The safest way to buy a domain from a stranger is boring on purpose. You check the name, put the terms in writing, pay a licensed escrow service you reached yourself, wait until the domain is in your account, and only then let the money go. Sources below were checked on 25 October 2026. If you have not yet found the owner, start with how to buy a domain that is taken.
Step 1: check the domain and who controls it
Look the name up in ICANN Lookup (lookup.icann.org). It uses RDAP, “created as a replacement of the WHOIS (port 43) protocol”, and its results “come directly from registry operators and/or registrars in real-time”. You get the registrar, the domain status, the nameservers and the created, expiry and updated dates. The old whois.icann.org now redirects there. Reading the output is covered in RDAP lookup.
What RDAP often will not show is the owner. ICANN says “not all domain name registration data is required to be returned”, and you may see a “redacted” label instead. So prove control another way: ask the seller to add a DNS record or a file you choose, something only the controller can do. The domain lawyer Zak Muscovitch also advises a Whois history search, because a recent change of hands “can sometimes be an indicator of a domain name theft”.
Then check the name itself. Our Domain Age Checker gives the registration date and true age for up to 20 domains, with a flag for names that were dropped and re-registered. The Domain Spam History Checker scans archived pages for casino, pharma, adult and hacked-site spam, with the archived pages linked as evidence.
Step 2: agree the terms in writing
Put the price, currency, payment route, transfer method, deadline and what is included in one document. Muscovitch warns that parties “should not generally be relying upon email or other correspondence or conversations” to establish the terms. A short domain sale agreement does the job, and covers the ownership and trademark promises escrow does not.
Step 3: pay through escrow, at the real address
Escrow holds your money until the transfer happens. The risk is a fake escrow site. Escrow.com’s own FAQ describes the pattern: the seller recommends a site, “often indicating it is for the protection of the Buyer”, the buyer pays, and “the Seller (or an accomplice) pockets the money.” It adds that “the person recommending a fraudulent escrow site is usually a participant in the scam”, and that a seller caught out may simply suggest a second fake.
The habit that stops this: type escrow.com into the browser yourself, or open the transaction yourself. Never use a link the other party sends. Escrow.com says it “is not associated with or affiliated with any other escrow site.”
| Fake-escrow red flag | Source |
|---|---|
| The other party insists on a particular escrow site | Escrow.com buyers FAQ |
| Look-alike domain or copied design | Escrow.com FAQs |
| Site’s domain registered only days or weeks ago | Escrow.com “how can I tell” FAQ |
| Payment to an individual or “agent”, or a person-to-person transfer | Escrow.com FAQs |
| Only wire, e-currency or other hard-to-recover methods | Escrow.com “how can I tell” FAQ |
| No one reachable by phone; no address | Escrow.com FAQs |
The domain-age flag is easy to test: fake sites often claim years of trading, but “their domain names have only been registered for a few days or weeks”. Other tricks, such as renewal phishing and “pay me directly” offers, are in domain name scams. Whether Escrow.com itself is sound is in is Escrow.com safe.
How far each payment method can be reversed
The way you pay decides what you can recover. Most of the wording below is the US Federal Trade Commission’s, and the card rules are US law, so check what applies where you live.
| Payment method | Can it be reversed? (source wording) | Source |
|---|---|---|
| Wire via MoneyGram, Ria or Western Union | “like sending cash — once you send it, you usually can’t get it back” | FTC wire page |
| Bank transfer or Zelle | Ask the bank to “reverse the payment”; money “might be gone already” | FTC, What To Do if You Were Scammed |
| Payment app (Venmo, Cash App, PayPal) | Ask the app to “reverse the payment” | FTC, same page |
| Crypto | “typically are not reversible”; “do not come with legal protections” | FTC crypto page |
| Credit card (US only) | Fair Credit Billing Act dispute for items not accepted or not delivered as agreed; letter within 60 days; $50 cap on unauthorised charges | FTC credit card page |
| Licensed escrow (Escrow.com) | Funds released only after the transfer is confirmed or the inspection period ends | Escrow.com instructions, s.2 |
A wire is not the problem in itself. Escrow.com says a legitimate escrow company “will always ask you to wire money from your bank to theirs”, and suggests you “ask your bank to tell you where the money is headed.” A wire to a verified escrow account is normal. A wire straight to a stranger is how money disappears.
Steps 4 and 5: transfer, confirm, then release and keep records
Once escrow has secured the payment, the seller transfers the name, by push or auth code. Escrow.com’s instructions say it closes only when the transfer is confirmed, or the buyer accepts it, or the inspection period ends. The length of that period is agreed by the two parties. One trap: if you click neither Accept nor Reject, you are “deemed to be satisfied” and to have accepted the domain. So check it in your own account first: you are the registrant, the name is unlocked, and you can change the nameservers.
Escrow does not check ownership or trademarks; its instructions exclude the “condition of the ownership”. That is why step 1 matters. Under current ICANN rules, a change of registrant can also block a move to another registrar for 60 days, though some registrars let you opt out. More on the escrow mechanics is in domain escrow.
Then keep the paper trail: the written terms, the escrow transaction ID, payment receipts, RDAP output before and after, the registrar’s confirmation email and screenshots of the domain in your account. Namecheap’s guidance on hijacked domains says “documentation is key to proving your right to ownership”. Turn on two-factor authentication at your registrar, and never enter a login on a link someone emailed you.
What to do if it goes wrong
Act fast. The FTC’s guide What To Do if You Were Scammed sets out the steps for each payment method. For a bank transfer or payment app, contact the company immediately and “Ask them to reverse the payment and refund your money.” It is honest about the odds: “your money might be gone already”, but “it’s always worth asking”. Crypto is harder, because it lacks the protections of cards.
If the domain was hijacked rather than never delivered, your records are what prove ownership. The limit of all this advice is that no single step guarantees safety. Escrow protects the money, not the name’s history, so the checks in step 1 are yours to do.
Frequently asked questions
What is the safest way to pay for a domain?
Through a licensed escrow service you reached yourself, or a marketplace that holds the money until the transfer is confirmed. Avoid direct wires, crypto or payment apps to the seller.
Can RDAP tell me who owns a domain?
Often not. Contact details are frequently redacted. RDAP shows the registrar, status, dates and nameservers, so prove control by asking the seller to add a DNS record you choose.
How do I spot a fake escrow site?
The seller insists on it, its domain is new or looks like a real one, it asks you to pay an individual, or it takes only hard-to-recover payments.
Will a credit card chargeback protect me?
Not everywhere. The FTC’s dispute rules are US law, with a 60-day letter deadline. Elsewhere, check your card issuer’s terms.
The takeaway Check first, pay into escrow, release last. If you would rather buy where that order is built in, browse aged domains on the SERPHeroes marketplace. You check out through Escrow.com, or pay SERPHeroes directly, and either way the seller is paid only after the transfer is confirmed.
