Buying a domain directly from an owner can make communication simpler, but it also means you should verify the seller before discussing payment or transfer details. A polished listing, professional email address, or low asking price does not prove that the person advertising a domain can legally or technically transfer it.

If you are asking, how do I verify that a domain seller is legitimate?, use a layered process: confirm the domain’s registration information where available, ask the seller to demonstrate control without exposing sensitive credentials, compare the seller’s identity across communications, and use a transaction method that protects both parties.

Start with the domain’s public registration information

Begin with an independent lookup rather than relying only on information supplied by the seller. ICANN’s Registration Data Lookup Tool uses RDAP to show available registration data for many generic top-level domains. The result may identify the registrar, registration dates, status codes, nameservers, or public registrant information.

Privacy services and current data-protection rules often conceal the individual registrant’s name, so a private record is not automatically suspicious. Treat the lookup as one piece of evidence. Compare the registrar and domain status with what the seller tells you, and note whether the domain appears recently transferred, locked, expired, or involved in a pending dispute.

ICANN explains that the registrant manages domain settings through the registrar and has rights related to registration, renewal, and transfer processes. That makes the registrar account—not a screenshot or marketing page—the important control point. See the ICANN information for domain name registrants for background.

Ask for a low-risk proof of control

Good domain ownership verification should demonstrate control without asking the seller to reveal a password, authentication code, recovery email, or other sensitive account information. Ask the seller to complete one temporary, reversible action that you can independently observe.

• Place a short, unique verification phrase in the domain’s DNS TXT record.
• Create a temporary page or redirect containing a phrase you provide.
• Add a verification record through the seller’s DNS provider and remove it after confirmation.
• Send a confirmation email to an address clearly associated with the domain, when appropriate.

DNS changes can take time to appear, and hosting access is not always the same as registrar ownership. Therefore, use these methods as evidence of control, not as conclusive proof of legal title. A seller who refuses every reasonable verification step, provides only recycled screenshots, or pressures you to skip checks deserves additional scrutiny.

Match the seller’s identity across every channel

Review whether the seller’s name, company, email domain, marketplace profile, payment details, and proposed transfer account are consistent. A mismatch can have an innocent explanation—for example, an employee may be selling for a company—but the seller should explain it clearly and provide documentation showing authorization to act.

Keep communication in the marketplace or in a written email thread. If you found the domain through the domain listings on Domain By Owners, use the listing and direct communication as a starting point, then perform your own independent checks. A marketplace profile can help you contact an owner directly, but it should not replace transaction due diligence.

Be cautious when a seller suddenly changes email addresses, claims that a representative must receive payment, or asks you to continue exclusively through an encrypted messenger. These facts do not prove fraud, but they make it harder to establish who agreed to the sale and where to seek help if something goes wrong.

Recognize risky payment and transfer requests

Payment instructions are one of the strongest scam indicators. Be especially careful with requests for cryptocurrency, gift cards, cash-equivalent payment apps, wire transfers to unrelated names, or payment to “release” a domain before any documented transaction exists. The Federal Trade Commission advises online marketplace users not to pay outside a marketplace’s protected system and to avoid payment methods that are difficult to reverse. Review its guidance on buying from an online marketplace.

Never treat an emailed payment receipt, wire confirmation, or screenshot as proof that funds have cleared. Confirm payment through your bank or the transaction provider directly, using a trusted website or phone number rather than contact information in an unexpected message.

Likewise, do not send a transfer code merely because the seller claims it is needed to “verify” you. For generic top-level domains, ICANN describes an Auth-Code as information used to identify the domain holder during a registrar transfer. It should be handled as a sensitive transfer credential and shared only through the agreed, legitimate transfer process.

Use a written agreement before money changes hands

For any meaningful purchase, document the exact domain, buyer and seller names, purchase price, currency, included assets, payment schedule, transfer method, deadlines, and responsibility for registrar fees. Clarify whether the sale includes a website, email accounts, trademarks, social media accounts, or only the domain registration.

Write down what happens if the domain is locked, subject to a recent registrant change, under a transfer restriction, or unavailable at the expected registrar. Save the listing, identity information, messages, invoices, verification results, and transfer confirmations in one folder. Documentation will not prevent every dispute, but it improves your ability to understand what was promised.

Know when escrow is the better choice

For a high-value or unfamiliar transaction, consider a reputable domain escrow service rather than sending money directly to the seller. Escrow generally holds funds while the agreed transfer steps occur, then releases payment according to the service’s terms. Check the provider’s identity, fees, dispute process, supported transfer workflow, and website address before using it.

Do not accept a seller’s replacement link without checking it independently. Scammers can imitate escrow brands with lookalike domains and fake invoices. Navigate to the provider’s official website yourself, confirm the transaction inside your account, and make sure the domain name and price match the written agreement.

A practical pre-offer checklist

1. Run an independent registration-data lookup and record the registrar and status.
2. Ask for a reversible proof-of-control step that does not require credentials.
3. Compare the seller’s identity, company details, email addresses, and payment name.
4. Search the domain and seller name for inconsistent ownership claims or copied listings.
5. Reject pressure to use irreversible payment methods or move outside the agreed channel.
6. Put price, transfer steps, deadlines, and included assets in writing.
7. Use escrow for transactions where the loss would be material.
8. Pause if any material question remains unanswered.

The goal is not to demand unnecessary personal information. It is to establish that the person negotiating with you can control the domain, is authorized to sell it, and agrees to a clear transfer process. Buyers who take these steps can still negotiate directly while reducing avoidable transaction risk. To begin researching owner-listed opportunities, you can create a DomainsNoBroker account and apply the same independent checks to every prospective purchase.

Frequently Asked Questions

Can a WHOIS or RDAP lookup prove that someone owns a domain?

Not always. Privacy services and limited public data may hide the registrant’s identity. A lookup can show the registrar, status, dates, and other useful details, but combine it with a low-risk proof-of-control step and written seller information.

What is the safest way to verify a seller controls a domain?

Ask the seller to complete a temporary DNS TXT record, temporary page, or other reversible action containing a unique phrase you provide. Never ask for passwords, authentication codes, or access to the seller’s registrar account.

Should I pay a domain seller directly?

For a low-value transaction between parties who know and trust each other, the parties may choose direct payment. For an unfamiliar seller or material purchase, consider reputable escrow and independently verify the provider, transaction details, fees, and dispute process.

What payment requests are major warning signs?

Be cautious of cryptocurrency, gift cards, cash-equivalent transfers, unexplained wire instructions, payment to an unrelated person, fake payment confirmations, or demands to pay outside an agreed marketplace or escrow process.

What should a domain purchase agreement include?

Include the exact domain, buyer and seller identities, price, currency, payment method, transfer procedure, deadlines, fees, included assets, representations about authority to sell, and what happens if the transfer cannot be completed.

Related topic: verified domain owner.