My domain was transferred without me requesting it
Has your domain suddenly disappeared from My WebOké, or did you get a message about a transfer you didn't request? Contact us right away. In this article you'll read what information to send us and how to better secure your domains from now on.
First: was it really not intended?
Check whether someone else started the transfer, for example your web developer, a colleague or a new provider where you ordered a package. A transfer can only start with your domain's transfer code. Anyone who has that code can transfer the domain.
Create a ticket right away
Create a ticket in the Support Center of My WebOké and include:
- the domain name;
- the date you noticed the domain was gone, or the date of the email about the transfer;
- who the domain holder is: a copy of a valid ID, and for a company also an extract from the Chamber of Commerce (KvK);
- everything you know about the new provider, such as an email or notification you received.
We'll then contact the registry, the organization that manages the extension. For .nl that's SIDN, for .be it's DNS Belgium. The registry decides whether and how a transfer can be reversed. This works faster if you act quickly. Whether there are costs involved depends on the registry and the situation.
How to secure your domains
- Keep your transfer code secret. Only give it to the provider you're moving to, never by email to anyone else. Codes are valid for 30 days. See How do I request the transfer code/EPP token?.
- Turn on the transfer lock. Open your domain under My Domains and look at Transfer lock on the Advanced card. If the lock is on, the registry refuses transfers you didn't request. For .nl, .eu, .be and .nu there is no transfer lock: there, the transfer code itself is the security. See Transferring a domain away: transfer code (EPP) and transfer lock.
- Turn on two-factor authentication on your WebOké account. That way nobody can log in with just your password and request your transfer code. See Setting up two-factor authentication in My WebOké and an authenticator app.
- Check who has access to your account under My Administration › Users, and remove people who no longer need access. See Inviting users and granting permissions.