleanup. Seller will move its own accounts and password resets away from addresses at the name before closing, will not use any retained certificate or credentials, and will not contest the transfer or file a chargeback.
• Confidentiality. Covers price and buyer identity, with carve-outs for counsel, tax, law, and enforcement. A seller who later learns who you are should still be bound.
• Law, forum, and remedies. Specific performance is the remedy that counts. An injunction may be needed under Fed. R. Civ. P. 65 if the seller stalls or tries to re-sell. Choose a forum where you could actually enforce.

Keep tax in mind. Chief Counsel Advice 201543014 says the cost of a name bought for business use must be capitalized and, on certain facts, amortized over 15 years under 26 U.S.C. § 197. It may not be cited as precedent under 26 U.S.C. § 6110(k)(3), and it does not reach every situation. A foreign seller raises information-reporting and possible withholding questions. Ask a tax adviser before you sign.

Step 9: Open escrow

Who: counsel or finance. When: after signing, or at signing.

Use an established, licensed agent. In California, for instance, escrow agents are licensed under Cal. Fin. Code § 17000 and following. Confirm the agent's site by typing its address yourself, not through a link in the seller's email, because fake escrow sites are an old scam in this market. Confirm wire details by phone with a number you found independently.

Instructions should say what triggers release. Most consumer escrow forms say the buyer confirms receipt within a set inspection window, often a few days, and silence releases the money. For a name of real value, negotiate these points:

• Release condition: the name appears in the buyer's registrar account, the buyer is confirmed as registrant, and the registrar lock is under the buyer's control. A status check against RDAP backs this up.
• Inspection period: long enough to cover a Change of Registrant confirmation (see Step 10). A short window that ends before the seller has confirmed a registrar email defeats the point.
• Holdback: for a significant price, a small percentage held for 30 to 90 days can cover chargebacks, reversals, or later title claims. See Escrows, Holdbacks, and Purchase Price Security: Who Holds the Money and Who Gets It Back and Escrow Agreement Review Checklist.
• Who holds identity data: the escrow agent will require know-your-customer information about your entity. Ask that it not be shared with the other side.

If the seller wants to skip escrow, treat that as a diligence fact. For small sums, some people pay on delivery through a marketplace's own process. Few legitimate sellers of valuable names object to a known agent.

Step 10: Close in the right order

Who: a named technical lead, with counsel. When: closing window of one to two weeks.

The closing is a short sequence where the order matters. Here is what the current policy requires and what to do about it.

The rules that shape the sequence

Under the Transfer Policy, as updated:

• A registrar may refuse an inter-registrar transfer within 60 days of the name's creation or of a prior transfer.
• A "Change of Registrant" is a material change to the registrant's name, organization, or email address, including any change to the registrant's email address.
• A Change of Registrant requires confirmation by the prior and new registrants (or their designated agents) and triggers a 60-day lock on inter-registrar transfer, unless the registrant opted out beforehand and the registrar offers an opt-out.
• A transfer request gets five calendar days at the losing registrar. Silence is approval.
• The losing registrar must give the registrant the authorization code, and remove the lock, within five calendar days if it does not offer self-service.

ICANN's Board adopted 47 reform recommendations on 7 June 2026, in Resolution 2026.06.07.04. When implemented, they will rename the code a Transfer Authorization Code valid for 14 days and usable once, set 30-day restrictions after creation and after a transfer, remove the post-registrant-change lock, and drop the two-sided confirmation. We could not confirm an effective date as of this guide's date. Ask both registrars, in writing, what they do today.

The recommended sequence for a seller at another registrar

1. Pick your final registrar first. Because a transfer can trigger a further restriction, you want the first move to be the last. Set up a company-controlled account with hardware-key multi-factor authentication.
2. Pre-closing check. Status, expiry date (renew if it is close), privacy service, and whether the registrant email works. If the seller's email is dead, plan carefully: fixing it is itself a Change of Registrant and could trigger the lock. Have the seller select the opt-out, if offered, before making the change.
3. Escrow funded. Agent notifies parties.
4. Seller unlocks and gets the code. Under the rules ahead, the code will expire after 14 days, so don't request it early.
5. Buyer starts the inter-registrar transfer at the gaining registrar, entering the code and paying for the added year.
6. Seller confirms the registrar's transfer message, if any, to speed things up rather than waiting five days.
7. Name arrives. Buyer sets the registrar lock, changes the account contacts for security, and checks RDAP.
8. Buyer updates registrant data. Under current rules, this is a Change of Registrant. Both sides confirm. A 60-day lock now is harmless, because the name is where it will stay.
9. Buyer confirms to escrow, and the agent releases funds. Keep the seller responsive until then.

