← Back to the journal

Your website

Who actually owns your domain, you or your agency?

Your registrar's most boring email quietly reveals who the domain is registered to, and the public WHOIS lookup never will.

July 15, 20266 min read
A man searching through folders in an office storage room
Photo: MART PRODUCTION / Pexels

The answer is almost certainly sitting in your email rather than in any lookup tool. A renewal invoice, or a dull annual notice you've deleted five years running — that's where it lives. So: who actually owns your domain, you or your agency? You can settle it this week on your own, and the public record barely helps.

Why the WHOIS lookup won't tell you

Two words explain most of the confusion. The registrant is the owner — the name the domain is registered to, and the only role that settles anything. The registrar is the company it's registered through: GoDaddy, Namecheap, IONOS. Your agency is often neither of those. Plenty of them simply log into an account that stands in your name and change things for you, which is a perfectly ordinary arrangement. The one bad case is the agency being the registrant, because then your website, your email and the number painted on your van all hang off something you don't own. It's the reason picking a domain deserves a deliberate decision on day one.

Now run the lookup anyway. Under ICANN's registration data rules, registrars generally strip the registrant's contact details out of the public record and print REDACTED instead, offering an anonymous web form or forwarding address in place of a name. Which is why "just check the WHOIS" fails the one person who most needs an answer. Occasionally a registrant has chosen to publish their details and the name is simply there — if it's your agency's, you can stop reading.

Even redacted, the record earns its 60 seconds: it still names the registrar and shows the registration and expiry dates. That's the thread to pull.

Follow the money: who actually owns your domain, you or your agency?

Somebody pays for this domain every year, and that payment leaves a trail. Search your email and your card statements for the registrar's name, for "domain renewal", or for the domain itself. Then read what turns up carefully, because the three likely results mean very different things:

  • A renewal invoice from a registrar, addressed to you. Promising. The account is probably yours. Go to that registrar, reset the password using that email address, log in, and find the domain's registrant section. Whatever name sits there is your answer.
  • Your agency bills you a line item called "domain". Careful here. They can pay the registrar, rebill you at a markup, and still be the registrant themselves. Plenty of owners stop at this invoice and relax years too early.
  • Nothing bills you at all. Then someone else is paying, and that someone had a reason to keep the paperwork.

A bill tells you who pays. The registrant field tells you who owns. Only one of those settles the question.

The dullest email your registrar sends

Once a year, every registrar has to do something helpful whether it wants to or not. ICANN's long-standing reminder policy requires it to present the registrant with the registration data currently on file and remind them that inaccurate details can cost them the domain. Registrars typically send it by email, often a few months ahead of the renewal date, and it is the most ignorable message in your inbox.

Go find it. Search for the registrar's name together with "registration data" or "WHOIS". If one turns up addressed to you, open it — you're looking at the record itself.

The detail that matters is where that email goes: to whatever address sits on the registrant contact. So if you've never seen one, there's a decent chance the address on file isn't yours. Be fair about what that proves, though. It's a lead worth chasing rather than a verdict — check spam, and check the old address you used when the business started.

While you're there, look hard at that address. It's the one that will receive every renewal warning, every expiry notice and every transfer confirmation this domain ever generates. If it belongs to a member of staff who left in 2021, or to a committee member who has long since moved on, you'll find out at the worst possible moment — which is exactly why handing a club over to a new committee should start with the domain rather than end with it.

If the agency turns out to be the registrant

Whether they were entitled to do that, what your contract actually says, and what you can demand back are legal questions. This is the point where you want a lawyer who handles small business contracts; an hour with one will get you further than a week of reading. Get that advice before you escalate anything.

The technical shape is worth understanding first, though. A transfer between registrars runs on an authorization code, and the registrar releases that code to the registered name holder. Read that phrase again: the registered name holder. If your agency is registered as the holder, a registrar that refuses to hand you the code is doing precisely what it's supposed to do. Those rules protect whoever's name is in that field, so the useful moment to learn whose name that is arrives well before anyone falls out.

Worth saying out loud, since we sell websites ourselves: the likeliest outcome of everything above is that you're already the registrant and there's nothing here for you to do. That's a boring result, and it's the one we'd rather hand you than a scare that conveniently ends with you switching to us.

Where to start this week

Open your inbox before you open anything else. Search the registrar names you recognise, then "domain renewal", then your own domain. Whatever comes back, follow it to a login screen, get into the registrar account, and read the registrant field with your own eyes. That single field is the thing you've been trying to find out.

One question for support before you touch anything: if you plan to both move the domain into your own account and correct the registrant details, ask which order they want it done in. Changing registrant details has historically locked a domain against transfers for a couple of months, ICANN has been rewriting these rules, and the honest answer in 2026 depends on your registrar. Two minutes of asking beats two months of waiting.

And once the domain really is yours and you move the site, mind the sequence there too, or your old site will keep turning up in Google long after the new one launches.

More posts

Rather have it built for you?

Tell us about your business and see a real, finished website in seconds.

Create free preview