Paysage côtier normand aux tons doux de gris, bleu pâle et vert amande, peint dans un style atmosphérique et serein évoquant la lumière du bassin d'Honfleur.

How to Verify a Domain Seller Before You Buy

Buying a domain name can look simple when a landing page displays a seller’s email address, phone number, or messaging accounts. Those details are useful starting points, but they do not prove that the person contacting you controls the domain. A convincing profile can be copied, and an old association with a website may have no connection to the current registrant.

Verifying ownership means connecting the seller’s identity with independent evidence of control. For a name such as jean-louis-thibaut.com, which was previously associated with a painter in Normandy and is now presented for sale, the safest approach is to check the domain, the seller, and the transfer process separately.

Treat Contact Details As A Lead

Begin by recording every contact method shown on the sales page. Compare the email address, phone number, Telegram or WhatsApp profile, and any business name. Consistent details are reassuring, but they remain claims until supported by technical evidence or a trusted intermediary.

Look at the age and quality of each account. A recently created messaging profile, a generic Gmail address, or a social account with little history deserves extra scrutiny. Ask the seller to explain how they acquired the domain and why it is being sold, then check whether their answer fits the domain’s public history. Archived exhibition pages, such as past exhibition records, may help establish earlier use without proving present ownership.

Do not send identity documents, passwords, one-time codes, or payment before the seller has demonstrated control. A genuine owner should understand why you need verification and should not pressure you to act “right now” because another buyer is supposedly waiting.

Match The Seller To Domain Control

Use a WHOIS lookup or registrar information service to inspect the domain’s registration details. Privacy protection may hide the registrant’s name, so an obscured record is not automatically suspicious. Check the registrar, creation date, expiry date, status codes, and available abuse contact instead.

The strongest simple test is a temporary DNS change. Ask the seller to add a specific TXT record to the domain, such as a short verification phrase you provide. You can then check the record with a public DNS lookup tool. A seller who controls the registrar or DNS account should be able to complete this without revealing a password.

Another option is a temporary file or HTML verification token placed on the website. This is useful when the domain has hosting attached, although DNS verification is generally cleaner. Never accept a screenshot as the only evidence; screenshots can be edited and may show an old account rather than live control.

Compare Independent Public Evidence

Search the exact domain in quotation marks and review older pages, business listings, cached references, and archived versions. Look for consistent ownership clues, but remember that historical association is different from current legal ownership. A former artist, company, or organisation may have allowed the registration to lapse or transferred it years ago.

Check external references with care. A page such as an external publication may show that a name or project appeared online, but it should not be treated as a registrar record. Search results can also contain scraped content, impersonation pages, or outdated contact details.

If the seller claims to represent an estate, studio, company, or agency, request evidence of authority. That might include a business registration, a signed authorisation, or correspondence from an address connected to the organisation. Verify those details using an independent website or public register rather than links supplied only by the seller.

Keep Payment And Transfer Separate

A secure transaction separates proof of control from payment. Domain marketplaces and escrow services can hold funds until the name is transferred to your registrar account. Confirm that the service is genuine by typing its address into your browser or finding it through an independent search, rather than following an unexpected payment link.

Avoid cryptocurrency, gift cards, irreversible bank transfers, and requests to pay a personal account when the seller claims to be a business. A bank transfer in Australian dollars may feel familiar, but it generally offers less protection than a reputable escrow arrangement. Check the exact spelling of the recipient and do not rely on a PayID display name alone.

Before releasing funds, agree in writing on the domain name, price, currency, renewal status, transfer code, included email or hosting services, and responsibility for registry fees. Make sure the seller unlocks the domain and provides the correct authorisation code only through a secure process. The transfer should finish in your own registrar account, not merely show as “pending” in a seller’s screenshot.

Apply Australian Buyer Protections

Australian buyers should check whether the seller is operating as a business and whether Australian Consumer Law may apply. A private overseas seller may not provide the same practical remedies as an Australian company. Search the Australian Business Register, ASIC records, domain marketplace reviews, and Scamwatch guidance where relevant.

For a .com domain, auDA rules do not govern the registration itself, although Australian registrars and payment providers may still be involved. If you are buying a .com.au name instead, eligibility rules, registrant details, and transfer requirements are more specific. Do not assume that an Australian phone number means the seller is located in Australia.

Time zones can also expose inconsistencies. A seller claiming to operate from Sydney, Melbourne, or Brisbane should be able to arrange a sensible verification call during Australian business hours, while a Normandy-based owner may work on Central European Time. A clear, professional explanation is more useful than a forced accent or polished profile.

Verification Checklist

Use several independent checks rather than relying on one friendly conversation. A fair-dinkum seller will normally accept a short verification period and will understand that a buyer needs records before paying.

  • Confirm the domain’s registrar, status, expiry date, and transfer lock.
  • Ask for a live DNS TXT record or temporary website verification file.
  • Match the seller’s identity with business, historical, or authorisation records.
  • Use a reputable marketplace or escrow service for payment and transfer.
  • Review the written sale terms, including renewal fees and included services.
  • Keep copies of messages, invoices, lookup results, and transfer confirmations.

If the seller refuses every technical check, changes payment instructions, or creates urgency, stop the transaction. The price may be attractive, but a cheap domain is no bargain if it is stolen, encumbered, or impossible to transfer.

Contact the seller through the published channel, request a live ownership verification step, and proceed only when the evidence, payment method, and transfer conditions all align.