When the seller is at the same registrar

A marketplace "push" to your account at that registrar can be quick and clean, but it may lock the name at that registrar for 60 days. If that registrar is acceptable for two months, this is fine. Move later, in an orderly way, and calendar the date. If it is not acceptable, insist on an inter-registrar transfer first.

What about DNS?

Don't change the name servers until you hold the name, and don't let a live seller's site go dark without warning if the deal includes a transition. If the seller has been running DNSSEC, remove or replace the delegation-signer records as part of the changeover. Lower TTLs before the cutover if you can reach the old zone. Prepare your new zone first, with mail and web records in place.

Step 11: After closing, migrate and secure

Who: IT lead. When: first day through first month.

The technical details of hardening are in Domain Name Security and Recovery Checklist: A Practical Checklist. These are the ones specific to a bought name.

Day 0. Registrar lock on. Registry lock if the name is valuable and the registrar offers it. Auto-renew on, multi-year term, role-based contact address on a different domain from the one you just bought. Password and recovery options reset.

Email. No catch-all. Create only the mailboxes you need, and reject everything else. Publish SPF, DKIM, and DMARC records that say no one else may send as you. Old senders will keep trying, and some of their mail may be sensitive. If something arrives by accident, do not use it. A password reset for someone else's account belongs to that account's owner, and using it can create exposure under 18 U.S.C. § 1030 and 18 U.S.C. § 2701, and interception theories under 18 U.S.C. § 2511 are not something you want to test. For how these issues play out, see Computer Access Dispute Toolkit: Access Revocation Letters, Loss Worksheets, and Pleading Outlines.

Certificates. Search certificate transparency logs. Ask the certificate authority to revoke anything issued to the old holder. Add a CAA record limiting who may issue for your name.

Dangling integrations. Reclaim or remove old verification records. Claim the name in your identity provider, Google Workspace or Microsoft tenant, and search console. Check whether a prior tenant still claims the domain, and use the provider's process if so.

Content. Don't leave a parked page up. Prudential and Lahoti v. Vericheck, Inc., 636 F.3d 501 (9th Cir. 2011) both held an ad-link page against its holder, and neither "the registrar chose the ads" nor "I couldn't control the links" helped. A plain "coming soon" page, or a redirect to your real site, is far safer. Overview 3.1 section 3.3 warns that passive holding can itself be bad faith in the right circumstances, so make your use visible early, and keep the proof.

Reveal. There is no rule about timing. Most companies stay quiet until launch and sometimes keep the holding entity indefinitely. Consider whether any trademark application should be filed the day after the name closes, and whether your agreement's confidentiality clause covers the seller.

The closing file. Keep the agreement, escrow statements, registrar transfer records, RDAP snapshots before and after, the intent memo, clearance results, and proof of first use. It goes with the name, and it's the first thing counsel will ask for if a complaint arrives years from now. Calendar the renewal and any lock-release dates.

Step 12: If it goes wrong

The seller fails to transfer after signing. Escrow keeps the money; you may have a contract claim and may seek specific performance. Send a demand and consider Fed. R. Civ. P. 65 if there is a resale risk.

A former owner surfaces with a theft claim. Stop any resale, preserve records, and contact counsel. Your fact pattern is CRS Recovery. You may have warranty claims against your seller, for what they are worth, and your escrow holdback matters here.

A UDRP complaint arrives. The name will be locked. You have 20 days to respond under Rule 5 of the UDRP Rules, with four more available on request. Assemble the intent memo and use evidence. Ask for a three-member panel if the case is close. Consider seeking a finding of reverse domain name hijacking if the facts support it. See Domain Name Dispute Checklist: A Practical Checklist.

