Prevent Domain Slamming: Use the 'Whois' Hack

Key Takeaways

• Scammers send fake "expiration notices" that look like bills but are actually hidden requests to transfer your domain to a more expensive service.
• Check your real registrar using the ICANN Lookup tool to see exactly where your domain is held and when it actually expires.
• Official business name and contact information can be hidden from the public using "Domain Privacy" to reduce the amount of junk mail you receive.
• Real domain renewals usually cost between $12 and $30 per year, while scam "slamming" invoices often charge $80 or more.

You just opened a piece of mail that looks like a final notice. It has a bold "EXPIRE DATE" in red, a professional-looking logo, and a bill for $85.00 to keep your website address active. As a new business owner, your first instinct is to grab the company credit card to make sure your site stays online.

Stop. You are likely being "slammed."

Domain slamming is a type of deception where a company sends you a fake invoice designed to trick you into switching your domain name provider. These companies aren't your actual registrar—the company you originally paid for your web address—but they want you to think they are. This article will help you PREVENT a costly mistake that could cost you hundreds of dollars and potentially lose you control of your website.

What the Scam Looks Like

A solo pet groomer in Georgia recently received a letter from the "Domain Listings Department." It looked like a tax bill. It cited her website name and warned that her "listing" was about to expire. Fearing her customers wouldn't find her on Google, she paid the $180 fee.

In reality, her domain was registered at Namecheap for just $15. The letter she paid wasn't a renewal; it was a bill for a useless directory listing she didn't need. These scams rely on the fact that most business owners are busy and don't remember which company they used to secure-business-name-and-domain-fast.

According to the Federal Trade Commission (FTC), these types of "fake invoice" scams are common tactics used against small businesses because they often bypass the person who actually set up the technical side of the shop. You can read more about identifying these deceptive marketing practices on the FTC website.

The Two-Minute 'Whois' Hack

You don't need to be a computer programmer to find out who actually owns your domain. You just need to use a tool called the ICANN Lookup (formerly known as Whois). ICANN is the non-profit that oversees the world's domain names.

Here is how to verify your domain in under two minutes:

1. Go to https://lookup.icann.org/.
2. Type your website address (like mybusiness.com) into the search bar.
3. Look for the "Registrar Information" section.
4. Check the "Registry Expiration Date."

What this means for you: If the letter in your hand says your domain expires next week, but the ICANN lookup says it expires in eight months, throw the letter in the trash. If the letter is from "Domain World" but ICANN says your registrar is GoDaddy or Google, it’s a scam.

How to Protect Your Cash Flow

Domain slamming isn't just about paying too much once. If you sign those scam forms, you might accidentally authorize a "transfer." This moves your domain away from your safe, cheap provider to a company that might charge you four times the market rate every year.

To keep your money safe, follow this checklist:

• Turn on Auto-Renew: Most legitimate registrars (like Porkbun, Namecheap, or Google) allow you to keep a card on file. This prevents the domain from ever actually expiring.
• Use Domain Privacy: When you register a domain, your name and address go into a public database. Scammers scrape this list to find your mailing address. Paying for "Whois Privacy" (often $0 to $10) hides your info from the public.
• Verify the URL: If you get an email about a renewal, don't click the link in the email. Instead, type your registrar's website directly into your browser and log in there.

Why the Scam Works

These companies use names that sound official, like "United States Domain Authority" or "DNS Services." They know that if you are a 4-person print shop or a solo bookkeeper in Tampa, you are worried about the technical parts of your business breaking.

Always remember: your domain registrar will never send you a paper bill through the U.S. Mail unless you specifically requested it. Everything happens through your online account.

If you have already paid one of these fake invoices, contact your bank immediately to dispute the charge. You can also report the fraud to the SBA's fraud reporting channels if the scam involved any misrepresentation of government affiliation or business status.

Staying organized is your best defense. Keep a simple spreadsheet or a folder in your inbox labeled "Business Tech" and save your original receipts there. When a weird bill shows up, you’ll know exactly where to look to prove it’s a fake. If you are still setting up your digital footprint, you might also want to Set Up Your First Professional Google Workspace in 30 Minutes to keep your business communications separate from your personal life.

---

📋 Disclaimer

This article is for informational purposes only and does not constitute legal, tax, financial, or professional advice. Laws and regulations change frequently, and the information presented may not reflect the most current legal developments. Always consult with a qualified professional (CPA, attorney, financial advisor) before making business decisions based on this content. MyBizNerd may receive compensation through affiliate links, but this never influences our recommendations.

---