July 23, 2026
Domain of Disbelief
Namecheap Gave My Account to an Unverified Third Party Just Because They Asked
Users say Namecheap handed over the keys after one phone call — and now the comments are in full panic mode
TLDR: A Namecheap customer says the company handed their account to another person after a simple phone call, even after being warned the access request wasn’t legitimate. In the comments, users swung from jokes to full-blown panic, with many sharing similar stories and urging people to move their domains elsewhere.
This story hit the internet like a customer-service horror movie: a long-time Namecheap user says the company let someone else take over an account simply because they called and claimed the domain belonged to their club. The wild part? The real account owner had already warned Namecheap that a password reset request was not made by them. Commenters were stunned that the company could call the owner to verify one support ticket, yet apparently didn’t bother doing the same before changing the password and email on the account. For many readers, that wasn’t a mistake — it was a giant red flag.
And the comments? Absolute registrar riot. One user declared Namecheap is “going the way of GoDaddy” and urged everyone to flee immediately, while another said they had already jumped ship to Porkbun after getting locked out and threatened with account closure over profile updates. Others piled on with “same thing happened to me” stories, turning one complaint into a full-on trust crisis. There was even debate over whether privacy tools might have stopped the whole mess, but that only added fuel: readers weren’t asking what the customer could’ve done better — they were asking why a company trusted a random caller over the person whose name was actually on the account. And yes, the joke of the thread landed hard: “Well, they didn’t call it NameCompetent, did they?” Ouch.
Key Points
- •The author says he had been a Namecheap customer for 13 years and was maintaining a .com domain for an old college club under his personal registration details.
- •A third party associated with the club initiated a password reset after discovering the domain was managed through Namecheap.
- •The author says he immediately notified Namecheap support that he had not initiated the reset and was contacted by phone to verify that ticket.
- •According to the article, Namecheap later changed the account password and associated email address after the third party called support and claimed the domain belonged to the club.
- •The author says he later resolved access directly with the club but moved a dozen important domains away from Namecheap because of the incident.