You lose the UDRP. Under paragraph 4(k), the registrar will wait ten business days and hold implementation if it receives a file-stamped complaint in the Mutual Jurisdiction. The clause to sue under is 15 U.S.C. § 1114(2)(D)(v), and a buyer qualifies as the current registrant under Blair v. Automobili Lamborghini S.p.A., No. 2:22-cv-01439 (D. Ariz. July 14, 2023). Dent and JFXD TRX ACQ LLC v. trx.com, No. 2:23-cv-02330 (D. Ariz. May 8, 2024) (where the buyer defended a mark owner's ACPA suit rather than suing) show that buyers can win, and that fee awards can follow in exceptional cases under 15 U.S.C. § 1117. Note the Ninth Circuit rule in those cases will not apply everywhere. Sallen v. Corinthians Licenciamentos LTDA, 273 F.3d 14 (1st Cir. 2001) and Storey v. Cello Holdings, L.L.C., 347 F.3d 370 (2d Cir. 2003) set out the action's nature. Consider a companion count under 28 U.S.C. § 2201, and see Getting Into or Staying Out of Federal Court: A Practical Guide to Jurisdiction and Removal on keeping the case in the right court.

You get a demand letter from a mark owner. Don't respond in anger, and don't sell the name to the sender on the spot. Consider the date analysis, your use, and whether a negotiated coexistence would do.

A public company example

Suppose Verrano Freight, after Dana's unfortunate email, starts over with a different target: verranologistics.com, plus a shorter name, verrano.co, held by a Colombian marketing agency. The brand launch is confidential, and the public company has disclosure and insider concerns about the rebrand itself.

Counsel forms a new Delaware LLC with a neutral name and retains a broker by flat fee, with a success bonus for beating the target. The broker's first message names no client. When the agency asks, the broker says that the client prefers confidentiality and asks whether that is a problem. It isn't. Clearance has already been done, and counsel has noted a small Italian clothing mark, which is far enough away. The company's intent memo cites the rebrand plan, dated months before.

Diligence shows the .co name was registered in 2015 and has been used for the agency's client campaigns. .co is a country-code domain with its own registry rules; its registry has adopted the UDRP, but transfer and other registration rules come from the registry, so counsel checks those rather than assuming the gTLD rules apply; the Top-Level Domain Names: An Overview overview and the country-code material in Beyond the UDRP: Uniform Rapid Suspension, Country-Code Domain Disputes, In Rem ACPA Actions, and Reverse Domain Name Hijacking help. The agency also has a bank lender, so counsel runs a UCC-equivalent check and asks for a lien release representation. The agreement includes a covenant that the agency will stop using the term for its own campaigns after 60 days.

The agreement is in the LLC's name, closing is through an established escrow agent with a 10 percent, 60-day holdback, and the IT lead runs the sequence from a shared run sheet. The company keeps the LLC as registrant and licenses the name to the operating company. It files its trademark applications through the operating company on launch day, and its securities counsel is told about the plan early, since a rebrand can be material.

The total cost of this structure is perhaps a few thousand dollars in fees above the purchase price. On a name that would have cost a multiple of that with the company's name attached, it pays for itself. The more important gain is the file: if a complaint arrives in 2031, the company can show what it knew and when.

Costs and trade-offs at a glance

Common mistakes

Contacting the seller from company email. The signature block is the most expensive thing in this guide.

Telling a story instead of keeping quiet. The urge to seem small leads to false statements. Silence is safer and legally cleaner.

Letting multiple people approach the seller. Marketing, a founder, and a broker all writing separately look like desperation and create a messy record.

Threatening a UDRP you can't win. It will not lower the price, and it may appear in a hijacking finding.

Filing "Plan B" after a failed negotiation. If the name predates your mark and the holder has not targeted you, a complaint is unlikely to succeed and can backfire publicly. If a claim exists, it was there before you made the offer.

Skipping clearance because the name is "old." The prior holder's date is no help to you under the UDRP or in the majority circuits.

Assuming a WIPO search equals title diligence. The buyer in CRS Recovery did that and still ended up in the Ninth Circuit.

Believing that holding control of the account means holding good title. Anyone holding stolen credentials has control. Ask how the seller got the name.

Using false registrant data for secrecy. Use a real entity and a privacy service instead.

Changing the seller's email just before closing. A fix made in good faith can trigger a Change of Registrant and a 60-day lock.

Changing the registrant first, then trying to move registrars. The result may be a name stranded at a registrar you did not want.

Releasing escrow before confirmation is complete. Hold funds until the registrar shows you as registrant and you control the lock.

