You looked up your domain and saw this. Before panicking, here's what it actually means:
These flags are standard Registrar Lock — a security feature, not a special hostage mechanism. GoDaddy can unlock them. You have multiple paths to force that. Most business owners resolve this in 3–5 business days.
Before going through GoDaddy, give the agency one clear, documented opportunity to hand it over. This email creates a legal paper trail and usually resolves the situation immediately — because no agency wants a UDRP complaint on their record.
Name the specific date and time in the email. If they don't respond, move directly to Phase 2 — do not negotiate, do not extend the deadline.
If the agency registered the domain in their own GoDaddy account — or you don't have the login — GoDaddy has a legal-grade recovery process specifically for this situation. They deal with hostile agency handoffs regularly.
Navigate to: https://supportcenter.godaddy.com/accountrecovery (or changeupdate.com — same destination). Select "Recover your Account" or "I've lost access to the primary email address."
GoDaddy requires proof that you are the legitimate business owner. Have these ready:
"Hi, I'm a small business owner. My web design agency is holding my company's domain hostage and has placed transfer locks on 3steptrailerrentals.com. I just submitted an official Account Recovery request with my business license and government ID. I need this escalated to your Change/Update Verification Department. The domain is 3steptrailerrentals.com. Can you verify my documents were received and assign a priority ticket number?"
By ICANN regulation, the registered owner contact information on a domain must be accurate. If the agency listed their own email, name, or address as the domain owner — they are in direct violation of ICANN's Registration Data Accuracy rules. GoDaddy risks losing its registrar license if it ignores this.
Go to: https://icann-nsp.my.site.com/compliance/s/registration-data
State that the WHOIS registration data is inaccurate because the domain is listed under a third-party developer's contact information instead of the true business owner (you). Upload your LLC documents and ID.
ICANN issues a formal inquiry to GoDaddy. GoDaddy is legally required to contact the registered owner (your agency) and demand they verify the accuracy of the registration data within 15 days. If the agency fails to provide proof they legitimately own the domain, GoDaddy's legal team typically steps in and transfers control to the rightful business owner.
The Uniform Domain-Name Dispute-Resolution Policy is an international arbitration process that exists specifically to combat bad-faith domain holding. No court appearance needed — it's handled entirely by an administrative panel.
You win a UDRP case by proving three things — all of which apply here:
File through WIPO (World Intellectual Property Organization) at wipo.int/amc/en/domains. Filing fee is typically $1,500–$2,000. Resolution takes 45–60 days. If you win — GoDaddy is legally required to transfer the domain to you within 10 days of the ruling.
If everything above stalls, this ends it. No agency on earth wants to defend a lawsuit over a $15/year domain.
Pay a local business attorney to send a formal demand letter citing tortious interference with business relations, conversion of property, and trademark infringement. When an agency receives this on law firm letterhead, they almost always comply within 24 hours. The domain isn't worth a $10,000 legal defense.
If your attorney obtains a temporary restraining order or injunction, email it directly to CourtDisputes@godaddy.com. GoDaddy's compliance team bypasses all locks and transfers the domain immediately upon receiving a court order — no waiting, no negotiation.
| Phase | Action | Timeline |
|---|---|---|
| 1 | Send the formal demand email to your agency requesting the EPP transfer code | Give them 3 business days |
| 2A | Submit Account Recovery at changeupdate.com with your LLC docs + photo ID | Submit same day as email |
| 2B | Call GoDaddy at (480) 366-3550 — ask for "Change/Update Verification Department" | Call after submitting 2A |
| 3 | File ICANN accuracy complaint if agency used their own contact info | GoDaddy has 15 days to respond |
| 4 | File UDRP through WIPO if they're holding for leverage or payment | 45–60 days to resolution |
| 5 | Attorney C&D letter or court order emailed to CourtDisputes@godaddy.com | Usually resolves in 24–48 hours |
95% of cases like this resolve at Phase 1 or Phase 2. Agencies are not in the business of fighting ICANN complaints or UDRP arbitration over a domain they have no legal right to. The moment you demonstrate you know the process — most back down fast.