My domain was transferred without me having requested it
Is your domain suddenly gone from My WebOké, or did you get a message about a transfer that you didn't request? Then contact us right away. In this article you'll read what to tell us and how to better secure your domains from now on.
First: was it really not intentional?
Check whether someone else started the transfer, for example your web builder, a colleague, or a new provider where you ordered a package. A transfer can only start with the transfer code (auth code) of your domain. Whoever has that code can transfer the domain.
Create a ticket right away
Create a ticket in the Support Center of My WebOké and include:
- the domain name;
- the date you noticed the domain was gone, or the date of the email about the transfer;
- who the holder of the domain is: a copy of a valid ID, and for a company also an extract from the Chamber of Commerce (KvK);
- everything you know about the new provider, such as an email or notification you received.
We'll then contact the registry, the manager of the extension. For .nl that's SIDN, for .be DNS Belgium. The registry determines whether and how a transfer can be reversed. This works faster if you act quickly. Whether costs are involved depends on the registry and the situation.
How to secure your domains
- Keep your transfer code secret. Only give it to the provider you're moving to, never by email to anyone else. Codes are valid for 30 days. See How do I request the transfer code/EPP token?.
- Turn on the transfer lock. Open your domain under My Domains and check the Advanced card under Transfer lock. If the lock is on, the registry will refuse transfers that you didn't request. For .nl, .eu, .be, and .nu there is no transfer lock: there, the transfer code itself is the security. See Transferring a domain away: transfer code (EPP) and transfer lock.
- Turn on two-factor authentication on your WebOké account. That way no one can log in with just your password and request your transfer code. See How do I enable two-factor authentication?.
- Check who has access to your account under My Administration › Users, and remove people who no longer need access. See Inviting users and granting permissions.