Leaving the name parked on ad links. That page is your evidence of intent, and you do not control what it advertises.

Turning on catch-all email. You will receive messages you should not read.

Moving the name around within the group after a third-party mark has appeared. Keep it in one entity if you can.

Not keeping a file. Five years later, the deal memory will be gone, but the complaint will still ask what you knew.

If you are the seller

Everything here has a mirror image, and sellers can benefit from a few reminders.

You may sell a name for profit. Overview 3.1 section 3.1.1 says that registering a name for resale does not by itself show bad faith, and Virtual Works, Inc. v. Volkswagen of America, Inc., 238 F.3d 264 (4th Cir. 2001) says the ACPA was not enacted to end all domain sales. Offers and asks become a problem when they target a mark owner: 24-hour ultimatums, threats to sell to a competitor, or pointing the name at a competitor's ads. GoPets shows the risk in registering new names to pressure a buyer, even when the original name is safe.

Keep your documentation of how you acquired the name. Do not misstate your acquisition date or history; buyers may now ask for it in a representation, and a false one can cost you more than the sale. Clean your own accounts off the name before closing, and take care with anything that still sends mail there. Consider the tax treatment of your gain. Know who you are selling to only if it matters: an anonymous buyer is normal, and if you care, you can ask for a representation or refuse the deal. Use escrow yourself, since chargebacks and fake payment confirmations are common scams against sellers.

This guide is general information and not legal advice for a specific situation. If the price or the brand risk is significant, an hour with counsel before the first email is usually the cheapest hour in the deal.

Related Documents

Related Articles

• Buying a Domain Name From Its Current Owner: Brokers, Escrow, Transfers, and the UDRP Risks You Inherit: the sibling article with the doctrine, the circuit split, and the leading cases read closely.
• Stolen Domain Names: How Domain Hijacking Happens and the Legal Paths to Getting One Back: how theft happens and what a former owner may do to a later buyer.
• Domain Name Disputes: Cybersquatting, the ACPA, and the UDRP: the wider law of cybersquatting and the UDRP.
• How to Conduct a Comprehensive Trademark Clearance Search: how to clear the term before contact.
• Escrows, Holdbacks, and Purchase Price Security: Who Holds the Money and Who Gets It Back: general escrow structures, including holdbacks.
• Fraud on the USPTO: How a False Declaration Can Cost You a Trademark Registration: the declaration issue if your new name becomes a trademark application.

Related Guides

• Choosing the Right Domain Name Dispute Procedure: A Practical Guide: deciding between purchase, UDRP, URS, and court.
• Recovering a Hijacked Domain Name: A Practical Guide: responding if the bought name is taken.
• Setting Up and Administering a Deal Escrow: A Practical Guide: administering a larger escrow.
• Filing or Defending a Declaratory Judgment Action: A Practical Guide: the procedure for a declaratory action if you must defend a purchased name.
• Getting Into or Staying Out of Federal Court: A Practical Guide to Jurisdiction and Removal: forum choices and removal in domain litigation.

Related Checklists

• Domain Name Acquisition Checklist: A Practical Checklist: the sibling desk checklist for the steps above.
• Domain Name Security and Recovery Checklist: A Practical Checklist: post-closing hardening.
• Trademark Clearance Search Checklist: A Practical Checklist: the clearance steps.
• Escrow Agreement Review Checklist: reviewing an escrow agreement.
• Trademark Declaration Accuracy Checklist: A Practical Checklist: signing an application accurately.

Related Toolkits

• Domain Acquisition Toolkit: Outreach Scripts, Purchase Agreements, and Post-Closing Records: the sibling working papers, with scripts, a purchase agreement, escrow instructions, and a closing run sheet.
• Domain Recovery Toolkit: Registrar Demands, Transfer Dispute Filings, and In Rem Complaints: what the other side's demands look like if provenance goes wrong.
• Brand Ownership Toolkit: Assignment Agreements, Founder IP Clauses, and Ownership Evidence Files: assignment agreements for any associated brand.
• Acquisition Agreement Toolkit: Reps, Schedules, Escrows, Earnouts, and Claim Notices: longer-form reps and holdbacks for larger deals.
• Computer Access Dispute Toolkit: Access Revocation Letters, Loss Worksheets, and Pleading Outlines: papers for a dispute over account access after closing.